LunarDAO Manifesto

The Leviathan

Information is power. Privacy and transparency are two antithetical dimensions of information. Transparency must apply to those in power, to lay open their machinations and hold them accountable. This includes any government, supranational entity, corporations and conglomerates. Privacy is for the people, to prevent the agents of power from intruding in the innermost parts of our individual and social existence.

The mouthpieces of the surveillance state claim that our sanctuaries and agoras are enabling criminals to sell drugs, weapons and human beings, and laundering money through cryptocurrencies. They use this as an excuse to block our access to DeFi and privacy tools and limit our autonomy. All the while the crimes we stand accused of are carried out day by day on a massive scale by well-connected and legally protected people, aided by national governments, their courts and law enforcement bodies. While attacking tools that empower people, they commandeer the black market and launder money through esteemed international banks.

So-called democratic nation-states openly make profit by entertaining economic relations with regimes they pretend to reject. Especially when it comes to war industry, these profitable relations are carried out against international conventions these states promoted themselves. Armaments are sold to regimes and used against civilians and liberation movements in the name of profit.

Hegemonic nation-states and their financial institutions have control over our lives. As long as we depend on their money we have no choice but to live under the dominion of empires. Banks track and control the money flow and can freeze assets at any time. They tempt us with the illusion of wealth, making us believe that we are part of the big game, when really we are expropriated. We are the yield.

Sunset

Decades ago, cypherpunks foresaw the rise of censorship and surveillance. They understood that cryptography and economic sovereignity were necessary to ensure freedom. Bitcoin created an economy outside of financial hegemony and made it possible for people to regain agency.

Today that is no longer enough.

Crypto’s resistance to capture makes it a target. And so the surveillance state is on the attack. It has already started to make our software illegal. We are forced to self-regulate to survive. Anyone who falls into this trap has already lost.

Over the years, the voices upholding the cypherpunk mission have become fewer and quieter, drowned out by a flood of easy money. The advocates of crypto's liberatory mission lack unity as well as strategy.

LunarDAO provides such a strategy.

Midnight

There are no institutions in this world that safeguard freedom. Those that try to are being denounced as criminal and terrorist, co-opted, marginalized and violently crushed. The existing establishment only maintains and intensifies our enslavement. We, the people, must create new worlds to live a free life. Many others before us have attempted to do so, and important contributions have been given by freedom fighters. We walk on this path remembering and celebrating this heritage and forging alliances with others struggling for liberation. We recognize the contribution done by the team of Wikileaks, which has stripped the American government of its historical immunity and shed light on the dark affairs of world powers. The United States, eager to deny the right to privacy of their citizens, are now persecuting Julian Assange for unmasking their own crimes.

While trying to regulate their internal markets and imposing strict surveillance over the economic activities of their own citizens, countries like France have developed unregulated markets in former colonies that are crippling local economy. An exemplary case is the French sabotage in Guinea; after the former colony declared its independence, France, led by De Gaulle, counterfeited the new Guinean Franc in order to trigger an economic crisis and cast down the elected leader Touré, as testified by former French secret services agent Maurice Robert. The colonizers didn’t succeed with getting rid of Touré, but managed to damage the Guinean economy enough to ensure dependency on France. Guinean case is particularly symbolic for French policies in the former colonies of West Africa, where economics has been weaponized against local people to keep them enslaved.

This and others crimes are daily committed with impunity by authorities that persecute, torture and imprison people building concrete alternatives of free life.

This is the case of Ross Ulbricht, among others. Creator of Silk Road, an anonymous e-commerce website, Ulbricht has been sentenced to an unjustifiable two life sentences and more, without parole, because some users used the marketplace to sell and buy illegal goods, mostly cannabis. The fact that one of the drug sellers has been condemned to five years makes if crystal clear that Ulbricht has been turned into the scapegoat of the United States’ war against privacy, to spread terror and deter the online community from searching for alternatives to surveillance.

Economy is being weaponized in Iran against women struggling for their freedom, as Iranian government is threatening to freeze the bank accounts of those who refuse to adhere to the law imposing hijab. As economic warfare is a common practice of the nation-states to impose their domain, building tools and platforms to guarantee economic freedom is a crucial struggle.

Organization is the key to self-defense, and self-defense is necessary to live. So believed J-Stark, 3D printing pioneer, who lived by the slogan ‘live free or fucking die’. He did die for freedom – he was murdered by German police, guilty of giving people a 3D technology that deprived the state of its monopoly on weapon production. We celebrate his legacy, and recognize a society’s right to self-defense against exploitation and occupation.

Since the dawn of the oppression of the state, free societies have armed themselves and resisted. Countless have died to protect the free life of humanity, and great victories have been achieved. But we slowly lost ground. State civilization has imposed its own narrative, casting the memory of democratic resistance in the shadows of the past - but our legacy has never disappeared. Although at constant risk of being erased and forgotten, it still continues in the resistance against occupation, fascism, patriarchy and ecocide. It has flourished over the millennia in the uprisings of peasants against landlords, in the knowledge of the witches, in the nomadic tribes refusing the institutions of power. The spirit of freedom that inflamed Tiananmen Square and the people of Falluja is a source of hope in Jenin and Kobane. The great battles of the past are the urban guerrilla of today. Everywhere, David is striking back at Goliath.

Ruling elites have robbed society of its knowledge, its memories and its dimensions. They have monopolized economy, depriving it of its original meaning, rewritten history and deviated the noble purpose of science. The greed of the oppressors is pushing technology, one of the spearheads of humanity’s knowledge, into degeneration. As they weaponize technology to enforce oppression, we are committed to using our skills to promote liberation.

This is why lunarpunks gather in the periphery rather than the center. We make our home in moonlit forests of encryption outside the reach of the state. We refuse to leave our protection in the hands of governments and Big Tech. We consider self-defense to be everyone's responsibility.

Rulers maintain authority by keeping people isolated. When we are alone, we cannot build the strength to change our realities. That is why lunarpunks are not content with the modern mirages of individual liberty. We form squads, clans and communities and fight for collective liberation.

Moonrise

Freedom can only be found outside the logic of domination. Self-defense requires a philosophy rooted in liberation and adequate tools. We must bypass the all-pervasive mindset of submission and obedience. Lunarpunk forest is a sanctuary where society can redefine itself, self-administrate and regain its economic, political and moral agency. As our community grows, we witness how society can truly flourish only when free from state. But in order to protect ourselves and our communities from oppression, we need to practice self-defense.

Decentralized, private and anonymous networks are fundamental for communities to defend themselves. Self-defense requires control over information, infrastructure and material resources. Lunarpunks use zero-knowledge cryptography to create a shield of privacy and anonymity that enables communities to operate without persecution by the state.

The aims of LunarDAO are:

• Enable parallel confederated societies that are diverse and autonomous but mutually protect each other against central authority.

• Learn, educate, share knowledge. Education is fundamental in our struggle for free life, autonomy, and community.

• Develop infrastructure for economy and politics beyond the state, that is uncensorable, sovereign and anonymous. Expand the dark forest.

LunarDAO invests in privacy projects and anonymity-oriented tooling for the lunarpunk society. By prioritizing technical excellence, practicality and an uncompromising philosophy of freedom it creates value building towards a self-sustaining antifragile ecosystem. We believe that lunarpunk is not something distant. It is available to anyone who is ready to make a choice: to let nation-states control our lives or to join the fight for freedom.

Anyone can join LunarDAO and start a new investment project or take part in an existing one. Learn how to use free software and privacy tools, extend the reach of infrastructure, exit Big Tech and the surveillance state, learn programming, study economics and build the counter-economy.

Sunset has arrived. The moonlit night is coming.

Moonlight, or the lunarpunk future

In the darkness of the night, the forest of encryption is alive. Many tribes have found a sanctuary under the thick branches of its trees. Societies are regaining their strength, and free life is being built under the gentle light of the moon. Outside of the forest, war is raging. Nation states are in conflict with one another, ecocide is being perpetrated against nature, and repression strikes those who struggle for freedom. The more the agents of the state attack, the more individuals and groups escape the scorching sun of surveillance and seek refuge in the moonlight of anonymity. Societies, finally aware of themselves, defend their forest through cyber-guerrilla and regain territory. A new moon shines on earth.

Governance

Access to resources is fundamental for everyone. Crypto provides the means for people to have power over their own resources. The concept of a DAO has been battle tested in all kinds of forms. LunarDAO aims to learn from the experiences of those before us. There is no single perfect format and stagnation leads to a dead end. A main limitation when pushing for changes is an inability to imagine the world we want to build. With curiosity, the frame of DAOs offers vast possibilities for progress and expansion. Anyone can join LunarDAO. It is a space where lunarpunks can come together, share ideas and knowledge, initiate and support projects, and build liberating tech in pursuit of autonomy.

Community

A Community member is anyone who sees themselves as a part of the DAO mission; participates on the forum, ircd, telegram and contributes to the development of the DAO through work or by sharing experiences, resources and proposals. No token is required to be a part of the community. Community members have no voting power.

Squad

A LunarDAO Squad member is every community member who owns $VOX (shares). During fundraising event, anyone who buy $VOX can become a squad member. The minimum tribute is 0.1 ETH. $VOX represent the member's share of the treasury as well as voting power. LunarDAO Squad members can exit the DAO with their funds at any time through ragequit.

Voting

LIP (LunarDAO Improvement Proposal) is the basis of governance in LunarDAO. Anyone can share and discuss proposals on the forum. Only Squad members can submit and vote on proposals. In LIP-0001 there is a template and further information on the expected content and process.

The sponsorship threshold is a minimum number of $VOX (10 $VOX which equals 0.1 ETH at launch) which is required to submit a proposal. This deposit is returned when the proposal have been accepted or rejected. Anyone else can submit a proposal by acquiring a sponsorship by offering a fee of 0.2 ETH which is non refundable and will be sent to the DAO treasury.

Proposals should be shared a week before the vote. Voting is open for 72h. The proposal is approved if 50% + 1 $VOX of the voting amount vote for, else it is rejected. It can also be rejected if Sentinels deem the proposal to be malicious. Voting is followed by a Grace period of 72h, during which squad members can ragequit should they disagree with the result of the voting.

Delegation

Delegation is included in Moloch V3. Any Squad member can delegate their voting rights to others, whether they are DAO members or not. By doing this, the member no longer have governance rights, and cannot sponsor proposals. The delegate, if previously not a squad member, will become one and just like before $VOX (shares) will represent a share of the treasury as well as voting power.

