Defeating national censorship barriers, enabling free and anonymous networking.

Note: MOFO Linux Version 8 is in development. Expect a release during late 2020.

Have you grown tired of being muzzled by your internet service provider - not allowed to visit websites for political reasons? Are you in an oppressive country that blocks your access to free and open discussion of important social issues? Would you like to use computers at public internet cafes without being subject to internet filters, surveillance, spyware, or malware? Would you like to use your own operating system on public computers and leave no usage tracks and block surveillance of your activities? If yes, then "MOFO Linux" is your solution. MOFO Linux is secure, free (as in freedom and beer), and effective in penetrating "national firewalls" designed to inhibit freedom of speech. This is a tool designed to help you be in touch with anyone or access any media if there is internet service.

MOFO Linux is an operating system optimized for defeating all methods of internet censorship and surveillance used by governments, corporations, schools, and internet service providers. It is a tool created to empower people for exercising their unalienable rights to privacy, freedom of expression, association, and peaceful assembly. These are Creator endowed rights, not priveleges to be metered out at the whims of any government, and protected by the International Covenant on Civil and Political Rights and the Universal Declaration of Human Rights.The mission of MOFO Linux is to unblock everything, clearing the way for you to read, write, watch, listen to, debate, or collaborate without interference from Big Brother.

#Advert: ASUS has your next laptop, powerful and elegant.

Tor Browser, Onionshare, and Signal in MOFO Linux.

Interplanetary File System (IPFS) in MOFO Linux.

MOFO Linux is designed for easy usage on home PCs, laptops, and computers installed in internet cafes around the world. It is built upon an Ubuntu GNU/Linux base, with office, multimedia, and internet applications enabling web browsing, productivity, networking, and entertainment.

MOFO Linux contains Encrypted DNS, OpenVPN, Softether, Tor, Freenet, and I2P, and other software tools which provide anonymous and / or secure access to the internet and circumvention of state censorship restrictions. The system is designed to run from a bootable USB stick or "frugal install" on a hard drive or SSD. It also runs great in a virtual machine. Browsing history and usage tracks are destroyed on shutdown. For persistence, set up MOFO Linux with an extra casper-rw partition wich will contain user files and system changes.

SYSTEM PASSWORDS

MOFO Linux is configured with one default user account (mofo), with the ability to execute commands as root. There are no passwords in the default MOFO Linux distro. You may create your own password, if desired, but it is not necessary for typical usage. VPN managers may require SSH key creation to set up remote servers. Keys and documents created on the system should be backed up on external storage for later use, if desired.

LANTERN and PSIPHON (Domain Fronting Proxies)

Lantern works well in restricted internet environments. Simply find "Lantern" in the internet application menu. Start Lantern and it will automatically connect to remote servers and provide fast, unrestricted internet access through Firefox.

Psiphon is a circumvention system effective against sophisticated state censorship stystems. Access psiphon in the internet application menu, and click to bring up the controller. Select "start" or "stop" as necessary, and the controller will handle the configuration process.

OPENVPN IS WELL SUPPORTED IN MOFO LINUX

To use an Open VPN service with MOFO Linux, follow these steps:

• If you don't have a subscription to a VPN service, simply use the free servers at http://vpngate.net. If VPN Gate is blocked in your country, try the mirrors listed below to obtain fresh OpenVPN config files. If OpenVPN is blocked, use other applications to unblock your internet.
• Keep a copy of your ovpn, key, ca, and crt files on a USB flashdrive or SD card. After starting MOFO Linux, use the OpenVPN Controller application to locate and open the desired ovpn file. For convenience, the files may be copied to the "openvpn" folder in the home directory. If using VPNGate, be aware that the keys and certificate data are contained within one ovpn file.
• NetworkManager can also manage OpenVPN connections. Right click the networking icon and follow the menu prompts for creating a new server connection. The NetworkManager applet will not work with the VPNGate "single ovpn" files, which contain the certificate and key data. Again, use the OpenVPN Controller application for servers operated by VPNGate volunteers.

