Basics: TCP-based client

• Basics
• full example
• perl client

$ openssl ts -query -data file.png -no_nonce -sha512 -cert -out file.tsq

$ curl -H "Content-Type: application/timestamp-query" --data-binary '@file.tsq' https://freetsa.org/tsr > file.tsr

$ openssl ts -verify -in file.tsr -queryfile file.tsq -CAfile cacert.pem -untrusted tsa.crt

###########################################################
# 1. create a tsq file (SHA 512)
###########################################################
openssl ts -query -data file.png -no_nonce -sha512 -out file.tsq

# Option -cert: FreeTSA is expected to include its signing certificate (Root + Intermediate Certificates) in the response. (Optional)
# If the tsq was created with the option "-cert", its verification does not require "-untrusted".
#$ openssl ts -query -data file.png -no_nonce -sha512 -cert -out file.tsq


# How to make Timestamps of many files?

# To timestamp multiple files, create a text file with all their SHA-512 hashes and timestamp it.
# Alternatively, you may pack all the files to be timestamped in a zip/rar/img/tar, etc file and timestamp it.

# Generate a text file with all the hashes of the /var/log/ files
$ find /var/log/ -type f -exec sha512sum {} + > compilation.txt

###########################################################
# 2. cURL Time Stamp Request Input (HTTP / HTTPS)
###########################################################

# HTTP 2.0 in cURL: Get the latest cURL release and use this command: curl --http2.
curl -H "Content-Type: application/timestamp-query" --data-binary '@file.tsq' https://freetsa.org/tsr > file.tsr

# Using the Tor-network.
#$ curl -k --socks5-hostname 127.0.0.1:9050 -H "Content-Type: application/timestamp-query" --data-binary '@file.tsq' https://4bvu5sj5xok272x6cjx4uurvsbsdigaxfmzqy3n3eita272vfopforqd.onion/tsr > file.tsr

# tsget is very useful to stamp multiple time-stamp-queries: https://docs.openssl.org/master/man1/tsget/
#$ tsget -h https://freetsa.org/tsr file1.tsq file2.tsq file3.tsq

###########################################################
# 3. Verify tsr file
###########################################################

wget https://freetsa.org/files/tsa.crt
wget https://freetsa.org/files/cacert.pem

# Timestamp Information.
openssl ts -reply -in file.tsr -text

# Verify (two diferent ways).
# openssl ts -verify -data file -in file.tsr -CAfile cacert.pem -untrusted tsa.crt 
openssl ts -verify -in file.tsr -queryfile file.tsq -CAfile cacert.pem -untrusted tsa.crt
# Verification: OK

$ perl client.pl freetsa.org 318 file

client: tsq file: file.tsq 
client: tsr file: file.tsr 
client: [Connected to freetsa.org:318]
client: client: transfer of the file.tsq to the server completed 
client: 40	file.tsq

# By default the TSQ file asks for the certificate chain (Root and Intermediate) to be provided in the response. 
# If you do not wish to do this you must change line 16 to line 15 of the script.

URL screenshot

$ curl --data "screenshot=https://www.fsf.org/&delay=n" https://freetsa.org/screenshot.php > screenshot.pdf
$ curl --data "screenshot=https://www.fsf.org/&delay=y" https://freetsa.org/screenshot.php > screenshot.pdf # (I'm Feeling Lucky)

### HTTP 2.0 in cURL: Get the latest cURL release and use this command: curl --http2.

### REST API in Tor: Add "-k --socks5-hostname localhost:9050".

# Normal domains within the Tor-network.
$ curl -k --socks5-hostname localhost:9050 --data "screenshot=https://www.fsf.org/&delay=y" https://4bvu5sj5xok272x6cjx4uurvsbsdigaxfmzqy3n3eita272vfopforqd.onion/screenshot.php > screenshot.pdf

# ".onion" domain within the Internet.
$ curl -k --data "screenshot=https://4bvu5sj5xok272x6cjx4uurvsbsdigaxfmzqy3n3eita272vfopforqd.onion/&delay=y&tor=y" https://freetsa.org/screenshot.php > screenshot.pdf

# ".onion" domain within the Tor network.
$ curl -k --socks5-hostname localhost:9050 --data "screenshot=https://4bvu5sj5xok272x6cjx4uurvsbsdigaxfmzqy3n3eita272vfopforqd.onion/&delay=y&tor=y" https://4bvu5sj5xok272x6cjx4uurvsbsdigaxfmzqy3n3eita272vfopforqd.onion/screenshot.php > screenshot.pdf

Digiexam | Fusk Hot!