Minimum retention

To prevent dilution of assets, minimum retention is 33%. That means that if 33% of shares ragequitted a proposal during the grace period, the proposal will fail automatically as the original circumstances when the proposal was submitted, including access to funds, has changed dramatically. The squad can re-submit the proposal if they want to vote on it with the new circumstance.

RageQuit

Ragequit enables squad members to exit with their funds, without penalty, if they do not agree with the result of a vote, or if they no longer want to be a part of the DAO. The designated time period in which members can ragequit after voting is called Grace period. Ragequit is possible no matter what the squad member voted on the proposal. This is an important function against malicious proposals and also a minority protection. With this function, all members are incentivized to bring forward proposals which are aligned with the community sentiment.

Grace Period

The Grace period, which is 72h, is the time period during which members can Ragequit if they disagree with the result of a vote. At the end of the Grace Period, the proposal which has been voted on is processed by calling the processProposal function. It is the responsibility of Stewards to call this function.

GuildKick

Guildkick allows the squad to remove a malicious member by forcing the them to ragequit. This is done by submitting a proposal which is then voted on. If this proposal is accepted by 50% + 1 $VOX, 100% of the shares owned by the squad member who is guildkicked is converted to loot and the member lose their voting power.

Committees

Committees in LunarDAO are groups within the community that aim to facilitate and coordinate the works of the DAO according to their specific focus. The committees presented below were chosen during the intial development because they are fundamental to the DAO. At any point, after the launch, new committees can be proposed or an existing one can be archived if the community deems it's needed (this operation is also done through LIP and voting).

The committees autonomously decide who can join. In every committee there is one person responsible for communication, who can be contacted if a member wants to get engaged. The committees decide their own work flow and formulate expectations, objectives and key results within the committee.

All committees give information about the ongoing works in the community meetings and are receptive to input and criticisms. Every three months each committee will submit a report to the community about the ongoing works.

Stewards

LunarDAO Stewards (LunarDAO core team) is a committee dedicated to support and guide the essential works of the DAO. Initially, at launch, they include founding members of the DAO. The number of Stewards should not be less than three and no more than ten. The LunarDAO Stewards responsibilities includes, but are not limited to:

• Operations
• Administration
• Community management
• Information: Making sure all other DAO members are aware of proposals and are notified in time to be able to participate in voting
• Implementation of community decisions
• Investment communication & coordination
• Partnerships & Networking
• Legal advice coordination
• Media & Presentation

Stewards have a separated 3/6 multisig for their operation. Fees of 0.25% from tribute and 0.5% per executed investment are sent to this wallet. Any other funding and budget has to be proposed via investment LIP and voted upon as any other proposal. Stewards' wallet: 0xab501a8eb58c9780eb04d683feb504fce391a2dd

How to become a Steward

To become a Steward any member can write an LIP and propose to join. This follows the same governance process as any other LIP, steps are shared in LIP-0001. The proposal can include interests, experiences as well as expected level of commitment within the DAO, ideas and suggestions which can support LunarDAO mission as well as initiatives and activity of the member within the community.

Media

The Media committee is responsible for updating the web page and twitter. The media output is in accordance with LunarDAO mission, decisions and development. The committee can also coordinate and recruit members for media productions based on LunarDAOs mission and goals, participate in interviews or initiate media works that are beneficial to the DAO. Community members can post on the forum if they want to join the Media committee.

Research

The Research committee conveys research about privacy and anonymity projects and tools. This research can serve as a basis for evaluation of investment LIPs for the DAO and as a resource for the community. Community members can post on the forum if they want to join the Research committee.

Education

Education is fundamental in the struggle for free life, autonomy, and community. It is vital to train guides by providing knowledge, skills and build confidence. LunarDAO is in a trust based partnership with Adalan Academy and aim to support their development. The initial focus of this decentralized virtual academy is to offer courses in programming, economics and political philosophy. Some of the outcomes are creation and translation of education material, texts and resources. The long-term objective is being able to educate the new generation of lunarpunks.

An essential part of education, and included in the roadmap, is collecting, researching and sharing tools and resources that are privacy oriented. This includes creating opt out manuals that provide the means to exit surveillance society and develop parallel structures that are decentralized and expands our freedom.

Sentinels

LunarDAO Sentinels is a committee with a role of a treasury veto agent. It is a multi-sig Gnosis Safe with eight members in total. The DAO flow of proposal, vote, and execution is done fully on-chain and without any interaction or approval needed by Sentinels. However, the Sentinels are the last fall back solution as they can reject a malicious proposal even if it has been approved by the community. Five are needed to execute a decision.

A malicious proposal can include:

• Proposals which are harmful to LunarDAO mission and goals.
• Proposals which are supporting centralization and hegemony.
• Proposals which are supporting surveillance projects or measures.
• Proposals which are supporting regulatory measures.
• Proposal which are suspected of/or exposed as having malintent ie. a quickly pushed proposals which aims to drain the treasury.

If Sentinels reject a proposal, they are expected to share a report which include the motivation for this decision before the next community meeting after the event. The decision and content of the mentioned report will be included, discussed and evaluated in this meeting.

The suggested time frame to be a multi-sig participant is two years. The transfer will happen when there is someone who can take over when the time is due and is not a rigid measurement. To rotate responsibilities to new Sentinels supports a level of diversity of thought in this important governance responsibility.

As a part of the roadmap the squad will vote if to continue to have a multi-sig based treasury or move to a complete trustless setup after the DAO launches.

Sentinel members

Builders and teams in our ecosystem of privacy oriented projects are often public, using known pseudonyms, and are recognized in crypto communities. In 'Why anon' we explained why anonymity and privacy are not only important for lunarpunk movement, but also the only choice for the Stewards (core team/ founders) of LunarDAO.

To build trust, and decentralize, the DAO is collborating with six Sentinels who are not core-members. The Sentinels are:

1. Mario Havel; Bordel hackerspace, Paralelní polis.

2. Mykola Siusko; Web3 privacy now, Pagency framework.

3. CR1337; Navcoin, Scala.

4. Auryn Macmillan; Gnosis Guild.

5. bZ; AssangeDAO.

6. Yves Edwards; FIAT LUX Podcast.

7. Steward Anon 1; LunarDAO.

8. Steward Anon 2; LunarDAO.

These are guidelines to support Sentinels in their responsibility. It is the responsibility of the whole community to support the governance process, in which the forum discussion is an essential part. This ensures democratic governance and gives opportunities for feedback on proposals before initiating voting. Through the LIP process, if LunarDAO Community and Squad members have expressed criticisms and evaluated a proposal to be non-aligned with community sentiment or otherwise unsupported, the author should consider re-writing the LIP or decide to not proceed with voting.

Governance process

• LIP (LunarDAO Improvement Proposal): A proposal is created using the template in LIP-0001.
• Forum discussions: A thread is created on the forum, where the LIP can be discussed. The proposal should be announced at least 7 days before voting.
• Voting: A proposal is submitted on-chain and the voting is opened for 72h.
• Grace Period: Follows voting for another 72h. Members can exit the DAO with their funds if they don't want to be affected by the decision.
• Execution: Proposals are submitted on chain, hence the changes will apply automatically with pushing the execution button. - If unrelated to treasury: Stewards update the documents.

The LunarDAO governance is not limited to LIPs or voting, decisions are also made in the community or committee meetings. Voting in LunarDAO is the practical implementation of the willpower of the community. The decision making process is not something technical and cannot be separated from our communication/interaction on the forum and on ircd. It is important to always seek discussion and encourage diversity in opinions within the community. This will aid our development in building a truly decentralized, anonymous and antifragile organization.

LIP

Follow LIP repository to see the current LIP.

LIP-0001

LIP stands for LunarDAO Improvement Proposal. The LIP document is the primary mechanism to inform LunarDAO community about new proposals. These LIPs may propose changes in governance, guidelines, or rules and serve as the main reference for investment decisions. The LIP is a concise, explicit and technical specification on how to submit a proposal. The initial LIP template is LIP-0001, which include the content below. In the future this might change as the community offers new proposals.

LIP Categories & Types

Note: LunarDAO is based on Moloch V3 DAO primitive, deployed by DAOhaus. The UI by default has proposals divided into 'Basic' and 'Advanced' categories. This is a generic DAOhaus admin setup to help users understand the proposal complexity.

LunarDAO proposals have two categories: Governance and Investment. If a squad member wants to submit an LIP, which does not concern funds, it is a Governance category. LIP concerning funds falls under Investment category. The LIP types are listed below each category.

Governance:

• Signal request
• Update Governance Settings
• Update Token Settings
• Add Shaman
• Remove a Member
• Multicall proposal builder
• Add Steward

Investment:

• DAO Token request
• DAO Token Swap
• ERC-20 Token Transfer
• Network Token Transfer
• Use Wallet Connect

LIP status

The status of an LIP is one of the following.

Proposal: The LIP is shared on the forum and a discussion in the community is initiated. The author can share perspectives and motivations for the proposal with the community and answer questions. The author will develop the proposal based on community's feedback.

Accepted: 50% + 1 $VOX of the voting amount is needed for a proposal to be approved. An accepted proposal which concerns treasury or on-chain governance (DAO settings) can be executed directly after the Grace period. Stewards and LunarDAO committees are responsible to coordinate the implementation and inform the community (update the documents).

Rejected: If less than 50% + 1 $VOX of the voting amount vote yes, or the Sentinels based on given criteria deem the proposal to be malicious, the proposal is rejected.

If LunarDAO Community and Squad members have expressed criticisms and evaluated the proposal to be non-aligned with community sentiment, the author should consider re-writing the LIP or decide not to proceed to voting.

Voting

The following steps are needed before proceeding to voting.

• Submit the finalized LIP, including the date and time of the vote.
• Update status and vote date in the header.
• The sponsorship threshold (a minimum number of $VOX) is 10 $VOX (0.1 ETH at launch) is required to submit a proposal. This deposit is returned when the proposal has been accepted or rejected.
• Anyone else can submit a proposal by acquiring a sponsorship by offering a fee of 0.2 ETH which is non refundable and will be sent to the DAO treasury.
• The vote is open for 72h, after which there will be a grace period of 72h when any member can ragequit if they disagree with the outcome of the vote.

Template for proposals

Every LIP draft should contain these parts.