VPN GATE ALTERNATE MIRRORS

SOFTETHER and WIREGUARD VPNs

Softether is capable of fast broadband data transfers, uses strong encryption, but is highly targeted by censorship authorities. Client software for Linux is still sparse, but MOFO Linux includes the official client plus a Softether Controller application which will partially automate the connection process.

WireGuard is the newest VPN added to MOFO Linux, described by its developers as lean, fast, and simple. It is also cryptographically effective and sound. Multiple encryption protocols are built in, and WireGuard is respected by professional in the industry. As with OpenVPN and SoftEther, you can set up your own server or use a commercial service offering the protocol.

STREISAND, OUTLINE, and ALGO CIRCUMVENTION SYSTEMS

Streisand, humorously, gets its name from the "Streisand effect," where attempts to attempts to supress attention to a sensitive actually draws more attention. The circumvention system gets its strength from easily enabling users to set up, manage, and take down their own VPN servers in a matter of minutes, with many different protocols available.

Outline is a system created by the people at Jigsaw, applying new technology to make a safer world. Users set up their own servers in minutes, configured with VPNs based on shadowsocks tunnels.

Algo is "a VPN that works" as described by its developers. As with Streisand and outline, Algo handles the rapid creation and management of VPN servers. Algo focuses narrowly on IPSEC and WireGuard protocols, asserting that those two are most effective against present day threats.

TOR, I2P, and FREENET: DARKNET / ANONYMOUS NETWORKING

Tor is the oldest and most well developed anonymous network, with extensive infrastructure providing strong anonymity to internet users. I2P is a newer robust privacy and anonymity network. It contains quite a lot of content and services for its users, all resistant to surveillance and censorship. Freenet is an active, decentralised anonymous network designed such that it is impossible to censor and extremely resistant to surveillance. These networks contain internally reachable anonymized websites, chat areas, forums, markets, and exit nodes to the open internet.

For anonymous web browsing, use the "Tor Browser" application, found in the internet application menu. The Tor Browser and OnionShare applications are fully configured for routing through Tor. If you are in China or other countries which block encryption, use the Tor bridges to defeat the blockage. Meek-Azure and Obfs4 are most effective. Tor, with Obfs4 or Scramblesuit, may also be run separately using the "Tor Controller" application. Use the same application to shut down Tor and reconfigure Firefox for normal browsing.

For I2P, use the "I2P Controller" application, found in the internet application menu. Use the same application to shut down I2P and reconfigure Firefox for normal browsing.

In MOFO Linux, Freenet is configured to install freshly from its java package. Use the "Freenet Installer" application to set it up for the first time. To stop or restart Freenet, use the buttons within its main browser page.

INTERPLANETARY FILE SYSTEM (IPFS)

The Interplanetary File System is technology providing a robust, decentralised internet based on content of files instead of where they are located, similar to BitTorrent - but better. Applications and data on IPFS are permanent and distributed - with no single point of failure or vulnerability to censorship. Media files, databases, websites, archives on IPFS can exist with resilliance and be accessed with high speed. IPFS-Desktop is the application to use for managing files in IPFS or setting up a local IPFS node. Because MOFO Linux does not have persistence, you must back up your IPFS files configs, and credentials on external media before shutting down MOFO Linux.

FILE SYSTEM ENCRYPTION: VERACRYPT and ECRYPTFS

Veracrypt is the top multi-platform software for VERY STRONG file system encryption forked from Truecrypt. It has great features and performance - able to encrypt drives and directories, even hiding them from detection. It is compatible with Linux, Windows and Mac systems, so encrypted files may be created or accessed on just about any computer.

Ecryptfs is an encrypted filesystem with support built into the Linux Kernel. It is fast, strong, and efficient enough to keep users' files safe from unwanted access. Use it to encrypt folders or whole drives which will hold sensitive data. Ecryptfs is the principal means of encrypting the home directory and other storage volumes in Linux.

