What are Karma Guardians
A Karma Guardian is a special kind of defense that you can add to your software to protect it from being used for malicious purposes.
Many security specialists that create software face the same dilemma when making their software public: it should be used for good purposes (in red teams, by ethical hackers, for research, to create awareness, etc.), but unfortunately it can be used for bad purposes too.
Karma Guardians are a new innovative solution created to counter this problem : by adding them to your software they will add protection that is impossible to circumvent. It's a hybrid solution of the latest technological advancements combined with spiritual power that has resulted in a protective layer that goes beyond digital boundaries and spans across lifetimes.
Of course, these guardians cannot stop anyone from still using that software with bad intent, but they'll have to do that knowing that eventually they will have to face the consequences. It is our believe that this inevitable judgement will make malicious actors think twice and therefor result in a significant reduction of malicious usage of the software. And for those that still choose to go ahead with their dark intentions: at least they know - and you know - that one day they will pay : Karma Style.
I have downloaded software and it contains a .kg file
If you are here because you downloaded software and it contained a .kg file than you probably want to know what that means and what
you have to do with it.
You will not have to do anything other than knowing this guardian will forever protect that piece of software - even if you delete it! And that means, that if you
ever decide to use that software for bad purposes, the guardian will get you. Karma Style
How does it work?
After months of engineering, a technology was created that is able to capture the essence of a guardian in single file. Because guardians go beyond the digital physics, the contents of the file do not contain a single byte. They do, however, leave a clear signature in the name of the file.
Can I add a guardian to my project?
You most certainly can!
Guardians are free for everyone and they have been made available in two ways:
- By means of this webform
- By means of an API
Adding a Karma Guardian to your project means you take a firm stand as developer. There is no better way to make a statement against the misuse of your software for malicious purposes. And it is that believe and explicit wish that is embodied by the guardian that you put there to protect it.
Webform
With this form you can download a Karma Guardian for your software. Simply fill in who the creator is and what the name of the software is and hit submit.
(Note : this will result in a file being downloaded to your device)
API
You can call the API by sending a PUT request to https://api.karmagardian.org/create
Parameters
- creator: (String) [name of the creator] (required)
- tool: (String) [name of the software] (required)
- download: (Boolean) if true, it will offer the result as an attachment. Defaults to false (optional)
Headers
-
Accept: When the download parameter is false or omitted, the output (filename) can be returned in 3 different formats: txt, json & xml.
This can be forced by setting the following values for the Accept header
- application/x-www-form-urlencodede: forces text
- application/json: forces json
- application/xml: forces xml
Example
Get filename as plain text
curl -sS --request PUT 'api.karmaguardian.org/create' \ --header 'Accept: application/x-www-form-urlencodede' \ --data-urlencode 'creator=MyName' \ --data-urlencode 'tool=MySoftware'
Reference
You can include a reference to this page in your readme to make your users aware what the karmaguardian file is. You can use the #kg-file anchor to directly link to the explanation