Header: Includes title, LIP category & type, contact, date, status, vote date. The status and vote date must be updated in the final version of the LIP.

Summary: A short description of the proposal. Reference to previous proposals.

Some LIPs will be continuously developed, such as LIP-0001. In these cases, for transparency and context, the author shall write a reference to the previously accepted proposal by using the LIP number.

Problem: Describe why the proposal is needed.

Solution: Describe the proposal and what solutions it will bring for lunarpunk communities.

Implementation: What resources or actions are needed to be able to implement the proposal.

Community input: The final version of the LIP, before voting, must also contain a link to community discussions on the proposal.

An LIP which is category Investment, afforementioned, also needs to include the following:

Note: We use place holders X for the supported project and Tx for their token.

1. Name of the project
2. Date
3. Project X's value to the ecosystem (problem solving, new primitives, tools, knowledge, monetary etc)
4. Requested size of support in USD terms
5. Offered amount of Project X tokens Tx and price per USD (if the project is monetary based)
6. Trigger event: Tokens Tx will be send to LunarDAO treasury/Time period needed for execution or expected time of launch (when Tx becomes liquid)
7. Is the team X supported by private investors or VCs, other DAOs (or plans to) or just LunarDAO?
8. If yes: In which size and what is the price of token Tx to other supporting subjects?
9. If project X is token based: Tx tokenomics/release schedule
10. Project X's wallet address to recieve the support
11. LunarDAO treasury address to recieve token Tx in agreed time, amount and price: 0x59f77dc848c2e45b5954975ee1969e7a22fa25f6

Style

• The LIP shall be written in Markdown format.
• Contact refers to the authors nick on the community forum, Discourse.
• The header shall be written in the following format, including the points below.

title: LIP-<number>
LIP category & type: <governance/investment>/<type>
contact: <forum_alias>
date: <date created on, in ISO 8601 (yyyy-mm-dd) format>
status: <proposal/accepted/rejected>
vote date: <in ISO 8601 (yyyy-mm-dd) format>

Abstract

LunarDAO is an investment fund based on lunarpunk philosophy. By allocating funds in privacy projects & anonymity tooling we aim to expand freedom and ensure sovereignty. Squad wealth leverages collective strength and capture value in the ecosystem by building a portfolio of privacy assets. Anyone can exit at any time. Members are anonymous hence can participate in building this vision without fear of frozen funds, legal implications or any kind of repression. We aim to move to a full anon setup and develop infrastructure for a parallel economy outside of control and centralization.

LunarDAO's supports research on privacy technologies, listed in the wiki, and education structures such as Adalan Academy, where people can acquire knowledge and master skills in programming and economy while developing a philosophical frame to generate the future path of lunarpunk ecosystem.

Preface

The moon symbolizes many things, among those transformation and life, strength and power. To develop life means continuous transformation. Life that is stagnant will cease to exist. LunarDAO is one part of the expanding forest against surveillance society. It was created out of necessity, but lunarpunks existed long before this DAO. The regulatory changes incentivize us to organize our defenses with more persistence. We constituted LunarDAO, because we believe in community, decentralization, individual responsibility and contribution to a common mission. LunarDAO is a community directed by Lunar Squad. It is a practical application of lunarpunk narrative.

Decades ago, cypherpunks foresaw the rise of censorship and surveillance. They understood that cryptography and economic sovereignty are necessary to ensure freedom. Bitcoin created an economy outside of financial hegemony and made it possible for people to regain agency. Over the years, the voices upholding the cypherpunk mission have become fewer and quieter, drowned out by a flood of easy money. The KYC regulated crypto diverged from that foundation. The advocates of crypto's liberatory mission lack unity as well as strategy.

LunarDAO provides such a strategy.

The more regulation is imposed on people the bigger is the thirst for anonymity and privacy. The development of anonymity and privacy results in stronger regulation. This loop is inevitable. Instead of closing our eyes to this reality, we choose to expand the forest and build a sanctuary where society can redefine itself, self-administrate and regain its economic, political and moral agency.

Read LunarDAO full manifesto.

Mission

LunarDAO mission is the manifestation of lunarpunk vision which enables the forest to expand. In practice LunarDAO:

• Invest in privacy and anonymity tech and infrastructure.
• Research and share information on privacy projects.
• Support education initiatives aligning with LunarDAO aims.

Investment Thesis

LunarDAO is an INVESTMENT FUND INTO PRIVACY PROJECTS & ANONYMITY TOOLING, a squad wealth based DAO spreading Lunarpunk narrative, philosophy and building infrastructure.

Problem

Anonymity and privacy oriented developers will face an increasing difficulty in finding support among traditional VC's and investment funds, because of regulatory measures. This will lead into a dynamic where the developing teams will be forced to sell their work underpriced to counterparties who don't share the same vision. This scenario portrays privacy as a taboo, developers are under stress and value is extracted from the ecosystem.

We don't accept the future to be so grim. The prospect of privacy is ultimately bullish. LunarDAO offers a solution.

Solution

We form a decentralized squad of sovereign individuals and lunarpunks, to allocate resources together and assemble squad wealth. The DAO leverages collective power and becomes an investor. The community discusses which tools are needed to empower the ecosystem, the research committee looks for the solutions, and lists them in the Investment Portal. The Squad members vote on the proposals and invest in the chosen projects.

Gains

• The privacy projects will get support from a decentralized, anonymous organization, aligned with their mission.
• The teams will be provided with the needed resources to develop, grow and deliver.
• LunarDAO Squad is a privacy investor building a treasury (portfolio) of accumulated privacy assets.
• The value is conserved in the ecosystem, both parties profit from the upcoming lunarpunk cycle.
• While leveraging collective power, every individual is protected against majority rule and can exit the DAO any time with 100% of their shares (without any fee).

For the current list of primitives and projects discussed as possible investments, visit our Investment portal.

We believe that the loop of tightening regulations and growing demand for privacy and anonymity is inevitable, these events will happen with or without us. We can strenghten the ecosystem, capture the value and grow squad wealth, or be left out in the desert with regressive regFi.

Knowledge as a Value

The privacy investment sphere is LunarDAO's main focus. At the same time we see education as an essential value to fulfill our mission.

The DAO creates possibilities for technical literacy by building research and wiki and supporting educational structures such as the partnering project Adalan Academy, where people can acquire knowledge and master skills in programming and economy while developing a philosophical frame to generate the future path of lunarpunk ecosystem. Such education empowers the community and shape thinkers, who bring value back to the ecosystem. Education is a long-term investment.

LunarDAO Architecture

LunarDAO architecture is based on Moloch V3 design, deployed by DAOhaus and customized to fit LunarDAO governance.

The design puts an emphasis on anonymity combined with permissionless entry for the initial Squad formation. Both are essential for a privacy oriented investment fund which aims to develop infrastructure for parallel economy.

Contracts

LunarDAO Treasury: 0x59F77dC848C2E45B5954975ee1969e7A22fA25F6
Moloch V3 DAO (LunarDAO Governance): 0x747DA68Facd1459E9D9b8f928418DA30769D3Ba1
Sentinels' Safe (5/8 multi-sig): 0x622066aBA170c185c28cED6E7ccd1cB2047ef6ef
LunarDAO Stewards' Safe (core-team, founders): 0xAb501a8Eb58c9780eb04D683feB504fcE391A2DD
$VOX (voting token/treasury shares): 0x33e6ded5073f512475e17b5f19dda90d9a782478
$VOX-LOOT (non-voting token/shares): 0x94fadf770e44b7bc872fc712e4ba6aaf096fcba7
Genesis Event Onboarder Shaman: 0xFd7f0D849c1820F066aD1DEa8c8B90A59cA51Ef0

On-chain vs Multi-sig

As mentioned in the governance chapter, LunarDAO deployed a Sentinel multi-sig as a veto agent. At the same time the DAO architecture itself is based on Moloch V3 primitive with a full on-chain execution. This contradiction is solved by a design where the main LunarDAO treasury is a Gnosis Safe with two signers of which only one is needed for an execution (1/2). The two signers are:

1. LunarDAO Squad: a Moloch V3 DAO, 0x747DA68Facd1459E9D9b8f928418DA30769D3Ba1
2. LunarDAO Sentinels: Gnosis safe (5/8) multi-sig

In this setup all the proposals are submitted, voted upon and (after grace period) executed on-chain without any Sentinels interaction. Only in the case of a malicious proposal, the Sentinels can step in and reject the proposal. Five Sentinel members must sign a veto in their safe in order to make such execution in the LunarDAO treasury.

Moloch v3

Based on the discussions with the allies & the community, the most feasible way for the LunarDAO architecture to meet its aim, was chose MolochDAO V3 primitive, designed by DAOhaus and customized to fit LunarDAO governance architecture. The Moloch V3 contracts have much more optionality on both the initial setup and throughout the DAO life time in comparison to Moloch V2. V3 is also easier to set up and launch upon, using existing UI and implement changes on the fly, in a more democratic manner (based on community discussions and squad vote).

Anatomy of a Moloch V3 DAO in DAOhaus. Courtesy of DAOhaus

Terminology

For full description read Governance above.

• Community: Anyone engaging on the forum & chats. To be a member of the community does NOT grant voting/governance power.
• Squad: DAO members holding shares, voting power.
• Sentinels: Eight guardians (multi-sig) of the DAO treasury.
• Stewards: Anonymous core-team/founders of the DAO, securing operations (can be exchanged, archived, scaled up).
• Committees: Working groups with a specific focus (research, media, education).

Tokenomics

Every point marked with * symbol is to be further evaluated and decided upon by the initial LunarDAO Squad formed by all participants of the first launch, also referred to as a Genesis event.

Setup

• LunarDAO is setup on top of the Gnosis safe multi-sig. The DAO start with a trusted (and more secure) setup and plan a roadmap milestone to discuss, propose (LIP) and vote on a multi-sig removal in a forseeable future -> full trustless setup. *
• LunarDAO is launched on existing contracts and customized version of the UI by DAOhaus.
• Further upgrades and customization will be discussed in the community and voted upon by the Squad.*

Joining the DAO

• LunarDAO launch is permissionless in the sense that anyone can join/invest.
• Members can only join during period of the fundraising events.
• A minimum tribute to join is 0.1 ETH.*
• The initial fundraising event is the launch of LunarDAO and will be opened for a period of two weeks.

Governance Token

LunarDAO Shares are represented by the symbol $VOX.

