MOFO Linux is an operating system optimized for defeating all major methods of internet censorship and surveillance used by governments, corporations, schools, and internet service providers. It is a tool created to empower people for exercising their inalienable rights to privacy, freedom of expression, association, and peaceful assembly, in accordance with the International Covenant on Civil and Political Rights and the Universal Declaration of Human Rights. The system contains office, multimedia, and internet applications enabling you to read, write, watch, or listen to any media from anywhere with an internet connection. MOFO Linux is designed to unblock everything.
MOFO Linux is designed for easy usage on home PCs, laptops, and computers installed in internet cafes around the world. Use MOFO Linux to break free of authoritarian powers intending to control the flow of information or "own the truth." MOFO Linux is built upon an Ubuntu base, with great software for productivity, networking, and entertainment.
MOFO Linux contains Encrypted DNS, OpenVPN, Softether, Tor, Freenet, and I2P, and other software tools provide anonymous and secure access to the internet and circumvention of state censorship restrictions. The system is designed for running from a bootable USB stick or "frugal install" on a hard drive / SSD. Browsing history and usage tracks are destroyed on shutdown.
MOFO Linux can be installed to a hard drive, flash memory device, or SSD. Use the Startup Disk Creator to make a bootable live USB system. When running as a live USB or live DVD, changes and usage tracks are lost on shutdown. Otherwise, use Ubiquity to install MOFO Linux to a hard drive or flash memory device with at least 8 GB of space. Changes are persistent in a fully installed system, so be sure to make liberal use of file encryption and disk wiping applications installed in MOFO Linux.
SYSTEM PASSWORDS
MOFO Linux is configured with one default user account (mofo), with the ability to switch to root. There are no passwords in the default MOFO Linux distro. You may create your own password, if desired, but it is not necessary for typical usage.
LANTERN and PSIPHON (Domain Fronting Proxies)
Lantern works well in restricted internet environments. Simply find "Lantern" in the internet application menu. Start Lantern and it will automatically connect to remote servers and provide fast, unrestricted internet access through Firefox.
Psiphon is a circumvention system effective against sophisticated state censorship systems. Access psiphon in the internet application menu, and click to bring up the controller. Select "start" or "stop" as necessary, and the controller will handle the configuration process.
OPENVPN IS WELL SUPPORTED IN MOFO LINUX
To use an Open VPN service with MOFO Linux, follow these steps:
If you don't have a subscription to a VPN service, simply use the OpenVPN Controller for free servers at http://vpngate.net. If VPN Gate is blocked in your country, try the mirrors listed below to obtain fresh OpenVPN config files. If OpenVPN is blocked, use Bitmask, Lantern, or Tor Browser to unblock your internet.[/*]
Keep a copy of your ovpn, key, ca, and crt files on a USB flashdrive or SD card. After starting MOFO Linux, use the OpenVPN Controller application to locate and open the desired ovpn file. For convenience, the files may be copied to the "openvpn" folder in the home directory. If using VPNGate, be aware that the keys and certificate data are contained within one ovpn file.[/*]
NetworkManager can also manage OpenVPN connections. Right click the networking icon and follow the menu prompts for creating a new server connection. The NetworkManager applet will not work with the VPNGate "single ovpn" files, which contain the certificate and key data. Again, use the OpenVPN Controller application for servers operated by VPNGate volunteers.[/*]
Bitmask is a new and potentially superior option which uses obfuscation with OpenVPN. It is fantastic - automatically managing server selection, encrypting the connection, and other tasks. Bitmask now offers encrypted email services. It is known to effectively circumvent the Great Firewall of China! Start it by clicking its icon on the launcher. Also, stop DNSCrypt-proxy while using Bitmask due to incompatibility.[/*]
Softether is capable of fast broadband data transfers, uses strong encryption, but is highly targeted by censorship authorities. Client software for Linux is still sparse, but MOFO Linux includes the official client plus a Softether Controller application which will partially automate the connection process.
TOR, I2P, FREENET, and CJDNS DARKNET / ANONYMOUS NETWORKING
Tor is the oldest and most well developed anonymous network, with extensive infrastructure providing strong anonymity to internet users. I2P is a new robust privacy and anonymity network. It contains quite a lot of content and services for its users, all resistant to surveillance and censorship. Freenet is an active, decentralised anonymous network designed such that it is impossible to censor and extremely resistant to surveillance. These networks contain internally reachable anonymized websites, chat areas, forums, markets, and exit nodes to the open internet.
For anonymous web browsing, use the "Tor Browser" application, found in the internet application menu. The Tor Browser, Tor Messenger, and OnionShare applications are fully configured for routing through Tor. If you are in China or other countries which block encryption, use the Tor bridges to defeat the blockage. Meek-Azure and Obfs4 are most effective. Tor, with Obfs4 or Scramblesuit, may also be run separately using the "Tor Controller" application. Use the same application to shut down Tor and reconfigure Firefox for normal browsing.
