CyberChef VS QR-Code-generator

Many of the use cases mentioned are available through a single tool called CyberChef.

There is an online version [1] but it doesn't submit any data to any servers. It only loads JS for the operations it needs to perform.

You can also download it and run it offline [2]. This is what I do.

I'll leave it up to you to decide if this makes QuaranTab unnecessary or if it's the perfect reason to use QuaranTab.

[1] https://gchq.github.io/CyberChef/

[2] https://github.com/gchq/CyberChef/releases/

CyberChef has been my go to for a while for this sort of stuff. Easy to use GUI, can stack multiple commands fairly easily.

https://gchq.github.io/CyberChef/

I almost forgot my favorite topic, Regular Expressions. It comes handy for parsing and normalizing data. Using https://regex101.com/ and https://gchq.github.io/CyberChef/ , Regex can be lots more than just that.

There's also https://github.com/gchq/CyberChef which has some overlapping tools with it-tools.

For this section, I mostly used CyberChef

CyberChef https://gchq.github.io/CyberChef/

> Firstly, employees need to be aware that they are not allowed to use this software and you need to therefore provide a solution.

As far as I understand, the usage of such tools is caused by the need to accomplish some goal that they don't know how to otherwise do. Therefore, wouldn't it be a good idea to self-host such a tool, even if it's not a part of any pre-existing platform that's in use for other business processes?

For example, for various data format related concerns, I've seen CyberChef be pretty good: https://github.com/gchq/CyberChef

As for some binary file format conversations, HRConvert2 seems viable: https://github.com/zelon88/HRConvert2

If self-hosting things is too much of a bother/risk, then I guess all that's left is local tools, such as Handbrake on Windows for video: https://handbrake.fr/ and maybe something like XnView for images: https://www.xnview.com/en/ and so on...

But then there's the risks of self-hosted or local software containing something malicious and needing to be audited etc. I recall that in my previous org, I helped develop a Wiki page listing many of the tools available within the company internally, so that anyone who needs to store files could immediately look at self-hosted Nextcloud (for example), as opposed to going for Dropbox or whatever. Of course, instructions alone probably aren't enough, restrictions are also necessary, but discoverability is always good!

CyberChef generates QR Codes.

Make a hidden Veracrypt vault on cold computer. Inside the Veracrypt vault save Keepassxc vaults. Store your seeds inside the Keepassxc vaults. For a paper backup, encrypt your seeds using an offline AES256/512 text encryptor/decryptor. Encode the encrypted text using an offline qrcode generator. Print out the qrcode. Test recovery using a dummy wallet. Be sure you can scan and decrypt. Bonus: Laser etch the qrcodes on metal plates. Make a multi-factor recovery vault, in case you forget your passwords. Shimar's secret sharing scheme is a useful tool for making your recovery vault. Never store your seed unencrypted anywhere, ever. Never input your seed on an online computer, ever. Always protect your seeds with something you know (password), something you have (vaults and keyfiles). Do not upload your vault to the cloud. Keep backups in multiple locations. Necessary tools: Cold computer: Any old computer will do. Just physically disable network access. Veracrypt: https://www.veracrypt.fr/code/VeraCrypt/ KeepassXC: https://keepassxc.org/ Cross-platform, open-source text string encryptor. https://github.com/a3diti/aes256-offline/ Cross-platform, open source QR code generators: https://kazuhikoarase.github.io/qrcode-generator/js/demo/ https://github.com/amanuel/JS-HTML5-QRCode-Generator https://github.com/nayuki/QR-Code-generator Shamir's Secret Sharing: https://github.com/paritytech/banana\_split

Necessary tools: Cold computer: Any old computer will do. Just disable network access. Veracrypt: https://www.veracrypt.fr/code/VeraCrypt/ KeepassXC: https://keepassxc.org/ Cross-platform, open-source text string encryptor. https://github.com/a3diti/aes256-offline/ Cross-platform, open source QR code generators: https://kazuhikoarase.github.io/qrcode-generator/js/demo/ https://github.com/amanuel/JS-HTML5-QRCode-Generator https://github.com/nayuki/QR-Code-generator Cross-platform, open-source text string encryptor. https://github.com/a3diti/aes256-offline/ Shamir's Secret Sharing: https://github.com/paritytech/banana\_split

I probably know this only because back in time I wrote a QR code generator in JavaScript [1] which was also one of such libraries reviewed by Nayuki [2], and as I haven't actually implemented a decoder my knowledge stops there. Sorry :-)

[1] https://github.com/lifthrasiir/qr.js

[2] https://www.nayuki.io/page/qr-code-generator-library

I guess it helps to understand how to generate a QR code: https://www.nayuki.io/page/qr-code-generator-library (see also the references at the end)

Good luck. ;-)

https://en.cppreference.com/w/cpp/numeric/random + https://github.com/nayuki/QR-Code-generator/tree/master/cpp Generate QR code using random number. No need for power hungry blockchain.

I have not spun it up myself I have just put urls into this page https://www.nayuki.io/page/qr-code-generator-library I have assumed (maybe incorrectly) that the project would function the same.

I’ve used this in the past and haven’t had unreadable codes https://github.com/nayuki/QR-Code-generator

Did you consider a GDScript implementation instead? Having to rebuild the engine is a bit of a hassle, especially since you need to rebuild for every supported platform in order to export. I see there is a Python version of the lib: https://github.com/nayuki/QR-Code-generator/blob/master/python/qrcodegen.py and generating codes is probably never performance-critical.

For my own website I used the javascript library from https://www.nayuki.io/page/qr-code-generator-library Since those are just static files the actual generating of the qr code is done by the browser so nothing has to happen on the host.