• 1 $VOX is an equivalent to 1 share.
• $VOX is LunarDAO governance token.
• Minimum of 1 $VOX grants squad membership and voting power.
• $VOX is an account bound, non-transferable token.
• Every 0.1 ETH of tribute to the treasury mints 10 $VOX (-0.25% admin/management fee) to the member (at launch, future entry price may differ based on the previous investments made).
• When a member ragequits their $VOX is burned.
  • $VOX value in the treasury stays the same for remaining members.
  • Ragequitting member gets 100% of their funds with no extra fee.

LunarDAO Loot

Loot represents members' value of shares in a non-voting form.

• 1 $VOX-loot monetary value = 1 $VOX (as both are shares of the DAO treasury)
• Symbol $VOX-loot represents loot.*
• $VOX-loot does not grant voting power.
• $LUNAR (community) token is not introduced at launch. It will be designed and introduced as part of the roadmap.*

Token Value

• $VOX and $VOX-loot monetary value is equal. They both represent 1 share of the DAO treasury.
• 1 $VOX (or $VOX-loot) = NET TREASURY VALUE / TOTAL AMOUNT OF $VOX (or $VOX-loot)
• The assets in treasury or existing amount of shares changes according to:
  • Investment proposals voted upon by LunarDAO Squad (the DAO members) *
  • Future fundraising events (The initial entry price is 1 ETH = 100 $VOX (shares), the future ones will be decided by LunarDAO Squad) *

Fundraising Events

• A fundraising event is proposed to take place 4x in the first year. (every third month).*
• An investment deal is expected to happen at least once before between each fundraising event.*
• If there are still unused ETH (or DAI) from the previous raise, the number of fundraising events or max cap of such event will be adjusted to this reality. *
• The fundraising is open two weeks the first time, and thereafter a week on each occation.*
• During this time anyone can become a Squad member by tributing ETH to the treasury.*

LunarDAO Operation Costs

• LunarDAO has 6 Stewards (core-team members, founders) at the time of launch.
• Several externals are supporting with design, administration, legal questions, web3 development and translations.
• A management/admin/dev fee is sent to core-team multi-sig wallet (ETH: 0xAb501a8Eb58c9780eb04D683feB504fcE391A2DD). Management fee calculation:
  a) Entry: 0.25% from the initial tribute of every new member.
  b) Investment: 0.5% of every investment execution (after vote + grace period). *
• To fund further expences and costs an LIP is submitted and voted upon.

Fund Management

LunarDAO makes investments in privacy projects through the governance process, which includes research, discussion, proposals and voting. The Squad allocates funds to selected teams while building a treasury of its investments. There are several ways how to approach treasury management and govern the funds. For easier understanding we summarized them under two main types: Portfolio (or Investment club) and Syndicate. These two approaches are explained with examples below.

After the genesis event (LunarDAO launch) the default approach to fund management is PORTFOLIO. However the Squad can decide to create separated guilds. To prevent disadvantage of old members' investment dilution, a bonding curve of 10% $VOX price increase is introduced for every new raise event. In the case of a Squad disapproval of opening a new fundraising event (to prevent dilution of past investments) and existing community wish and incentive to join the DAO, a subDAO can be established for the new raise building a separated treasury. In such scenario the different subDAOs manage their own treasuries and their management is based on the SYNDICATE model.

The following table explains these two concepts.

Table 1: Fundamental approaches: Portfolio & Syndicate

Portfolio and Syndicate fund management options are explained below, including examples.

Portfolio/ Investment Club

By default all the assets are pooled in the DAO main treasury. The new members joining are part of the same portfolio and exposed to the past investments. The Squad members can decide to set up any further guilds or sub-DAOs (just like in the syndicate design). Every Squad member can RageQuit at any time and transfer their $VOX (shares) value to $VOX-loot. RageQuited members can re-join during the next raising event.

Genesis Event: DAO launch & the initial raise

• Price: 100 $VOX (shares) = 1 ETH
• Minimum tribute: 0.1 ETH
• Fee: 0.25% from tribute, 0.5% per executed investment deal
• Permissionless entry
• Contract has an upper limit & time expiry, mints shares according to investors' tribute size. The price of everyone's shares is the same.

Example

In examples we will use place holders X, Y & Z for supported projects and Tx, Ty & Tz for their tokens. For simplicity, fees are not included in the example calculations.

In a real life scenario the amount of $VOX (shares) will be arbitrary per each member as the tribute sizes will differ. Some members will likely RageQuit with their funds during the DAOs life cycle. This example is simplified to explain the portfolio logic.

• 100 people join the Squad for 10 ETH each -> 1000 $VOX (shares) each.
• Treasury net = 1000 ETH; 100 000 $VOX (shares) was minted.
• The Squad invests 500 ETH to X in exchange for their token Tx. Deal is 1 ETH = 1000 Tx.
• No-one RageQuits.
• Treasury net = 500 ETH + 500 000 Tx, represented by 100 000 $VOX (shares).
• Each member owns 1000 $VOX (shares) representing 5 ETH + 5000 Tx.

Second LunarDAO raising event

Because the new members have access to the deals of the past, the entry price is always 10% higher than the price during the previous event. This premium rewards members who entered past deals and stayed in the DAO exposing their part of portfolio to the new members. Any old member can RageQuit before the event with their assets and re-enter with ETH again.

• Price: 100 VOX (shares) = 1.1 ETH
• Conditions and minimum tribute to be decided by the existing Squad.

Example

• 100 new people join the existing Squad -> Each of the new member paid 11 ETH -> 1000 $VOX (shares) -> 100 000 new $VOX were minted.
• Treasury has 200 000 $VOX total.
• Squad = 200 members
• Treasury net = 500 + 1100 ETH + 500 000 Tx
• Each $VOX (share) represents:
  • 0.008 ETH
  • 2.5 Tx
• Every Squad member has the same amount of shares: 1000 $VOX. Their shares representing:
  • 8 ETH (1600/ 200)
  • 25 000 Tx (500 000 / 200)
• The first 100 members paid 10 ETH each, the new members paid 11 ETH each.
• The Squad invests 800 ETH to Y in exhange for their token Ty. Deal is 1 ETH = 10 000 Ty.
• Treasury net = 800 ETH + 500 000 TX + 8 000 000 Ty
• Each member holding 1000 $VOX (shares) is an owner of:
  • 4 ETH
  • 2500 Tx
  • 40 000 Ty

Summary

• Portfolio is the default fund management setup.
• Permissionless but time & max cap limited entry.
• At any point members can exit with their funds partly or fully.
• The Squad can decide if, how and when to do next rasing events.
• A bonding curve adds 10% to the price of $VOX (shares) for every next raising event to balance investment dilution.
• Every member can add more funds during the next fundraising event.
• All Squad members share a RageQuitable portfolio together, equal to the size of their tribute.
• The Squad can decide to open separated guilds.

Syndicate

Each fundraising cycle (possibly each investment) is treated as a separated entity, unique sub-DAO. Members joining in future fundraising events share a new treasury (sub-DAO or a guild) without an access to the investments from the past. All treasury related proposals have impact only on the separated guild/sub-DAO in which the proposing Squad member is at. The management/admin fee (0.25% for new members and 0.5 per investment execution) is applied on each subDAOs.

There are cases in which all the votes across the subDAOs are seen as one DAO and vote on a decision together. In such cases the votes are counted and evaluated like if all the subDAOs were one DAO. Regardless of different investments in the subDAOs, every 1 $VOX = 1 vote. The scenarios include:

a) Overall Governance change proposal which has an impact on everyone (remove multi-sig, change number of Sentinels, change the whitepaper etc)

b) A core-team proposal to cover additional costs: If such proposal passes the payment is taken proportionally to the token weights of the subDAOs (and their members).

If less than 50% + 1 $VOX of total voting weight across the subDAOs is for the proposal, the proposal is rejected.

(Alternatively the assets can be still pooled together but an on-chain Snapshot of $VOX at the time of the investment is taken. The DAO uses proxy tokens to track who had tokens at the time of investment. This greatly simplifies raising, because every new treasury is always ETH.)

Genesis Event: DAO launch & the initial raise

• Price: 100 $VOX (shares) = 1 ETH
• Minimum tribute: To be decided as the the DAO launches as portfolio by default.
• Permissionless entry
• Contract has upper limit & time expiry. mints shares according to investors' tribute size. The price of everyone's shares is the same.

Example

In examples we will use place holders X, Y & Z for supported project and Tx, Ty & Tz for their tokens

In a real life scenario the amount of shares (the tribute) will be arbitrary per each member and some members will likely RageQuit with their funds. This example is simplified to get the understanding of the syndicate logic.

• 100 people join the Squad for 10 ETH each -> 1000 $VOX (shares) each.
• Treasury net = 1000 ETH; 100 000 $VOX (shares) was minted.
• The Squad invests 500 ETH to X in exchange for their token Tx. Deal is 1 ETH = 1000 Tx.
• No-one RageQuits.
• Treasury net = 500 ETH + 500 000 Tx, represented by 100 000 $VOX (shares).
• Each member owns 1000 $VOX (shares) representing 5 ETH + 5000 Tx.

Second LunarDAO raising event

Because the new members joining another entity, separated from the initial DAO launch treasury, raise looks the same like the Genesis Event. In such scenario each sub-DAO manages their funds on their own in parallel to each other.

Overall Governance Changes

Decisions regarding to the general governance is voted in all the sub-DAOs together and counted as one vote event.

