FYI::A vision for a social Freenet with WoT, FreeTalk and Sone

26 views
Skip to first unread message

Max贝立.NoGFW审查

unread,
Jun 21, 2013, 3:13:21 PM6/21/13
to tahrir-de...@googlegroups.com
Januar 4th, 2011

I let my thought wander a bit around the question how a social Freenet (2.0 ;) ) could look from the view of a newcomer.

I imagine myself installing freenet. The first thing to come up after starting it is the node page. (italic Text in brackets is a comment. The links need a Freenet running on 127.0.0.1 to work)


“Welcome to Freenet, where no one can tell you’re reading”

“Freenet tries hard to project your privacy. Therefore we created a pseudonymous ID for you. Its name is Gandi Schmidt. Visit the [your IDs site] to see a legend we prepared for you. You can use this legend as fictional background for your ID, if you are really serious about staying anonymous.”

(The name should be generated randomly for each ID. A starting point for that could be a list of scientists from around the world compiled from the wikipedia (link needs freenet). The same should be true for the legend, though it is harder to generate. The basic information should be a quote (people remember that), a job and sex, the country the ID comes from (maybe correlated with the name) and a hobby.)

“During the next few restarts, Freenet will ask you to solve various captchas to prove that you are indeed human. Once enough other nodes successfully confirmed that you are human, you will be granted access to the forums and microblogging. This might take a few hours to a few days.”

(as soon as the ID has sufficient trust, automatically activate the FreeTalk and Sone plugins)

“Note that other nodes don’t know who you are. They don’t know your IP, nor your real identity. The only thing they know is that you exist, that you can solve captchas and how to send you a message.”

“You can create additional IDs at any time and give them any name and legend you choose by adding it on the WebOfTrust-page. Each new ID has to verify for itself that it’s human, though. If you carefully keep them seperate, others can only find out with a lot of effort that your IDs are related. Mind your writing style. In doubt, keep your sentences short. To make it easier for you to stay anonymous, you can autogenerate Name and Legend at random. Don’t use the nicest from many random trials, else you can be traced by the kind of random IDs you select.”

“While your humanity is being confirmed, you can find a wealth of content on the following indexes, some published anonymously, some not. If you want to publish your own anonymous site, see Upload a Freesite. The list of indexes uses dynamic bookmarks. You get notified whenever a bookmarked site (like the indexes below) gets updated.”

“Note: If you download content from freenet, it is being cached by other nodes. Therefore popular content is faster than rare content and you cannot overload nodes by requesting their data over and over again.”

“You are currently using medium security in the range from low to high.”

“In this security level, seperated IDs are no perfect protection of your anonymity, though, since other members might not be able to see what you do in Freenet, but they can know that you use freenet in the first place, and corporations or governments with medium sized infrastructure can launch attacks which might make it possible to trace your contributions and accesses. If you want to disappear completely from the normal web and keep your freenet usage hidden, as well as make it very hard to trace your contributions, to be able to really exercise your right of free speech without fearing repercussions, you can use Freenet as Darknet — the more secure but less newcomer friendly way to use freenet; the current mode is Opennet.”

“To enter the Darknet, you add people you know and trust personally as your darknet friends. As soon as you have enough trusted friends, you can increase the security level to high and freenet will only connect to your trusted friends, making you disappear from the regular internet. The only way to tell that you are using freenet will then be to force your ISP to monitor all traffic coming from your computer.”

“And once transport plugins are integrated, steganography will come into reach and allow masking your traffic as regular internet usage, making it very hard to distinguish freenet from encrypted internet-telephony. If you want to help making this a reality in the near future, please consider contributing or donating to freenet.”

“Welcome to the pseudonymous web where no one can know who you are, but only that you are always using the same ID — if you do so.”

“To show this welcome message again, you can at any time click on Intro in the links.”


What do you think? Would this be a nice way to integrate WoT, FreeTalk, Sone and general user education in a welcome message, while adding more incentive to keep the node running?

PS: Also posted in Freetalk and in Sone – the links need a running Freenet to work.

PPS: This vision is not yet a reality, but all the necessary infrastructure is already in place and working in Freenet. You can already do everything described in here, just without the nice guide and the level of integration (for example activating plugins once you have proven your humanity, which equals enough trust by others to be actually seen).

--
Max贝立

请帮助Re推下面的微博短文,谢谢
#nogfw 我相信能网聚百万人反GFW审查:请电邮nogfw+s...@googlegroups.com响应,汇集百万呼吁,groups.google.com/group/nogfw 将自动统计人数。 #GFW,我们不高兴!请RT,成功就在指尖

Ian Clarke

unread,
Jun 21, 2013, 3:18:10 PM6/21/13
to tahrir-de...@googlegroups.com
The idea of creating a human-readable (and hopefully human-memorable) name from a public key is quite interesting.

