hush-box/README.md

# Hush to every home

The idea is to get rid of both hardware and software backdoors, install all necessary tools on a Pi 4 and sell it as a plug-and-play device. Including shipping cost the total estimated price is 200 USD. If you have your [Pi 4](https://www.raspberrypi.com/products/raspberry-pi-4-model-b) or [ROCKPro64](https://pine64.com/product/rockpro64-4gb-single-board-computer) already you can just follow the guide.

* [Raspberry Pi 4 model b](https://www.raspberrypi.com/products/raspberry-pi-4-model-b) with 4GB of RAM device will be used in order to avoid Intel ME and AMD PSP.
* [Devuan GNU+Linux](https://arm-files.devuan.org/RaspberryPi%20Latest%20Builds) will be installed, a fork of Debian without [systemd](https://ebin.city/~werwolf/posts/systemd-sucks), but [sysvinit](https://www.devuan.org/os/init-freedom) or openrc, runit, sinit and 66-devuan.
* For private transaction and communication [Hush](https://hush.land) cryptocurrency and [HushChat](https://git.hush.is/hush/hushchat) were chosen to fulfill this task.
* To start using HushChat right away a privkey for 0.5 HUSH will be provided.
* To ensure that nobody is spying on us the Tor network will be utilized.
* Operations Security (OPSEC) book will be provided to know the best practices on how to use the Internet safely. 😎

# Devuan GNU+Linux

Download the latest image and its hash from [arm-files.devuan.org](https://arm-files.devuan.org/RaspberryPi%20Latest%20Builds)

```
curl https://arm-files.devuan.org/RaspberryPi%20Latest%20Builds/rpi-4-devuan-beowulf-5.10.82-v8-ext4-2021-12-05.zip --output devuan.zip 
curl https://arm-files.devuan.org/RaspberryPi%20Latest%20Builds/rpi-4-devuan-beowulf-5.10.82-v8-ext4-2021-12-05.zip.sha256sum --output devuan.zip.sha256sum 
```
Verify the integrity of the file by comparing the hash value.

```
cat devuan.zip.sha256
sha256sum devuan.zip
unzip devuan.zip
```
MicroSD card is needed to image the file, change `5.10.82-v8-ext4-2021-12-05` and `mmcblk1` to whatever you have, use `ls` and `lsblk` to check it.

```
sudo umount /dev/mmcblk1
sudo mkfs.vfat /dev/mmcblk1
sudo dd if=rpi-4-devuan-beowulf-5.10.82-v8-ext4-2021-12-05.img of=/dev/mmcblk1 
```

Once you powered up your device with `devuan` as your username and `toor` as your password we may want to change the password with `passwd`, then we want to [install](https://www.devuan.org/os/documentation/dev1fanboy/en/minimal-xfce-install.html) the desktop environment, [XFCE](https://www.xfce.org/about) in this case.

```
sudo apt-get install xfce4-panel xfdesktop4 xfwm4 xfce4-settings xfce4-session xfce4-terminal xfce4-appfinder xfce4-power-manager thunar ristretto cinnabar-icon-theme thunar-volman gvfs policykit-1 slim 
```

Run update-alternatives to set the x-session-manager to xfce4-session.

```
sudo update-alternatives --config x-session-manager
```

Start XFCE, you run it only once.

```
startxfce4
```

If you're using USB tethering or you don't have an easy access to the Ethernet you need to uncomment the following strings with `sudo vim /etc/network/interfaces` and add `auto usb0` to enable Mobile tether:

```
### Mobile tether
auto usb0
allow-hotplug usb0
iface usb0 inet dhcp
```

# HushChat

# Tor