Example

• Genesis event -> DAO launch -> 1m $VOX across 100 members
• Squad decided to not allow for future onboarding to the DAO and there is a strong community will to join LunarDAO.
• New subDAO launches -> 500 000 $VOX across 50 members
• Proposal to remove multi-sig from the DAO execution -> vote will be in the overall DAO consisting of the sum of all $VOX in all subDAOs.
• Total $VOX in all subDAOs = 150m.
• 1/3 of the members vote = 500 000 votes
  • a) 50% + 1 $VOX are for -> multi-sig gets removed
  • b) 50% and less are for -> multisig stays

LunarDAO operation funding proposal

A core-team proposal to cover additional costs for the administration, dev, ops, media, research etcetera. The proposal can be approached in two different ways:

• a) Divided budget proposals to each sub-DAO
• b) One proposal to one DAO conposed of all the sub-DAOs

a) The team divides the total sum of proposed budget between the sub-DAOs based on their weight of the given asset (ie ETH) and submits each of them as a separated proposal. The size of these proposals is calculated:

SUM(total funding proposal ETH * sub-DAO ETH weight / sumETH(all sub-DAOs))

Example a)

• Genesis event -> DAO launches -> 1m $VOX minted between 100 members (10 000 ETH).
• DAO invests in project X with 5 000 ETH -> Every $VOX (shares) represent 50% ETH and 50% token Tx.
• Squad decided to not allow for future onboarding to the DAO and there is a strong community will to join LunarDAO.
• New subDAO launches -> 1m $VOX minted between 1000 members (10 000 ETH).
• There are 2 subdDAOs now.
• The core team submits LIP to get 30 ETH funding for the work done. -> the proposal size will be divided between the sub-DAOS and voted upon by each of them separately.
• The division formula is:
  • Total ETH: SUM(all sub-DAOs ETH) = (sub-DAO1 ETH) + (sub-DAO2 ETH) = 5 000 + 10 000 = 15 000 ETH
  • Funding proposal = 30 ETH
  • Proposal to sub-DAO1 = total funding proposal ETH * sub-DAO1 ETH / total ETH = 30 * 5000 / 15 000 = 10 ETH
  • Proposal to sub-DAO2 = total funding proposal ETH * sub-DAO2 ETH / total ETH = 30 * 10000 / 15 000 = 20 ETH
• Core team submits 2 LIPs: 10 ETH to subDAO1 and 20 ETH to sub-DAO2
• Each of them vote separately according to the governance rules.
• Each sub-DAO and it's member votes as usual: 1 $VOX = 1 vote, the votes only impact the decision in the given sub-DAO.
• The core team may be supported by all, none or either of the existing sub-DAOs.
• New proposals can be submitted per governance guidelines.

b) The votes are counted and evaluated like if all the subDAOs were one DAO. Regardless of different investments in the subDAOs. The vote would have to be based on the proposed asset weight per members' $VOX (shares), ie ETH if proposal is for ETH funding:

voting SUM(ETH weight / $VOX * # $VOX)

Example b)

• Genesis event -> DAO launches -> 1m $VOX minted between 100 members (10 000 ETH).
• DAO invests in project X with 5 000 ETH -> Every $VOX (shares) represent 50% ETH and 50% token Tx.
• Squad decided to not allow for future onboarding to the DAO and there is a strong community will to join LunarDAO.
• New subDAO launches -> 1m $VOX minted between 1000 members (10 000 ETH).
• There are 2 subdDAOs now.
• The core team submits LIP to get 30 ETH funding for the work done. -> The proposal will be submitted and voted upon in the parent DAO consisting of the sum of all ETH in all subDAOs.
• As the impact per member is on their ETH, the voting power is ETH weighted
• The vote calculation from all voting members: SUM(ETH weight/$VOX * # $VOX)
  • sub-DAO1 member with 1000 $VOX (shares) = 0.5 / 1 * 1000 = 500 votes
  • sub-DAO2 member with 1000 $VOX (shares) = 1 / 1 * 1000 = 1000 votes
• In this example: Each subDAO2 member has 2x voting power per $VOX than sub-DAO1 member, as they have 2x bigger ETH weight and 2x bigger ETH exposure to than the sub-DAO1 members.
• The proposal in it's entirety either passes or not.
• If the vote passes: 30 ETH are sent proportionally to the ETH weights per each LunarDAO member.
  • 10 ETH is sent from SubDAO 1 members in total.
  • 20 ETH is sent from SubDAO 2 members in total.

Summary

• Every new raise cycle is unrelated to the previous investments.
• New subDAOs mint $VOX (shares) for the same price like the previous ones, no bonding curve.
• Old members are inaffected by the new members, no dilution, no more funds in the existing subDAOs.
• Each member can be part of multiple sub-DAOs.
• Decisions regarding the general governance is voted in all the sub-DAOs together and counted as one vote event.
• Core-team additional funding: Possible options to make one all-DAO proposal or divide them per sub-DAOs and their ETH weights.

Investments

See LunarDAO Investment portal for current updates related to investments.

To support privacy projects by investing in them is the main purpose of LunarDAO. Planting seeds for the lunarpunk dark forest of cryptography, autonomy and users' knowledge. To choose meaningful projects and help them grow is vital. A reward for the LunarDAO community is the shared value of these projects in the form of their token and the knowledge and tools they build. It is a mutual harmony in which the growth of one empowers the other and vice versa. This symbiotic relationship slowly but steadily replaces the bare desert of surveillance and hegemony.

Investment Flow

Note: We use place holders X for the supported project and Tx for their token.

Project X is proposed to be financially supported by LunarDAO in exhcange for # of Tx tokens or any other value to the lunarpunk ecosystem. After a community discussion and research an investment LIP is submitted. In this LIP must be clearly defined:

1. Name of the project
2. Date
3. Project X's value to the ecosystem (problem solving, new primitives, tools, knowledge, monetary etc)
4. Requested size of support in USD terms
5. Offered amount of Project X tokens Tx and price per USD (if the project is monetary based)
6. Trigger event: Tokens Tx will be send to LunarDAO treasury/Time period needed for execution or expected time of launch (when Tx becomes liquid)
7. Is the team X supported by private investors or VCs, other DAOs (or plans to) or just LunarDAO?
8. If yes: In which size and what is the price of token Tx to other supporting subjects?
9. If project X is token based: Tx tokenomics/release schedule
10. Project X's wallet address to recieve the support
11. LunarDAO treasury address to recieve token Tx in agreed time, amount and price: 0x59f77dc848c2e45b5954975ee1969e7a22fa25f6

LunarDAO Squad votes on the proposal of investment (see Governance for more details). Project X escrows the promised tokens to LunarDAO treasury as a part of the on-chain proposal, or in case of an illiquid (yet) token Tx, a SAFT NFT (under construction) will be minted by Project X for LunarDAO in exchange for the support sent to the project X's wallet address.

Conclusion

LunarDAO is an anonymity-first organization. However our mission is bigger than that. With the objective to build a strong united Squad accountable to the common mission and shared wealth. Looking into investment DAOs based on Moloch V1 & V2, listening to the allies in chats and multiple meetings with builders, we believe that LunarDAO should not kick-off as an experiment, instead start on well tested mechanisms.

The Portfolio and Syndicate fund management options are perhaps the largest question to be continuosly discussed. We believe that the launch may be easier and more interesting with the Portfolio option as a default, which leaves the door open for anyone to join the Squad and decide in the future how to manage further fundraising events, guilds, sub-DAOs and all the changes.

We would like to remind all the participants to protect themselves and read our docs on anonymizing assets and use Aztec or TornadoCash mixers, ensure network protection and change RPC as a basis to join LunarDAO.

SUPPORT THE DEVELOPMENT OF LUNARDAO ARCHITECTURE!

Resources & References

• LunarDAO web
• LunarDAO wiki & full manifesto
• LunarDAO: Why are we anonymous
• LunarDAO: Roadmap
• LunarDAO: Multi-sig Anouncement
• LunarDAO: Investment portal
• LunarDAO architecture discussion
• DAOhaus Moloch 3 infrastructure
• DaoHaus Baal Github - Moloch V3
• Baal docs - Moloch V3
• Moloch Baal - V3
• DaoHaus
• Summon a DAO

Nym Exit Gateways

As a part of our mission LunarDAO aims to:

Develop infrastructure for economy and politics beyond the state, that is uncensorable, sovereign and anonymous. Expand the dark forest.

To walk the talk, we lead by an example. Our first milestone to establish such infrastructure in an anonymous and distributed fashion is to run Nym Exit Gateways.

LunarDAO Gateways

LunarDAO currently operates 15 Nym Exit Gateways.

Nym Mixnet Routing with Socks5 Client

Run ircd over the mixnet using LunarDAO gateways for max anonymity. Follow the guide here.

Nym has been developing an app to channel all users' traffic through the mixnet. Now users can use a client to run any SOCKS5 proxy traffic through. Many older version of Nym Network Requesters are limited by the outdated allowed.list and users had to run their own with a custom list of whitelisted services. LunarDAO Nym Gateways have Network Requester (NR) and Internet Pacet Router (IPR) embedded and they run according to the new Nym exit policy - a combination of Tornull and Tor reduced policy - a default filter allowing users to connect to any but blacklisted IPs and ports.

To use LunarDAO Nym Exit Gateways, run your own nym-socks5-client and route it through one of our embedded NR's. Here is how:

1. Get nym-socks5-client from Nym release page.
2. Make executable: chmod u+x nym-socks5-client
3. Initialise and configure with one of our NR addresses listed in the table above.

./nym-sockc5-client init --id [ANY_NAME] --provider [USE_ONE_FROM_THE_LIST_ABOVE]

4. Run ./nym-socks5-client run --id [YOUR_ID]

Now the client shall be connected to 127.0.0.1 and port 1080, drop these values to any SOCKS5 supporting app to run through the mixnet, like in this example with electrum Bitcoin wallet.

DarkFi ircd behind Nym Mixnet

As bulletproof anon chat as it gets!

Lunarpunk vanguards Dark.fi built a fully anonymous and p2p instance of IRC chat called ircd. The team is just finishing their new instance of the program darkirc which we hope to see in production soon.

Nym has been developing an app to channel all users traffic through the mixnet. Now users can use a client to run any SOCKS5 proxy traffic through. In the past users had to configure and run thir Nym network requester with a custom list of whitelisted services including DarkFi endpoints.

LunarDAO Nym Gateways have Network Requester (NR) and Internet Packet Router (IPR) embedded and they run according to the new Nym exit policy - a combination of Tornull and Tor reduced policy - a default filter allowing users to connect to any but blacklisted IPs and ports.

To connect your ircd instance to LunarDAO Nym Exit Gateways through your local nym-socks5-client is simple and worth it. Here are the steps...

Configuration

Install darkfi ircd and nym-socks5-client in the same environment.

Socks 5 client

1. Get nym-socks5-client from Nym release page
2. Make executable: chmod u+x nym-socks5-client
3. Initialise and configure with one of our NR addresses listed as Embedded Network Requester Address

./nym-sockc5-client init --id [ANY_NAME] --provider [ANY_EMBEDDED_NR_ADDRESS_FROM_THE_LIST]

4. Run ./nym-socks5-client run --id [YOUR_ID]

ircd

1. Install ircd

2. Open ~/.config/darkfi/ircd_config.toml

3. Comment the line with seeds

4. Add a line:

peers = ["nym://dasman.xyz:25552"]

5. Change outbond_transports to:

outbond_transports = ["nym"]

6. Make sure that

outbound_connections = 0

7. Save config and restart ircd

Observe the ircd deamon to see that the communication is running through the mixnet.