So if we had an algorithm that could take a public key, and produce a name "Gandi Schmidt" from this key, such that:
  • Anyone can verify that this name is tied to the public key
  • Given a name, it is practically impossible to make up a public key that is tied to it
However, I suspect it might be difficult to get enough entropy into a reasonably short human-readable name for this to be secure.

Ian.

--
You received this message because you are subscribed to the Google Groups "Tahrir Development" group.
To unsubscribe from this group and stop receiving emails from it, send an email to tahrir-developm...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.
 
 



--
Ian Clarke

Kevin Wang

unread,
Jun 21, 2013, 3:44:37 PM6/21/13
to tahrir-de...@googlegroups.com
I think it will be hard to generate one name from existing public key,
as you are looking for something like message digest, while at the
same time readable to human. I will do some research, but hardly
believe it will work.

On 6/21/13, Ian Clarke <ian.c...@gmail.com> wrote:
> The idea of creating a human-readable (and hopefully human-memorable) name
> from a public key is quite interesting.
>
> So if we had an algorithm that could take a public key, and produce a name
> "Gandi Schmidt" from this key, such that:
>
> - Anyone can verify that this name is tied to the public key
> - Given a name, it is practically impossible to make up a public key
> that is tied to it
>
> However, I suspect it might be difficult to get enough entropy into a
> reasonably short human-readable name for this to be secure.
>
> Ian.
>
> On Fri, Jun 21, 2013 at 2:13 PM, Max贝立.NoGFW审查 <nogf...@gmail.com> wrote:
>
>> http://draketo.de/light/english/vision-for-a-social-freenet
>> Januar 4th, 2011
>>
>> I let my thought wander a bit around the question how a social
>> Freenet<http://freenetproject.org/> (2.0
>> ;) ) could look from the view of a newcomer.
>>
>> I imagine myself installing freenet. The first thing to come up after
>> starting it is the node page. *(italic Text in brackets is a comment. The
>> links need a Freenet <http://freenetproject.org/> running on 127.0.0.1 to
>> work)*
>> ------------------------------
>>
>> “Welcome to Freenet, where no one can tell you’re reading”
>>
>> “Freenet tries hard to project your privacy. Therefore we created a
>> pseudonymous ID for you. Its name is Gandi Schmidt. Visit the [your IDs
>> site] to see a legend we prepared for you. You can use this legend as
>> fictional background for your ID, if you are really serious about staying
>> anonymous.”
>>
>> *(The name should be generated randomly for each ID. A starting point for
>> that could be a list of scientists from around the world compiled from
>> the
>> wikipedia<http://127.0.0.1:8888/CHK@x3OatRc~bdqaN6JIH9L1eXz2HohbAnWX~1TngMM0qXk,egDcWUQgG-w6sXr6998ovzu2GDqwovS3ut4e5HKu3fs,AAIC--8/scientists.txt>
>> (link
>> needs freenet). The same should be true for the legend, though it is
>> harder
>> to generate. The basic information should be a quote (people remember
>> that), a job and sex, the country the ID comes from (maybe correlated
>> with
>> the name) and a hobby.)*
>>
>> “During the next few restarts, Freenet will ask you to solve various
>> captchas to prove that you are indeed human. Once enough other nodes
>> successfully confirmed that you are human, you will be granted access to
>> the forums and microblogging. This might take a few hours to a few days.”
>>
>> *(as soon as the ID has sufficient trust, automatically activate the
>> FreeTalk and Sone plugins)*
>>
>> “Note that other nodes don’t know who you are. They don’t know your IP,
>> nor your real identity. The only thing they know is that you exist, that
>> you can solve captchas and how to send you a message.”
>>
>> “You can create additional IDs at any time and give them any name and
>> legend you choose by adding it on the WebOfTrust-page. Each new ID has to
>> verify for itself that it’s human, though. If you carefully keep them
>> seperate, others can only find out with a lot of effort that your IDs are
>> related. Mind your writing style. In doubt, keep your sentences short. To
>> make it easier for you to stay anonymous, you can autogenerate Name and
>> Legend at random. Don’t use the nicest from many random trials, else you
>> can be traced by the kind of random IDs you select.”
>>
>> “While your humanity is being confirmed, you can find a wealth of content
>> on the following indexes, some published anonymously, some not. If you
>> want
>> to publish your own anonymous site, see Upload a
>> Freesite<http://127.0.0.1:8888/insertsite>.
>> The list of indexes uses dynamic bookmarks. You get notified whenever a
>> bookmarked site (like the indexes below) gets updated.”
>>
>> “Note: If you download content from freenet, it is being cached by other
>> nodes. Therefore popular content is faster than rare content and you