It is suggested that users run MOFO Linux from a bootable flash drive and keep a separate flashdrive partition for encrypted files. Another option is to use a separate drive and encrypt its entire contents, accessing it through Veracrypt. Doing that, it is possible to carry a large volume of data which is quite difficult to detect and even more difficult to decrypt. In theory, a well-arranged encrypted volume should be secure for centuries. Be careful to create strong passwords. Do not allow any secret keys to be compromised. Use Bleachbit to wipe free space on your storage media.

INSTANT MESSAGING CLIENTS

Signal provides secure, end to end private messaging, supporting text, voice, video, and file attachments.

Riot is a decentralised and encrypted instant messaging platform, enabling people to connect and collaborate securely over voice, text, and video.

Telegram is a cloud based private messaging service supporting one on one or group communications.

MULTMEDIA with ENHANCED AUDIO

Kodi Media Center provides access to thousands of high quality video and audio streams from around the world. Multimedia apps may be enhanced by PulseEffects for systemwide audio equalization, compression, and limiting for extra punch in home theater / office presentation environments.

Radio stations around the world are available for direct, off the air listening via hundreds of software defined radio (SDR) servers. Firefox contains a bookmarked list of top SDR servers around the world. They are like a "radio in your web browser" for tuning in news, music, political, and religious content on an unlimited global scale. Also, the VLC Media Player can stream podcasts, internet radio, and video from around the world.

ENGLISH, ARABIC, AND CHINESE LANGUAGE SUPPORT

MOFO Linux defaults to English on startup, with ability to change the system to Chinese or Arabic in the Settings application. Multilanguage keyboard input is always available. To change the system language, select it in "Language support", then LOG OUT and LOG BACK IN without turning off the computer. The new language will then be activated. Language support in Firefox may be managed by using the Tools -> Addons -> Languages menu.

ACKNOWLEDGEMENTS

MOFO Linux wishes to acknowledge and thank the developers creating Ubuntu Linux, the base system upon which MOFO Linux is built. Ubuntu provides incredibly smooth operation, fast perfomance, and a pleasant user interface quite suitable for building customized systems. The developers of the many cryptographic / VPN systems used by MOFO Linux get a nod too! Without OpenVPN, Tor, RSA, SSL, Shadowsocks, and other technologies, the world would be a much less free and more dangerous place.

INTEGRITY AND AUTHENTICITY OF MOFO LINUX

Great effort goes into making MOFO Linux safe and free of malware. To verify that your copy of the iso image file is authentic, undamaged, and unaltered, check the sha256sum against the official authentication document and verify the digital signature of MOFO Linux. The authentication document is available by the download link at MOFO Linux.com. Use the "Passwords and Keys" or equivalent application to check the signature. Import the MOFO Linux public key from pool.sks-keyservers.net or keyserver.ubuntu.com.

DISCLAIMER

MOFO Linux is provided as-is. No guarantees or warranties are applicable to MOFO Linux. Much of the software is beta, may be subject to countermeasures, or blocked by adversarial internet providers. Use of software in MOFO Linux is solely at the user's own discretion and risk. Users are responsible for content accessed. MOFO Linux is not endorsed by or affiliated with Ubuntu / Canonical / Debian GNU/Linux.

Further Information:

MOFO Linux Changelog:

• Version 7.0:
  
