🛡️ Security Architecture & Privacy Policy

Dark Gateway OS Security Architecture

Dark Gateway OS is engineered around the principles of attack surface minimization, strict Linux kernel stream isolation, and complete elimination of telemetry services.

01 ZERO-TELEMETRY GUARANTEE

Zero Data Collection

The system contains zero background trackers, analytical telemetry daemons, crash reporters, or external developer synchronization.

02 BOOT-TIME AIRGAP / PAUSE

Network Boot Pause

Tor daemon blocks outbound traffic on boot (DisableNetwork 1) until the user explicitly selects a routing mode, preventing any plaintext packets from escaping during boot.

03 KERNEL SOCKET ISOLATION

GID Socket Isolation

nftables firewall rules are tied to specific kernel group IDs (GIDs). Applications without explicit firewall authorization cannot transmit any packets.

04 AUTOMATED SHUTDOWN PURGE

Automated Anti-Forensics

The wipe-traces.service runs on shutdown.target, securely wiping browser cache, Telegram sessions, shell history, and temporary logs.

Threat Model

• Protection against ISP sniffing: 100% of outbound traffic is encapsulated inside WebTunnel HTTPS or Tor v3 onion circuits.
• Protection against DPI fingerprinting: VLESS Reality with XTLS Vision mimics authentic TLS certificates of popular CDNs, making traffic indistinguishable from normal HTTPS browsing.
• Protection against DNS and WebRTC leaks: Internal DNS resolver routes all queries to 10.152.152.10:5300 inside Tor, completely bypassing ISP DNS servers.