Re: Building a new censorship circumvention tool: what do we need to know?

--===============1742324357==
Content-Type: multipart/signed; boundary="=-=-=";
	micalg=pgp-sha256; protocol="application/pgp-signature"

--=-=-=
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Hi Ivan, Dear eQualit.ie Hackers,

Aside from the web-apps part, Freenet can already provide everything you
asked for.

Ivan Vilata-i-Balaguer <ivan-unmR2TPCNHyyZ7Fz/[email protected]> writes:
>   1. Content is available under censorship conditions, ideally even
>      after connection to the Internet has been completely cut for a
>      whole region.

If you still have IP-based connections to people inside the region, this
is the case, if you run a specialized darknet within that region (so
content only gets replicated within the regional net).

There are already tools to make automatic Freenet connections. Talk to
Michael Grube (thesnark).

For auto-spawning Freenet nodes when an application is started, see
https://github.com/ArneBab/lib-pyFreenet-staging/blob/py3/freenet3/spawn.py

For communication with sub-5-minute latency from external programs, see
https://github.com/ArneBab/lib-pyFreenet-staging/blob/py3/babcom.py

(I submitted a project plan for improving this to NLnet which shows what
 would have to be done for an uncensorable and attack resistant
 news-network. It got into the short-list but wasn=E2=80=99t selected for
 funding: http://www.draketo.de/english/freenet/news-of-the-day )

>   2. Censored content is made available within a reasonable time.

Just ask someone to run

    copyweb -d <folder> <URL>; freesitemgr add <folder>

Or integrate that functionality into a program. You might want to use
beautifulsoup to clean up the code for the Freenet content filter, i.e.:
http://127.0.0.1:8888/freenet:USK@0iU87PXyodL2nm6kCpmYntsteViIbMwlJE~wlqIVv=
Z0,nenxGvjXDElX5RIZxMvwSnOtRzUKJYjoXEDgkhY6Ljw,AQACAAE/freenetproject-mirro=
r/491/update.sh?type=3Dtext/plain

>   3. Access to censored dynamic content (i.e. web apps) is possible.

That=E2=80=99s a hard one. You=E2=80=99d need to remodel the web apps to us=
e Freenet as
backend instead of the clearnet.

I do not think that it is possible at all to provide anything which uses
Javascript and at the same time preserve the anonymity of your users.

>   4. The system benefits from the user's participation, and is resistant
>      to participants dropping off and to rogue nodes in the hands of the
>      censor.

Resilient yes, for absolute resistance, you need to replicate
everything, which limits the amount of data you can provide.

>   5. Users of the system are anonymous to someone observing their
>      traffic, even if that someone is a participant in the system.

Jepp. A weak yes for automatic connections, a strong yes, if they
connect to people they know.

>   6. Users' devices don't reveal the content that they or other users
>      have accessed.

Jepp (as long as you use a separate browser in incognito mode).

>   7. The system is amenable to privacy-preserving analytics to check its
>      impact.

Jepp.

i.e. http://asksteved.com/stats/ =E2=80=94 though it=E2=80=99s currently in=
 sleep mode,
there=E2=80=99s a new site for that in Freenet: http://127.0.0.1:8888/USK@2=
zwBwyJeZnkbqH0N7WZXp6BQqR1Ys85rkthOFvfXOts,HIouq2elJyNt9VIsFfYbYmtvinOEeeY3=
LAAKVUqiSXo,AQACAAE/YAFS/175/

> We know that we'll probably need a combination of several tools to
> achieve these properties, so we're not looking for a silver bullet but
> rather some advice and suggestions from you that may help us move in the
> right direction.  We will be dedicating at least 2 years solid
> development to a chosen infrastructure design and hope to contribute to
> existing models, as part of our (likely hybrid) appraoch to the
> eventuating infrastructure.

Nice!

Best wishes,
Arne

PS: I=E2=80=99m only a few more hours away from being able to do proper Fre=
enet
    releases, so we can finally deploy improvements to the freenet core
    again.
=2D-=20
Unpolitisch sein
hei=C3=9Ft politisch sein
ohne es zu merken

--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=HMyf
-----END PGP SIGNATURE-----
--=-=-=--

--===============1742324357==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KU3VwcG9ydCBt
YWlsaW5nIGxpc3QKU3VwcG9ydEBmcmVlbmV0cHJvamVjdC5vcmcKaHR0cDovL25ld3MuZ21hbmUu
b3JnL2dtYW5lLm5ldHdvcmsuZnJlZW5ldC5zdXBwb3J0ClVuc3Vic2NyaWJlIGF0IGh0dHA6Ly9l
bXUuZnJlZW5ldHByb2plY3Qub3JnL2NnaS1iaW4vbWFpbG1hbi9saXN0aW5mby9zdXBwb3J0Ck9y
IG1haWx0bzpzdXBwb3J0LXJlcXVlc3RAZnJlZW5ldHByb2plY3Qub3JnP3N1YmplY3Q9dW5zdWJz
Y3JpYmU=

--===============1742324357==--