  • Base System: Ubuntu 18.04.2
  • Linux Kernel 4.20.0-xanmod1
  • MATE Desktop Environment 1.20.1
  • Added Algo VPN (2019-02-02)
  • Added Multi-Messenger Firefox Addon 1.4.0
  • Added Outline Manager 1.2.2
  • Added Riot Instant Messenger 0.17.9
  • Added Streisand (2019-01-15)
  • Added Stubby (DNS-Over-TLS) 0.2.2
  • Added Telegram Desktop 1.5.11
  • Added Wireguard VPN 0.0.20190123
  • Maintained Jami (Ring) 20190125.1
  • Removed Bitmask
  • Removed Cjdns
  • Removed DNScrypt-Proxy
  • Removed Jitsi
  • Removed ZuluCrypt
  • Upgraded Bleachbit 2.0
  • Upgraded Ecryptfs Utilities 111
  • Upgraded Enigmail 2.0.8
  • Upgraded Firefox Quantum 66.0.b6
  • Upgraded Freenet Installer 1483
  • Upgraded I2P 0.9.38-0
  • Upgraded IPFS-Desktop 0.6.1
  • Upgraded Lantern 5.2.8
  • Upgraded Obfs4proxy 0.0.7
  • Upgraded Onionshare 1.3.1
  • Upgraded OpenVPN 2.4.4
  • Upgraded Signal Desktop 1.21.1
  • Upgraded SoftEtherVPN 5.01.9669
  • Upgraded Thunderbird 60.2.1 (with Enigmail and TorBirdy)
  • Upgraded Tor 0.3.2.10
  • Upgraded TorBirdy 0.2.3
  • Upgraded Tor Browser 8.0.a10
  • Upgraded VeraCrypt 1.22
  • Upgraded WebSDR Server List (Integrated as Firefox Bookmarks)
• Version 6.0:
  • Switched to MATE Desktop Environment
  • Switched to Linux Kernel 4.15.0-xanmod1
  • Added Signal Desktop 1.3.0
  • Updated WebSDR Server List 01/20/2018
  • Upgraded Bleachbit 1.19
  • Upgraded Firefox Quantum 59.0b10
  • Upgraded Jitsi 2.10.5550
  • Upgraded Lantern 4.4.2 Beta
  • Upgraded Onionshare 1.1
  • Upgraded OpenVPN 2.3.10
  • Upgraded Ring 1.0
  • Upgraded SoftEtherVPN 4.04.9412
  • Upgraded Thunderbird 57.0b2 (with Enigmail and TorBirdy)
  • Upgraded Tor 0.3.1.9
  • Upgraded TorBirdy 0.1.4
  • Upgraded Tor Browser (Sandboxed) 0.0.16
  • Upgraded Tor Messenger 0.5.0b1
  • Upgraded VeraCrypt 1.21
  • Maintained Enigmail 1.9.7
  • Maintained Obfs4proxy-0.0.6
  • Maintained ZuluCrypt 5.2.0
  • Maintained ZuluMount 5.2.0
• Version 5.3:
  • Updated WebSDR Server List
  • Upgraded Firefox 56.0b1
  • Upgraded I2P 0.9.30.0
  • Upgraded Jitsi 2.10.2550
  • Upgraded kernel 4.11.0-13-lowlatency
  • Upgraded Lantern 3.7.4
  • Upgraded Onionshare 1.1
  • Upgraded Ring 1.0, build 20170803
  • Upgraded Thunderbird 56.0b1 (with Enigmail and Torbirdy)
  • Upgraded Tor 0.3.0.9
  • Upgraded Tor Browser (Sandboxed) 0.0.12
  • Upgraded Tor Messenger 0.4.0b3
  • Upgraded Veracrypt 1.21
  • Upgraded Zulucrypt 5.2.0
• Version 5.2:
  • Updated WebSDR Server List
  • Upgraded Bleachbit 1.17
  • Upgraded Firefox 54.0b3
  • Upgraded I2P 0.9.29.0
  • Upgraded kernel 4.10.0-20-lowlatency
  • Upgraded Lantern 3.6.3
  • Upgraded Thunderbird 54.0b1 (with Enigmail and Torbirdy)
  • Upgraded Tor 0.2.9.10
  • Upgraded Tor Browser (Sandboxed) 0.0.3
  • Upgraded Zulucrypt 5.1.0
• Version 5.1:
  • Updated WebSDR Server List
