Re: Freenet in Whonix

On 2016-12-18 12:38, Arne Babenhauserheide wrote:
> [email protected] writes:
> 
>> On 2016-12-17 19:01, Arne Babenhauserheide wrote:
>>> What I forgot to ask: Do you have information about Users for whom 
>>> the
>>> Freenet friend-to-friend mode is blocked? This is similar to hidden
>>> bridges, and the Freenet protocol is not trivial to detect.
>> 
>> I don't have literature I can refer to in Freenet's specific case but
>> unless Freenet is capable of morphing its protocol to resemble other
>> whitelisted ones it would be trivial to fingerprint and block with
>> Deep
> 
> With a whitelist which only allows TCP or unencrypted UDP that would be
> easy, yes. Are real whitelists used against Tor?

Yes and they've gone beyond that for a while now. China is using active 
probing to attempt recognize suspected bridges using obfuscated 
protocols by speaking like them. To defeat this attack Tor bridges 
switched to relying on distributing shared secrets to bridge users - 
without it there is no reply given to probes, foiling that technique.

> 
>> Packet Inspection (feel free to correct me). Also I'm speaking about
>> connections in pure F2F mode because an adversary can easily build an 
>> IP
>> blacklist by trawling Opennet.
> 
> In this pure F2F mode is similar to hidden bridges in Tor, yes. If you
> want to escape IP blacklisting, you can create a pure F2F node and
> connect that to a hybrid node (Opennet + F2F). That way the pure F2F
> node will not have its IP exposed without full traffic analysis
> (blocking everyone who communicates with known Freenet nodes — but this
> method would block Tor as well).

Yes. That's why unknown IPs are not enough they need to be combined with 
obfuscated protocols to bypass the GFW.

> 
>>> Providing Freenet itself as a signed deb is on the roadmap, but not 
>>> yet
>>> done. The main problem in the past was that some of our requirements
>>> were unavailable in Debian.
>> 
>> What I meant a standalone .deb we can drop in our repo since I know 
>> that
>> putting a package into Debian is unrealistic with your rapid dev 
>> cycle.
> 
> So a .deb which just installs Freenet with all its dependencies 
> provided
> in freenet-ext.jar just like the standalone installer does it?

Exactly yes.

> 
>>>> https://mirrorer.alioth.debian.org/
>>> 
>>> I just checked this, but the howto and manual were unavailable.
>>> 
>>> Did they move to a new place?
>> 
>> Hm. Not sure whats happened. I can see the How-To and the manual 
>> though
>> the latter is sprinkled with HTML tags.
> 
> That’s strange — do you mean this URL?
> https://anonscm.debian.org/gitweb/?p=mirrorer/reprepro.git%3ba=blob_plain%3bhb=HEAD%3bf=docs/short-howto
> 
> It just gives me
> 
>     404 - No such project

Ah ok. Please try:

sudo apt-get install reprepro yelp
yelp man:reprepro

> 
> Best wishes,
> Arne
> _______________________________________________
> Devl mailing list
> [email protected]
> https://emu.freenetproject.org/cgi-bin/mailman/listinfo/devl
_______________________________________________
Devl mailing list
[email protected]
https://emu.freenetproject.org/cgi-bin/mailman/listinfo/devl