For I2P, use the "I2P Controller" application, found in the internet application menu. Use the same application to shut down I2P and reconfigure Firefox for normal browsing.
In MOFO Linux, Freenet is configured to install freshly from its java package. Use the "Freenet Installer" application to set it up for the first time. To stop or restart Freenet, use the buttons within its main browser page.
Cjdns is a global, decentralised, encrypted mesh networking protocol. Hyperboria is the largest of many networks using cjdns offering a vast volume of cyberspace separate from the main internet. It is extremely difficult to surveil or censor.
INTERPLANETARY FILE SYSTEM (IPFS)
The Interplanetary File System is technology providing a robust, decentralised internet based on content instead of location. Applications and data on IPFS are permanent and distributed - with no single point of failure or vulnerability to censorship. Media files, databases, websites, archives on IPFS can exist with resilliance and be accessed with high speed.
FILE SYSTEM ENCRYPTION: VERACRYPT, ZULUCRYPT, and ECRYPTFS
Veracrypt is the top multi-platform software for VERY STRONG file system encryption forked from Truecrypt. It has great features and performance - able to encrypt drives and directories, even hiding them from detection. It is compatible with Linux, Windows and Mac systems, so encrypted files may be created or accessed on just about any computer. Zulucrypt is a native Linux application for file and volume encryption also forked from Truecrypt.
Ecryptfs is an encrypted filesystem with support built into the Linux Kernel. It is fast, strong, and efficient enough to keep users' files safe from unwanted access. Use it to encrypt folders or whole drives which will hold sensitive data. Ecryptfs is the principal means of encrypting the home directory and other storage volumes in Linux.
It is suggested that users run MOFO Linux from a bootable flash drive and keep a separate flashdrive partition for encrypted files. Another option is to use a separate drive and encrypt its entire contents, accessing it through Veracrypt. Doing that, it is possible to carry a large volume of data which is quite difficult to detect and even more difficult to decrypt. In theory, a well-arranged encrypted volume should be secure for centuries. Be careful to create strong passwords. Do not allow any secret keys to be compromised. Use Bleachbit to wipe free space on your storage media.
MULTMEDIA with ENHANCED AUDIO
Kodi Media Center provides access to thousands of high quality video and audio streams from around the world. Extra radio stations have been added to Rhythmbox for access to news, music, and political programming. Multimedia apps may be enhanced by PulseEffects for systemwide audio equalization, compression, and limiting for extra punch in home theater / office presentation environments.
ENGLISH, ARABIC, AND CHINESE LANGUAGE SUPPORT
MOFO defaults to English on startup, with ability to change the system to Chinese or Arabic in the Settings application. Multilanguage keyboard input is always available. To change the system language, select it in "Language support", then LOG OUT and LOG BACK IN without turning off the computer. The new language will then be activated. Language support in Firefox may be managed by using the Tools -> Addons -> Languages menu.
Firefox may be switched between Chinese, Arabic, or English languages at any time by using the Tools -> Languages menu.
ACKNOWLEDGEMENTS
MOFO Linux wishes to acknowledge and thank the developers creating Ubuntu Linux, the base system upon which MOFO Linux is built. Ubuntu provides incredibly smooth operation, fast perfomance, and a pleasant user interface quite suitable for building customized systems. The developers of the many cryptographic / VPN systems used by MOFO Linux get a nod too! Without OpenVPN, Tor, RSA, SSL, and other goodies, the world would be a much less free and more dangerous place.
DISCLAIMER
MOFO Linux is provided as is. No guarantees or warranties are applicable to MOFO Linux. Much of the software is beta, may be subject to countermeasures, or blocked by adversarial internet providers. Use of software in MOFO Linux is solely at the user's own discretion and risk. MOFO Linux is not endorsed by or affiliated with Ubuntu / Canonical / Debian Linux.
INTEGRATED CHANGES FOR THIS VERSION OF MOFO LINUX:
Version 6.0: Switched to MATE Desktop Environment Switched to Linux Kernel 4.15.0-xanmod1 Added Signal Desktop 1.3.0 Updated WebSDR Server List 01/20/2018 Upgraded Bleachbit 1.19 Upgraded Firefox Quantum 59.0b10 Upgraded Jitsi 2.10.5550 Upgraded Lantern 4.4.2 Beta Upgraded Onionshare 1.1 Upgraded OpenVPN 2.3.10 Upgraded Ring 1.0 Upgraded SoftEtherVPN 4.04.9412 Upgraded Thunderbird 57.0b2 (with Enigmail and TorBirdy) Upgraded Tor 0.3.1.9 Upgraded TorBirdy 0.1.4 Upgraded Tor Browser (Sandboxed) 0.0.16 Upgraded Tor Messenger 0.5.0b1 Upgraded VeraCrypt 1.21 Maintained Enigmail 1.9.7 Maintained Obfs4proxy-0.0.6 Maintained ZuluCrypt 5.2.0 Maintained ZuluMount 5.2.0
: 