  • Upgraded Firefox 51.0b10
  • Upgraded I2P 0.9.28
  • Upgraded kernel 4.4.0-58-lowlatency
  • Upgraded Kodi Media Center 18.0a1
  • Upgraded Thunderbird 51.0b1 (with Enigmail)
  • Upgraded Tor 0.2.9.8
  • Upgraded Tor Browser 6.5a6-hardened
  • Upgraded Zulucrypt 5.0.2
• Version 5.0:
  • Changed to Ubuntu base system v16.04, 64 bits, Linux kernel 4.4.0-49-lowlatency
  • Added Obfs4proxy-0.0.6
  • Updated WebSDR Server List
  • Upgraded Firefox 51.0b1
  • Upgraded Kodi Media Center 17.0b6
  • Upgraded I2P 0.9.27
  • Upgraded Lantern 3.4.2
  • Upgraded Libreoffice 5.2.3.2
  • Upgraded Thunderbird 51.0b1 (with Enigmail)
  • Upgraded Tor 0.2.7.6
  • Upgraded Tor Browser 6.5a4-hardened
  • Upgraded Veracrypt 1.19
• Version 4.7:
  • Added Kodi Media Center
  • Added Psiphon (pyclient)
  • Removed Jondo
  • Removed Popcorn-Time
  • Updated WebSDR Server List
  • Upgraded kernel 4.2.0-42-generic
  • Upgraded Firefox 47.0
  • Upgraded Lantern 3.0.7
  • Upgraded Libreoffice 5.1.4.2
  • Upgraded Thunderbird 45.2.0 (with Enigmail)
  • Upgraded Tor Browser 6.5a2-hardened
  • Upgraded Tor Messenger 0.1.0b6
  • Upgraded Veracrypt 1.17
• Version 4.6:
  • Added Freenet 0.7.5
  • Updated WebSDR Server List
  • Upgraded kernel 4.2.0-36-generic
  • Upgraded Bitmask 0.9.2
  • Upgraded Firefox 47.0.b6
  • Upgraded Lantern 2.2.4
  • Upgraded Libreoffice 5.1.3
  • Upgraded Onionshare 0.9
  • Upgraded Rhythmbox Radio Station List
  • Upgraded Ring 1.0
  • Upgraded SoftEther VPN 4.21
  • Upgraded Thunderbird 38.8.0 (with Enigmail)
  • Upgraded Tor Browser 5.5.5
  • Upgraded Tor Messenger 0.1.0b6
• Version 4.5:
  • Added CJDNS / Hyperboria Mesh Networking
  • Added Zulucrypt 4.76
  • Upgraded kernel 4.2.0-35-generic
  • Upgraded Dnscrypt-proxy v1.6.1 (using two resolvers)
  • Upgraded Firefox 46.0.b8
  • Upgraded Libreoffice 5.1.2.2
  • Upgraded Thunderbird 38.6.0 (with Enigmail)
  • Upgraded Tor 0.2.6.10
  • Upgraded Tor Browser 5.5.4
• Version 4.4:
  • Added Jitsi (VOIP) 2.8.5426
  • Configured Fcitx multilanguage input methods
  • Disabled Unity "Online Search Results"
  • Upgraded kernel 4.2.0-30-generic
  • Upgraded Firefox 44.0.2
  • Upgraded Lantern 2.0.16
  • Upgraded Libreoffice 5.1.1.2
  • Upgraded Popcorn-Time 0.3.9
  • Upgraded Thunderbird 38.5.1 (with Enigmail)
  • Upgraded Tor Browser 5.5.2
  • Updated WebSDR server list
• Version 4.3:
  • Ubuntu 15.10 base system, kernel 4.2.0-21-generic
  • Changed default username and hostname to "mofo"
  • Bug Fixes: DNScrypt-Proxy, I2P, Popcorn-Time, Privoxy
  • Added Onionshare 0.8.1
  • Upgraded Bitmask 0.9.1
  • Upgraded Filezilla 3.12.0.2
  • Upgraded Libreoffice 5.0.4.2
  • Upgraded Thunderbird 38.4.0 (with Enigmail)
  • Upgraded Tor Browser 5.0.7
• Version 4.2:
  • Added Fcitx inputs m17n and Googlepinyin
  • Added Filezilla 3.9.0.5