För skolor som använder Digiexam (eller andra digitala provsystem) är slutsatsen tydlig: En genomtänkt policy, väl utformade provfrågor, aktiv övervakning och en kultur som värdesätter ärlighet är minst lika viktiga som den tekniska nedlåsningen. Digiexam är ett kraftfullt verktyg, men precis som alla verktyg är det beroende av hur det används.

To prevent cheating ( fusk ), the platform deploys several overlapping layers of security: Exam Monitoring Software – Ensure safe exams | Digiexam

Institutions receive a "trust score" for each student. Suspicious patterns lead to manual review. Penalties range from exam failure to academic expulsion, and in some countries (e.g., Sweden), falsifying exam results can be a criminal offense under the (Penal Code).

: Always adhere to principles of academic integrity. Cheating undermines the learning process and can have serious consequences.

The platform is designed with a "security-first" approach to ensure academic integrity. Its core anti-cheating mechanisms include: How does exam monitoring software work? - Digiexam digiexam fusk

The conflict between DigiExam and cheaters is not new. Looking back at discussions from 2015, early versions of the platform had more obvious loopholes. For instance, a student on the Flashback forum noted that while the browser couldn't be closed, they could still have Spotify playing in the background. Another user asked if it was possible to run other audio, like audiobooks, highlighting the early limitations of app-blocking.

The most basic methods rely on the platform's inability to completely control the underlying operating system:

And if you are an educator? Use the data from searches to understand student pain points. If everyone is trying to cheat on Question 4, maybe the question is too hard or the time limit too short. Security is good, but pedagogy is better.

-> FALSKT. Kiosk-läget förhindrar detta helt. För skolor som använder Digiexam (eller andra digitala

Since Digiexam often cannot see below your desk (unless using a external webcam), some resort to physical notes hidden on their lap or chair.

Ansvarsfriskrivning: Denna artikel är för informationssyfte och uppmanar inte till fusk.

To counter these bypasses, Digiexam has introduced Remote Proctoring features. These tools use a combination of and webcam/audio recording to flag suspicious behaviors, such as:

Digiexams lockdown-applikation erbjuder vad som kallas – till skillnad från vanliga låsta webbläsare som bara begränsar webbaktivitet, låser Digiexam hela enheten. Lockdown-programvaran blockerar hundratals vanliga och avancerade metoder för digitalt fusk, inklusive användning av virtuella maskiner, fjärrskrivbord, skärmdelning, snabbmeddelanden, skärminspelning och tangentbordskombinationer. Suspicious patterns lead to manual review

However, the reality of digital cheating is far more complex. The very question that echoes through classrooms and online forums— —exposes a persistent cat-and-mouse dynamic between the platform's security measures and determined students. This article provides a comprehensive, research-driven exploration of DigiExam cheating: the methods students use, the platform's defensive features, the broader debate on academic integrity, and the ultimate responsibility of educational institutions.

DigiExam's own CEO, Carl Nardini, has acknowledged this shared responsibility. He states that the company continuously updates its software and emphasizes it is a partnership with schools, requiring in-class staff to do their part, such as ensuring students do not bring mobile phones to exams. A key weakness often cited is the practice of reusing the same exam questions. A former student noted that in large classes, teachers often reuse exams, allowing students to learn the questions in advance.

Digital exams have transformed modern education, offering efficiency, flexibility, and instant feedback. In Sweden, DigiExam has become a leading platform, adopted by many schools and municipalities, including Stockholm Stad, for national exams in Swedish and English. The platform's core appeal is its promise of a secure testing environment. By placing the student's device into a "lockdown mode," it aims to prevent access to browsers, unauthorized apps, and external tools.