Bonus: Join #lunardao ircd channel

Now, when your Darkfi's ircd runs through Nym Mixnet, you can join public and fully anonymous channel #lunardao. To do so, follow one of the two possibilities:

1. Run a command in your weechat:

/join #lunardao

2. Or open ~/.config/darkfi/ircd_config.toml and add "#lunardao" to the autojoin = [] brackets, save and restart ircd.

Troubleshooting

• In case your ircd has problems to start or connect, run the following:

# cd to darkfi repo
git pull
git checkout c4b78ead5111b0423fca3bd53cb7185acd6f0faa

# compile ircd
make ircd

# in case of dependency error: "failed to load source for dependency `halo2_gadgets`"
rm Cargo.lock
make ircd

# remove the config file (rename it if you want to safe any values first)
rm ~/.config/darkfi/ircd_config.toml

# rerun ircd to generate new config file
./ircd

# add your custom values from the old config file

• In case socks5 client is not connecting to the gateway, try another one from the list.

Introduction

The following entries about surveillance programs focuses both on the past and the present. This is a fragment of all information available, and even less if considering the surveillance measures by nation-states and corporations. We are not aiming to present in depth articles on these programs. The intention is to build an understanding for what surveillance measures are existing which can inform us directions in regards to privacy knowledge and tools. Wikileaks have extensive materials on surveillance programs and for anyone interested to learn more, we'd recommend to read the materials shared there.

European union chat surveillance

In 2013, former US intelligence contractor Edward Snowden leaked US's National Security Agency (NSA) mass surveillance programs. NSA was collecting the telephone records of tens of millions of Americans, collected and stored 200 million text messages per day. NSA directly accessed servers of nine internet firms, including Facebook, Google, Microsoft and Yahoo, to track online communication in a surveillance programme known as Prism. They also bugged Eurpean Union offices, and surveilled Japan, South Korea and India, Brazil and Mexico. These are only few examples.

The European union is currently proposing mandatory scanning of every private message, photo, and video in the name of stopping child sexual abuse. Research on this measure makes it clear that widespread scanning produces significant numbers of false accusations and is ineffective for the claimed purpose. It is also criticized fo violating the basic human right to privacy.

Schengen information system (SIS)

Schengen information system is a database composed by entries which are called alerts. 885 000 (or 1.9%) are connected to specific individuals. Every alert includes but is not limited to the following information: name, date of birth, gender, nationality, aliases, arms or history of violence, the reason for the alert and the action to be taken if the person is encountered, requests for extradition, undesirability of presence in particular territory, mental illnesses, requests by a judicial authority, and suspected of crime, lost, stolen and misappropriated firearms and banknotes. In total there are 46 million entries in SIS. All schengen countries have access to the database and have to abide by the information provided there. It is updated in real time.

On March 7, 2023, SIS was been updated; additional tools to prevent irregular migration, working closely with EES (Entry-Exit System, to be launched in November 2023), have emerged, including registering third-nation traveler’s name, the type of travel document, biometric data, and the date of entry and exit from the EU or refusal of entry information. Also, the new features of SIS will include new categories of alerts and biometric data, such as palm prints, fingermarks and DNA records for missing people.

Data rentention initiative

From 2006 EU member states had to store information on all citizens' phone and internet connections for a minimum of six months and at most twenty-four months. If the police in the member states demanded it, the information had to be shared. The court of justice of the European Union declared the directive invalid for violating fundamental rights.

Echelon

In the 90s Echelon surveillance program was exposed. Echelon was a system used to intercept telecommunications, faxes as well as emails. It was created by USA but used also by the so called western countries.

Facebook selling user data

In 2018 it was revealed that Facebook had previously allowed the political consulting firm Cambridge Analytica to access the personal data of tens of millions of its users - around 87 million people- without their knowledge or consent. This data was then used to target specific groups of users with political ads during the 2016 US presidential election. CA's executives declared in 2018 they had worked in 200 elections around the world.

Google tracking users

In 2018 it became known that Google is tracking the location of users even when they turn off their location history setting, and not only: they pressure phone companies to hide or make it harder to find location settings. This is continuing to this day.

Tik tok selling user data to Chinese government

In 2019 articles surfaced that were written about TikTok collecting extensive data about its users, including their device information and location data, and sharing it with the Chinese government.

In US all federal employees are prohibited to use Tik Tok. Canada and United Kingdom also banned Tik Tok. Many countries decided on some form of ban of TikTok on government-issued devices, here's a list of them. France extended the ban to other "recreational" apps like Twitter and Instagram.

Wikileaks publications

In 2017 Wikileaks published 'Vault 7' about US intelligence measures to spy on users and collect data. One of these projects was 'Scribbles' project, a document-watermarking system for documents that are likely to be copied by Insiders, Whistleblowers, Journalists or others - in order to track those who freely try to share about surveillance programs and attacks on our privacy.

In 2017 Wikileaks also published about CIA surveillance tool 'Weeping Angel', an implant designed for Samsung F Series Smart Televisions, which record audio from the built-in microphone and store the data.

Julian Assange, founder of WikiLeaks, has been imprisoned in Belmarsh High Security Prison for 5 years. The UK government ordered his extradiction to US in June 2022. The extradiction hasn't been executed yet due to appeals although the first was rejected by UK high court. In US Assange will face charges of espionage and even though the US has assured that no death penalty would not be imposed should he be convicted, he would face life imprisonment.

Assange was the target of many focused spying operations. One including UC Global Julian Assange spying case: Judge suggests CIA may have received illicitly recorded conversations, a company hired to secure and protect the Ecuadorian Embassy was used by the CIA to install surveillance devices including cameras and microphones throughout the embassy. This includes putting microphones inside the women's restroom. Julian and every guest that came into the Embassy including his legal defense team were spied on by UC Global for the CIA. The UC Global CEO would routinely meet with CIA officials and hand over surveillance materials.

Wikileaks have extensive materials on surveillance programs. Read more on https://wikileaks.org/.

Pegasus

Pegasus was discovered in 2016. It is developed by Israeli cyber-arms company NSO. Pegasus is targeting smartphones and is capable of reading text messages, tracking calls, collecting passwords, location tracking, accessing the device's microphone and camera, and collecting information from apps. NSO stated that the spyware is intended to be used to combat terror and crime. However, many countries bought it to spy on those critical to the regime in the given location including activists, human rights defenders, journalists and even politicians. Up until 2019, some kind of interaction was needed from the user in order to install Pegasus, like clicking a link or opening a document. The last years have brought the zero-click exploit, meaning that the software can be installed with a missed call or a message; the record of the call can be canceled and there can be no notification for the message, meaning that the user doesn't even realize something is happening. Countries including Hungary, India, and even Saudi Arabia have bought it.

A consortium of 17 media organizations investigated Pegasus and released a list of 50000 phone numbers that could be possible surveillance or interesting targets for NSO since 2016; not everyone of them has been checked for traces but of the 67 examined in 2021, 37 turned out to have traces of Pegasus. The consortium also identified at least 1o governments who where entering numbers into a system: Azarbaijan, Bahrain, Kazakhstan, Mexico, Morocco, Rwanda, Saudi Arabia, Hungary, India and United Arab Emirates.

An article from April 2023 states that an Indian defence agency bought spyware from Cognyte Software Ltd, which is seen as a Pegasus alternative. Cognyte collects information on, among others, journalists and critics of authoritarian regimes without their knowledge.

NSO has faced legal issues and heavy criticism by Microsoft, Meta, Alphabet, Cisco and Apple. Meta is pursuing a spyware lawsuit against Pegasus, accused of expoliting a bug in WhatsApp to install spy software allowing surveillance of 1400 people.

Amnesty International has developed a guide to check for traces of Pegasus on phones and a Mobile Verification Toolkit (MVT) to automatize the process.

Surveillance in China

China surveils the population is a known fact, but maybe not everyone knows to what extent. More than half of the world’s surveillance cameras are in China, nearly one billion. The data from the cameras can tell someone’s race, gender and whether they are wearing glasses or masks. The police (In Fujian Province) estimated that there were 2.5 billion facial images stored at any given time. The aim is “controlling and managing people”. Devices known as WiFi sniffers and IMSI catchers are used by the police to track the movements of a person of interest. It's a way to connect digital footprint, real-life identity and physical whereabouts. All 31 of mainland China’s provinces and regions use phone trackers, for example to detect an Uyghur-to-Chinese dictionary app on phones in order to surveil the Uyghur ethnic minority. The police in China also use sound recorders, to record people's voices within a 300 foot radius. These are attached to their facial recognition cameras. In 2017 in Xinjiang, the Chinese authorities built a database which can hold iris samples from 30 million people and are now extensively expanding iris-scan and DNA databases. Megvii, one of the largest surveillance contractors in China, created a software that collects data like movement patterns, clothing, vehicle, information about their phone and social connections. This tool is used by the Chinese police.

The Great firewall of China is blocking peoples access to information through ie. url blocking, and VPN blocking. Cryptocurrencies are forbidden and therefore censored. The main reasons behind the firewall is to crack down on political dissent, control the narrative, and prevent people from accessing content that may go against the country's policies.

Government request of Big tech account data

A study from Surfshark (from 2013 to 2021) shared in an article by Cointelegraph reveals that requests for personal user data from global governments increased by 25% in 2021; 732 773 Google accounts and 716 108 Meta (Facebook) accounts. 60% of the requests came from the United States and Europe. US requests were more than twice as many as Europe. Outside of US; Germany, Singapore, the United Kingdom and France were the main collectors of this data.

Leaked documents showed that the CIA had owned and operated Crypto AG, a Swiss encryption company. Crypto AG had clients from around the world ranging from the Vatican to Iran, including governments officials and private corporations. The hardware allowed the CIA to access the communications via backdoored hardware. Crypto AG was acquired with a partnership between West Germany and the CIA in 1970 and the CIA continued as sole owner until 2018.