>> cannot
>> overload nodes by requesting their data over and over again.”
>>
>> “You are currently using medium security in the range from low to high.”
>>
>> “In this security level, seperated IDs are no perfect protection of your
>> anonymity, though, since other members might not be able to see what you
>> do
>> in Freenet, but they can know that you use freenet in the first place,
>> and
>> corporations or governments with medium sized infrastructure can launch
>> attacks which might make it possible to trace your contributions and
>> accesses. If you want to disappear completely from the normal web and
>> keep
>> your freenet usage hidden, as well as make it very hard to trace your
>> contributions, to be able to really exercise your right of free speech
>> without fearing repercussions, you can use Freenet as Darknet — the more
>> secure but less newcomer friendly way to use freenet; the current mode is
>> Opennet.”
>>
>> “To enter the Darknet, you add people you know and trust personally as
>> your darknet friends. As soon as you have enough trusted friends, you can
>> increase the security level <http://127.0.0.1:8888/seclevels/> to high
>> and freenet will only connect to your trusted friends, making you
>> disappear
>> from the regular internet. The only way to tell that you are using
>> freenet
>> will then be to force your ISP to monitor all traffic coming from your
>> computer.”
>>
>> “And once transport plugins are integrated, steganography will come into
>> reach and allow masking your traffic as regular internet usage, making it
>> very hard to distinguish freenet from encrypted internet-telephony. If
>> you
>> want to help making this a reality in the near future, please consider
>> contributing or donating to freenet.”
>>
>> “Welcome to the pseudonymous web where no one can know who you are, but
>> only that you are always using the same ID — if you do so.”
>>
>> “To show this welcome message again, you can at any time click on Intro
>> in
>> the links.”
>> ------------------------------
>>
>> What do you think? Would this be a nice way to integrate WoT, FreeTalk,
>> Sone and general user education in a welcome message, while adding more
>> incentive to keep the node running?
>>
>> *PS: Also posted in
>> Freetalk<http://127.0.0.1:8888/Freetalk/showThread?BoardName=en.freenet&ThreadID=b7046511-1598-49aa-9f01-836e3bf82b06@6~ZDYdvAgMoUfG6M5Kwi7SQqyS-gTcyFeaNN1Pf3FvY>
>> and in
>> Sone<http://127.0.0.1:8888/Sone/viewPost.html?post=394b08ff-2d0f-4c88-93ea-f55301906e71>
>> –
>> the links need a running Freenet <http://freenetproject.org/> to work.*
>>
>> *PPS: This vision is not yet a reality, but all the necessary
>> infrastructure is already in place and working in Freenet. You can
>> already
>> do everything described in here, just without the nice guide and the
>> level
>> of integration (for example activating plugins once you have proven your
>> humanity, which equals enough trust by others to be actually seen).*
>> --
>> Max贝立
>>
>> 请帮助Re推下面的微博短文,谢谢
>> #nogfw 我相信能网聚百万人反GFW审查:请电邮nogfw+s...@googlegroups.com响应,汇集百万呼吁,
>> groups.google.com/group/nogfw 将自动统计人数。 #GFW,我们不高兴!请RT,成功就在指尖
>>
>> --
>> You received this message because you are subscribed to the Google Groups
>> "Tahrir Development" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to tahrir-developm...@googlegroups.com.
>> For more options, visit https://groups.google.com/groups/opt_out.
>>
>>
>>
>
>
>
> --
> Ian Clarke
> Blog: http://blog.locut.us/
>
> --
> You received this message because you are subscribed to the Google Groups
> "Tahrir Development" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to tahrir-developm...@googlegroups.com.
> For more options, visit https://groups.google.com/groups/opt_out.
>
>
>


--

----------------------------------
Yours sincerely,
Kevin Wang

Bryce Lynch

unread,
Jun 24, 2013, 3:07:49 PM6/24/13
to tahrir-de...@googlegroups.com
On Fri, Jun 21, 2013 at 3:18 PM, Ian Clarke <ian.c...@gmail.com> wrote:
The idea of creating a human-readable (and hopefully human-memorable) name from a public key is quite interesting.
So if we had an algorithm that could take a public key, and produce a name "Gandi Schmidt" from this key, such that:

Why would it have to be a human name?  It only needs to be a) unique, and b) memorable.  Functionally, it follows that c) typing the unique and memorable name in results in the public key.
 
However, I suspect it might be difficult to get enough entropy into a reasonably short human-readable name for this to be secure.

Short?  No, probably not.  That leads to people associating real names with public keys, which means that someone confiscating the device basically reads your buddy list to suss out your social network and potentially impersonate you.

--
The Doctor [412/724/301/703] [ZS]
https://drwho.virtadpt.net/
"I am everywhere."
Reply all
Reply to author
Forward
0 new messages