@ToriTech

0 Followers
0 Following
5 Posts
An independent security researcher.
GitHubhttps://github.com/Tori-Tech

The final phase of the Mandating Honeypots project is officially live.

It transforms the vulnerability identified in Phase 2 into a local parental control tool that proves digital ID verification isn’t necessary; we can protect children without needing to compromise privacy and data security.

I’m looking forward to hearing the community’s thoughts on this.


GitHub repo here: https://github.com/Tori-Tech/Mandating-Honeypots-Project

@eff
#infosc #privacy #security #tech #ParentsDecideAct #internet

GitHub - Tori-Tech/Mandating-Honeypots-Project: This repository conducts security audits on digital identity verification systems, identifies vulnerabilities through whitepapers and technical POCs, and offers decentralized, privacy-preserving solutions.

This repository conducts security audits on digital identity verification systems, identifies vulnerabilities through whitepapers and technical POCs, and offers decentralized, privacy-preserving so...

GitHub

@dazo @ToriTech @eff

Drum Roll Please.... https://cdn.aws.yoti.com/wp-content/uploads/2026/01/Yoti-Age-Estimation-White-Paper-July-2025-PUBLIC-v1.pdf

My source is the Yoti whitepaper. I forgot to attribute. My bad.

Phase 2 of the Mandating Honeypots Project is out!
It proves OS-level age verification is inherently flawed: you don't need root access to spoof D-Bus data.

The PoC:
dbus.py: Registers a fake age bracket.
query_dbus.py: An easily fooled mock service.

This isn't a call for more invasive tech. It's setting the stage for Phase 3: decentralized, parent-controlled verification that respects privacy & sovereignty.

README/Code: https://github.com/Tori-Tech/Mandating-Honeypots-Project

@eff
#linux #privacy #tech #infosec #foss

GitHub - Tori-Tech/Mandating-Honeypots-Project: This repository conducts security audits on digital identity verification systems, identifies vulnerabilities through whitepapers and technical POCs, and offers decentralized, privacy-preserving solutions.

This repository conducts security audits on digital identity verification systems, identifies vulnerabilities through whitepapers and technical POCs, and offers decentralized, privacy-preserving so...

GitHub

Legislation like the Parents Decide Act (H.R. 8250) creates honeypots & privacy nightmares. It's labeled a "technical necessity", but I'm releasing phase 1 of my project to prove that decentralized, non-invasive verification is possible.

Phase 1: Position paper + ZKP demo.
Phase 2 : Auditing D-Bus vulnerabilities.
Phase 3: Creating a local parental control utility based on findings in phase 2.

Link to GitHub: https://github.com/Tori-Tech/Mandating-Honeypots-Project

@eff #ParentsDecideAct #HR8250 #zkp #infosec #privacy

GitHub - Tori-Tech/Mandating-Honeypots-Project: This repository conducts security audits on digital identity verification systems, identifies vulnerabilities through whitepapers and technical POCs, and offers decentralized, privacy-preserving solutions.

This repository conducts security audits on digital identity verification systems, identifies vulnerabilities through whitepapers and technical POCs, and offers decentralized, privacy-preserving so...

GitHub