Leaked documents from the Snowden revelations uncover the NSA Prism program that was used to spy on users of services including Google, Microsoft, Facebook, Youtube, Apple and many others. The NSA had direct access to the companies' servers. The data that was collected included email, chat (video & voice), photos, VoIP, file transfers, video conferencing, notifications of target activity (logins, etc.), online social networking details, and special requests.

Fingerprinting & Tracking

Device fingerprinting or browser fingerprinting is the systematic collection of information about a remote device, for identification purposes. Princeton University's WebTAP project did a measurement and analysis of online tracking in 2016. Sites that contain news, arts and sports have the most trackers. Google, Facebook, and Twitter are the only third-party entities present on more than 10% of sites.

Analysing information about tracking and fingerprinting cannot be separated when viewed from the angle of Big tech dominance on internet. Parazyd from DarkFi wrote about this in Status Quo. Gary Kovacs, from Mozilla Corporation, shared about the unconsentual tracking in a TED talk.

The information in this post is primarily compiled from Am I Unique, EFF and The Markup. There is extensive research and information on these pages on tracking and fingerprinting as well as proposal on how to improve privacy. This is the TL;DR version.

When you visit a website, your browser makes a request for that site. In the background, invisible trackers makes requests to other hidden third parties. These requests can include (but are not limited to):

• Time zone
• Browser settings
• Versions of software installed
• Broadcast device and browser version
• Browser’s requests is also extracted by third-party ad networks, which are relying on cookie tracking, and browser fingerprinting.
• Screen resolution

Trackers can reveal a detailed behavioral profile of online activity, including:

• Income
• Political affiliation
• Level of education

Digital fingerprint

Browser and hardware setup are unique information to each user - a digital fingerprint. This for example also includes information like computer operating system and screen resolution. In other words characteristics that are more difficult to change.

If the user changes the identifier of the browser to a more common browser, it will not necessarily make the user less identifiable. In combination with other metrics this can stand out, ie. using chrome as identifier but the browser looks like Safari, a combination that is rarely used.

Canvas fingerprinting

Fingerprining can identify a user even with cookies being disables. The canvas fingerprinting technique identifies users by drawing shapes and text on the webpage and the differences in features can distinguish one device from another. The canvas is invisible to the user. Here is a list of more than 15000 sites with canvas fingerprinting scripts.

Cookies

Cookies contains information that the website stores in the browser, such as account login information, items bought at an online store, and location. With this information it's possible to link all user activities. Cookies track users until the cookies are deleted from the browser.

Facebook pixel tracking

Facebook is tracking users, as well as non users, with Facebook Pixel even when they are not logged in. If the user for example makes a purchase, this information is then tied to the user's facebook acount and can reveal the user's real identity.

Google tracking

Google share in their privacy policy the extent of their tracking of anyone using internet.

This information collected and used include the language of the user, the people the user is connected to online, YouTube videos that might be of interest, browser type and settings, device type and settings, operating system, mobile network information including carrier name, phone number, and application version number. Google also collect information about the interaction of apps, browsers, and devices with Google services, including IP address, crash reports, system activity, date and time as well as:

• Terms used for searches.
• Videos watched.
• Views and interactions with content and ads.
• Voice and audio information.
• Purchase activity.
• Activity on third-party sites and apps that use their services.

How to disable cookies

Note: different browsers may have different names than this and some options may not be available. Users are encouraged to learn more about the browser they're using.

To disable cookies, go to the browser Settings then to Privacy and Security where it is possible to select:

• Delete cookies and site data when browser is closed.
• Clear data to remove existing cookies.
• De-select Remember browser and download history.
• Choose Block new requests asking to access your location
• De-select Remember search and form history.

Privacy inspection tools

• Blacklight is a privacy inspection tool. When going to a website it will tell the user how they may be tracked through:

• Ad trackers.

• Third-party cookies.

• Tracking that evades cookie blockers.

• Session recording services (such a mouse click and scrolling, anything typed into a form even if not submitted, including sensitive information such as passwords and credit card numbers). Inspectlet is such a surveillance tool.

• Capturing user keystrokes (ie. logging of entered information such as name, family-name, given-name which matched anon user with postal addresses).

  Here is more information about each of the points above.

• Lightbeam is a browser extension which show the relationships between third parties and the sites you visit.

• Am I Unique

Fingerprint resistant browsers

Browsers such as Tor Browser and Brave are fingerprint resistant and they make the fingerprint less unique. Unique means more identifiable, which is something to avoid if we aim for privacy. Privacy Tools provides a list of browsers which are provacy oriented, including increased protection against tracking and fingerprinting as well as ad-blocking.

Ad-blockers

Ad blockers are browser extensions that stops advertisers and other third-party trackers.

• Privacy Badger
• Ghostery
• uBlock

SIM card data collection

SIM card providers are centralized entities. The data collected on SIM cards is not controlled by the user. It is transparent and a liability for anyone concerned with privacy. See Privacy setup for android with Graphene OS on private alternatives to android phones which are based on Google services.

• Integrated circuit card identifier (ICCID):
  ICCID is a unique number assigned to a SIM card and internationally a standard way to identify SIM cards. ICCID is the printed on the SIM card. The two first numbers are fixed and differntiated the SIM card from other chips. Next two to three number are country codes. The next one to four numbers are Mobile Network Code which identifies the ussuer of the SIM card. The rest of the numbers are uniwue for each SIM and the last one is based on Luhn algoritm which is used to verify ICCID.

• International mobile subscriber identity (IMSI): The IMSI number includes which country and mobile network and can be used to track the movements of the user. The cell towers’ location is used to triangulate the position.

• Service provider name (SPN): The name of the mobile operator.

• MSISDN - The Mobile Station International Subscriber Directory Number: The phone number for calling and texting.

• Last dialed numbers (LDN): The number and name of the most recently dialed.

• Abbreviated dialing numbers (ADN): Any number and name dialed is saved (and information which can be extracted).

• Short message service (SMS): The information include the SMS text itself as well as the time a message was sent, the sender’s phone number and the status of the entry.

For more information, see:

• https://resources.infosecinstitute.com/topic/sim-card-forensics-introduction/
• https://eforensicsmag.com/understanding-sim-card-forensics/
• https://www.getdroidtips.com/iccid-imsi-imei-numbers/

Opt OUT!

When Edward Snowden was working for NSA he decided to stand against status quo and leak information about global surveillance programs, many which are run by the NSA in cooperation with telecommunication companies and European governments. This is the tip of the iceberg in regards to surveillance measure of governments and Big tech today. Edward Snowden was forced to leave US to avoid imprisonment for sharing this information to people who are the targets of this surveillance.

Julian Assange, currently imprisoned in UK, is one of the founders of Wikileaks. He is charged with espionage by US for sharing the truth about US war crimes in Iraq and Afghanistan. In regard to surveillance, Wikileaks published extensive materials on CIA projects to intercept SSH credentials, target Linux, Windows and MAC systems, utilize webcams and suspend video recordings and also published research about Amazon's collaboration with the US Department of defense and CIA, and surveillance contractors in Russia to name a few.

Google holds over 70% of the browser market and through IP addresses tracks what we do on internet. Big tech collaborate with government by handing over information on demand. Even when we are not online, society is digitalized which faciliated enforcing control measures. When we move in society cameras are watching us or the electronic cards we might use for transportation or payment map out our lives.

To develop open source software which aims to bring privacy solutions to users is becoming criminalized. When Tornado cash developer Alex pertsev was arrested in Amsterdam, US government publicly tagged all Tornado cash users. The current push to regulate crypto including imposing CBDC (Central Bank Digital Currency) is a way for nation-states to co-opt crypto, control people and money flow.

If we want to opt out of the surveillance system, we need to build privacy tools, share knowledge and resources on what is already existing.

Nokia 8110 "Banana" - Jailbreak

Warning: Changing IMEI number is illegal in multiple jurisdictions. This report is not to promote any activity which can cause users any legal problems! Please research the laws concerning this issue in your region. Treat this report as educational source.

This report speaks about GSM network data monitoring. Do NOT confuse it with internet identifiers (MAC, IP address etc).

Problem: IMEI Number Identification

There are multiple security risks when using a mobile provider (phone or router + sim card) as a hotspot. One security risk is the unique sim card number. However sim cards can be purchased without KYC and changed, the internet or hotspot device - phone or portable router - has a unique IMEI number (International Mobile Equipment Identity). this number remains the same (despite changing MAC or IP address). This makes a device easy to track as IMEI number is communicated to the mobile provider.

Solution: Unlocking IMEI Modification

Nokia 8110 or "Banana phone" (as it's known) is a great hotspot device, separated from the users main internet device (smart phone, tablet or laptop). With a few hacks, the Banana phone allows users to change the IMEI number any time. This setup has several advantages:

• Keeps the SIM away from the actual user's devices. Prevents leakage of the main the main internet device IMEI.
• Hacked Nokia 8110 can appear on GSM network as any other phone since IMEI numbers are unique per device and model.
• If IMEI and SIM card are changed together - the user is very hard to be linked (mind the place of connection and other active devices!).

Tip: An IMEI number on Nokia 8110 can be seen in Menu -> Settings -> Device -> Device Information -> More Information or by dialing *#06#. Validate the setup functionality by running a test check before and after the IMEI change.

Pre-Requisities

• Nokia 8110 4G "Banana"
• USB <-> Micro-USB cable with a capacity to handle data
• Internet
• Android SDK Tools
• WebIDE - Palemoon works well

SDK Tools

To communicate with the phone via computer an adb command & shell are needed. Adb is a part of Android SDK Tools. Install as below.

Linux (Debian based)

sudo apt update && sudo apt install android-sdk

Windows - Follow steps in this manual.

WebIDE - Palemoon

WebIDE is used to sideload (install without the bootloader hacking) the needed apps via GUI. An older version of Palemoon works well. Open terminal in a directory where Palemoon will be downloaded and enter the following commands.

wget http://archive.palemoon.org/palemoon/28.x/28.6.1/palemoon-28.6.1.linux-x86_64.tar.bz2

tar -xf palemoon-28.6.1.linux-x86_64.tar.bz2

Move to Palemoon directory and remove auto-update scripts to keep stay on this version.

cd palemoon

rm -rf update*

Run Palemoon

./palemoon

In case Palemoon still prompts to update, deny!

Installation & Setup

Regardless of the chosen setup, the Banana phone must have updated firmware and activated debugging mode.

Keep the device and desktop connected throughout the entire installation process.