  • Added Lantern 2.0.10
  • Added Tor Messenger (beta)
  • Added Transmission 2.84
  • Upgraded Firefox 42.0
  • Upgraded Popcorn-Time 0.3.8-5 (beta, with working movie API)
  • Upgraded Tor Browser to v5.0.4
  • Upgraded Veracrypt to v1.14
• Version 4.1:
  • Added JonDo 00.19 (Java Anonymity Proxy)
  • Configured Fcitx (language input methods) to autostart
  • Enabled zram performance enhancement
• Version 4.0:
  • Changed to Ubuntu base system v15.04, 64 bits, Linux kernel 3.19.0-15
  • Upgraded OpenVPN 2.3.2
  • Added SoftEther VPN client 4.18
  • Added Tor v0.2.5.10, with Tor Browser bundle v5.0
  • Added Bitmask 0.8.1
  • Added Bleachbit 1.8
  • Added Ecryptfs Utilities
  • Added Popcorn-Time 0.3.8-2
  • I2P 0.9.18
  • DNScrypt system maintained at 1.6.0
  • Upgraded Libre Office 4.4.2.2
  • Upgraded Firefox 39
  • Ring (VOIP) version 0.4
  • Expanded English, Chinese, and Arabic Laguage support.
  • Java Runtime Environment 1.8.0_45
  • Privoxy 3.0.21 integrated with Firefox (routing for Tor and I2P)
  • Python 2.7.9
  • Generic video drivers updated.
  • Veracrypt 1.0f-2
• Version 3.0:
  • Upgraded Porteus base system v3.0.1, 64 bits, Linux kernel 3.14.15
  • Upgraded OpenVPN 2.3.2
  • Added SoftEther VPN and helper scripts
  • Added TOR 0.2.3.25 controlled by Vidalia 0.2.21
  • Added Bitmask 0.8.1
  • Added Bleachbit 1.6
  • Added Ecryptfs Utilities
  • Added Olive 1.0.16
  • Added Popcorn-Time 0.3.7-1
  • I2P 0.9.8.1
  • L2TP/IPsec VPN support improved [NetworkManager, Internet Security Tools]
  • DNScrypt system maintained at 1.3.3
  • Upgraded Libre Office 4.3
  • Upgraded Firefox 37.0.1 with Flashplayer and IcedTea Java plugins
  • Skype version 4.3
  • Google Talk 5.1.5.0
  • Expanded English, Chinese, and Arabic Laguage support.
  • Java Runtime Environment 1.70_71
  • Privoxy 3.0.21 integrated with Firefox (routing for Tor, I2P, and Olive)
  • Python 2.7.5
  • Generic video drivers updated.
  • Veracrypt 1.0e file encryption replaces Truecrypt
• Version 2.0:
  • Upgraded Porteus base system v2.1, 64 bits, Linux kernel 3.7.8
  • I2P version 0.9.8.1
  • L2TP/IPsec VPN support included
  • Upgraded Libre Office 4.1
  • Upgraded Firefox 21.0.0 with Flashplayer
  • Privoxy 3.0.21 integrated with Firefox
  • DNScrypt system upgraded to 1.3.3
  • Minor system tweaks
  • Generic video drivers for greater hardware compatibility
  • Skype version 4.2
  • Google Talk 4.0.3.0
• Version 1.1:
  • Upgraded Porteus base system v1.1, 32 bits, Linux kernel 3.1.8
  • Upgraded Firefox 10.0.2
  • Privoxy 3.0.19 integrated with Firefox
  • DNScrypt system replaces DNS server rotation scheme
  • Minor system tweaks
• Version 1.0:
  • Porteus base system v1.0, 32 bits, Linux kernel 3.1.8
  • Firefox 10.0.2
  • DNS server rotation scheme
  • Skype 2.1.0.81
  • OpenVPN