Update Nokia Firmware

The device must be updated to the latest firmware.

Check Firmware Version

Settings -> Device -> Device Information -> Software

Update Firmware Version

Settings -> Device -> Device Information -> Software Update -> Select -> Select

Debugging

Debugging is a mode in which developer changes can be implemented. Dial the code ##33284## (##debug##) with your keypad. A bug icon should appear in the system taskbar above (as already said, on some devices it is necessary to open a menu using the additional code ##0574## and from there enable the USB debugging).

Different Setups

This manual has three options, divided according to the three levels of customization and difficulty of the setup. All three of them include unlocking IMEI customization option.

Three Options

1. Minimal - The necessary steps to allow IMEI & TTL modification *
2. Advanced - Minimal + FOSS alternative enabled, remove Google apps enabled *
3. Expert (not described in this manual yet)- Reinstalling the complete OS to Gerda - IMEI & TTL changing app is included with auto-randomizing script.

Chose option and follow the proceeding described under that option directly (ie if 2. is the choice, don't do 1. before).

Note: The points with * use Wallace Toolbox to change IMEI. User needs to enter the new IMEI manually. LunarDAO listed a database of IMEI numbers at wiki.lunardao.net/imei_tables/imei_table.html.

1. Minimal Setup - Wallace Toolbox Sideload

This setup is the fastest and the least difficult one. The only customization is a sideload of the Wallace Toolbox enabling user to change IMEI, TTL and do few other temporary root actions.

Get Wallace Toolbox

Open terminal in target directory to download and run:

wget https://gitlab.com/suborg/wallace-toolbox/-/archive/master/wallace-toolbox-master.zip
unzip wallace-toolbox-master.zip

Install

1. Open Palemoon WebIDE: Open Palemoon browser (the steps above) and press Shift + F8 or navigate to Tools -> Web Developer -> WebIDE
2. Setup adb to tcp socket 6000. In terminal run:

adb forward tcp:6000 localfilesystem:/data/local/debugger-socket

3. Connect Palemoon WebIDE app to the phone: click on Remote Runtime on the right and make sure it's set to localhost:6000.
4. In Palemoon WebIDE app click on Open Packaged App... On the left
5. Navigate to the wallace-toolbox-master directory and click Open.
6. Click on the play button on top to sideload it.
7. Done. Unmount the device.

Usage

Open the Wallace Toolbox app in the phone menu. Use index numbers to navigate. To edit IMEI1 or IMEI2, the new number must be correct, use wiki.lunardao.net/imei_tables/imei_table.html to get one based on device and model of your choice. Reboot and control the IMEI in the phone settings.

Important: Test it few times without a sim card. After each reboot dial *#06# to confirm the IMEI number was edited. To maintain privacy, remove the phone back cover before the IMEI edit. When the phone turns off to reboot take off the battery and exchange sim cards. Assemble and power on.

2. Advanced Setup - Replacing Google Services with FOSS

WARNING! This process includes factory reset. All data and application will be wiped out!

This setup is probably the best compromise of spent time, needed skills, risk and outcome. The result is a rooted KaiOS (the original OS) enabling user to be in control of all applications and processes. This allows for access to developer menu, removing unwanted apps (Google services), sideloading any new apps and (like in setup #1) editing IMEI & TTL number.

This hack disables navigator.mozApps.mgmt.import method package signature checks, installs OmniSD and allows for app config modification.

Before this process, make sure Palemoon is installed (read Pre-Requsities), the firmware is up to date and the device debug mode is enabled.

Donwload OmniSD

Download OmniSD.zip and extract. Open terminal in the target directory and run the following commands:

mkdir omisd

cd ominsd

wget https://cloud.disroot.org/s/QTC5oM4tZ9rWpAZ/download/OmniSD.zip
unzip OminSD.zip2

Install OmniSD & Run Priviledged Factory Reset

1. Open Palemoon WebIDE: Open Palemoon browser (the steps above) and press Shift + F8 or navigate to Tools -> Web Developer -> WebIDE
2. Setup adb to tcp socket 6000. In terminal run:

adb forward tcp:6000 localfilesystem:/data/local/debugger-socket

3. Connect Palemoon WebIDE app to the phone: click on Remote Runtime on the right and make sure it's set to localhost:6000.
4. In Palemoon WebIDE app click on Open Packaged App... On the left
5. Navigate to the omnisd directory and click Open.
6. Click on the play button on top to sideload it.
7. In OmniSD menu on your device press # and accept privileged reset.
8. Let the device reboot and run the initial setup.
9. Allow debug mode again. Either dial ##33284## or Settings -> Device -> Developer Menu -> Enable debugger in the "ADB and DevTools" mode.
10. Repeat the steps 1 to 6.
11. When the installation is finished, all the applications shall be listed in the left-side bar of the WebIDE.

Keep the phone plugged, WebIDE connected and move through the following points.

Get Wallace Toolbox

Open terminal in target directory to download and run:

wget https://gitlab.com/suborg/wallace-toolbox/-/archive/master/wallace-toolbox-master.zip
unzip wallace-toolbox-master.zip

Install Wallace Toolbox

1. In Palemoon WebIDE app click on Open Packaged App... On the left
2. Navigate to the wallace-toolbox-master directory and click Open.
3. Click on the play button on top to sideload it.

Uninstall Pre-Installed Apps

Pre-installed apps don't show the option Uninstall in the Menu. This quick hack makes them removable.

1. Open Wallace Toolbox App and select 1:ADB root
2. Pull webapps dictionary from the phone, in terminal enter:

adb pull /data/local/webapps/webapps.json

3. Make a backup in case something goes wrong:

cp webapps.json webapps.json.bak

4. Open downloaded webapps.json in a text editor
5. Search every app to be set as removable and edit the dictionary line in the sub-dictionary from "removable": false, to "removable": true,. Save & exit.
6. Push the modified file back to the phone:

adb push webapps.json /data/local/webapps/

7. Reboot:

adb reboot

8. Uninstall Apps in the device menu: move selector to the chosen app -> Options -> Uninstall

Edit IMEI in Wallace Toolbox App

Open the Wallace Toolbox app in the phone menu. Use index numbers to navigate. To edit IMEI1 or IMEI2, the new number must be correct, use wiki.lunardao.net/imei_tables/imei_table.html to get one based on device and model of your choice. Reboot and control the IMEI in the phone settings.

Important: Test it few times without a sim card. After each reboot dial *#06# to confirm the IMEI number was edited. To maintain privacy, remove the phone back cover before the IMEI edit. When the phone turns off to reboot take off the battery and exchange sim cards. Assemble and power on.

3. Expert Setup - Replacing OS

This setup replace the original KaiOS with Gerda OS. Gerda OS by default has no Google services and IMEI randomization is semi-automatized (a user does not have to type the IMEI manually just pushes a button to randomize). However the installation requires good knowledge of Linux and the logic behind phone's backend and bootloader.

To be tested and documented soon.

Additional Security Steps

For maximal security do not use this phone for web browsing or other online applications. Run it as a hotspot and connect to it from another device using MAC spoofing and VPN or Tor!

• Always change both IMEI and sim card at the same time when changing a setup (from hotspot to burner etc)
• Disable Web Tracking: Menu -> Settings -> Privacy & Security -> Do Not Track -> Tick [x] on Tell websites and apps that I do not want to be tracked
• Clear Browsing History, Cookies & Stored Data: Menu -> Settings -> Privacy & Security -> Browsing Privacy
• App Permissions: Menu -> Settings -> Privacy & Security -> App Permissions -> Make sure no app has any permissions without asking.
• Search: Menu -> Settings -> Personalization -> Search -> Change Engine from Google to DuckDuckGo and turn Search Suggestions to No.

Banana phone & Changing IMEI

NOTE: Changing users IMEI number is illegal in multiple jurisdictions. This page is not to promote any activity which can cause users any legal problems! Please research the laws concerning this issue in your region. LunarDAO is not responsible for any decisions done by the users! If you are uncertain, please do not read further and leave this page.

There are multiple security risks when using a mobile provider (phone or router + sim card) as a hotspot. One security risk is the unique sim card and all of identifying information leaked. We will cover this issue later on but there are sources to buy sims without KYC and change them as often as a user needs. Another security issue is that despite changing a simcard often, the internet or hotspot device - phone or portable router - has a unique IMEI number (International Mobile Equipment Identity) which stays the same despite changing MAC or IP address. This makes it easy to track.

Nokia 8110 or Banana phone (as it's known) is a great hotspot device, separated from the users main internet device (smart phone, tablet or laptop). With a few hacks, the Banana phone allows a user to change its IMEI. Such a setup has several advantages:

1. Keeps the sim away from the actual user's devices - does not leak the main internet device IMEI
2. Nokia 8110 can appear on the GSM network as any other phone since IMEI numbers are unique per device.
3. If IMEI and simcard are changed together - the user is very hard to be traced (mind the place of connection and other active devices!)

Note: If not changed regularly, the risk of compromise is higher. Both sim and IMEI need to be changed at the same time!

Hacking a Banana Phone

The Banana phone has many different ways to be hacked for IMEI randomization. The most simple way is to install Wallace Toolbox. Here is Banana hackers guide on how to install Wallace Toolbox.

Installing Gerda OS improves usability, but is not needed to change IMEI. It's even possible to install Debian, called Bananian on this phone! LunarDAO Squad plans to make comprehensive manuals on all the IMEI randomizing devices and the installation steps.

IMEI numbers

If you succesfully hacked a Banana phone or already have one, it can be pain in the ass to find correct IMEI numbers, or even worse to make one up. Thanks to our fellow hackers, there is a generated IMEI table with several thousands IMEI numbers.

DISCLAIMER: The table was not created by LunarDAO Squad neither fully tested. All the data are accessible online, LunarDAO only provides a more accessible format.

IMEI Numbers

NOTE: Changing users IMEI number is illegal in multiple jurisdictions. This page is not to promote any activity which can cause users any legal problems! Please research the laws concerning this issue in your region. LunarDAO is not responsible for any decisions done by the users! If you are uncertain, please do not read further and leave this page.

International Mobile Equipment Identity (IMEI) number identifies mobile and satelite phones. The following table lists devices and randomly generated IMEI numbers.

DISCLAIMER: The table was not created by LunarDAO Squad neither fully tested. All the data are accessible online, LunarDAO only provides a more accessible format.

The table has over 16k rows, use search function to find a particular brad or model