3 ms·

> where is the software that circumvents internet spying and censorship? 1.) https://geti2p.net/ https://geti2p.net/ 2.) https://www.torproject.org https://ww

> where is the software that circumvents internet spying and censorship? 1.) https://geti2p.net/ https://geti2p.net/ 2.) https://www.torproject.org https://www.torproject.org 3.) https://openprivacy.ca/blog/2018/06/28/announcing-cwtch/ https://openprivacy.ca/blog/2018/06/28/announcing-cwtch/ Tor is an obvious choice here and has penetrated the mainstream when Gawker ran that article on Silk Road. Now and then newspapers run sensationalist articles on the Dark Web in an attempt to wake up the masses about Tor and its famous (unsecure) Browser Bundle.

jchw 8y ago
Sure, Tor and I2P are great. Tor Browser Bundle even tries to be useful to the average person. And yet, I still think there's work to be done. I'm thinking we need a new application platform entirely. There are some contenders for that, but progress has been slow.
- octosphere 8y ago
  > I'm thinking we need a new application platform entirely. Well the state of the art seems to be Whonix[1] and Qubes[2],and TailsOS[3] [1] https://www.whonix.org/ https://www.whonix.org/ [2] https://www.qubes-os.org/ https://www.qubes-os.org/ [3] https://tails.boum.org/ https://tails.boum.org/ The idea behind these Operating Systems is that even if you somehow got hacked, it limits the damage caused. For example, in Qubes you can open a potentially malicious PDF in a separate dedicated Fedora template/image, then delete the VM after viewing the PDF. With Whonix/Tails, you can also limit the damage caused, so if some intel agency decides to drop an 0day/RCE vuln in your Tor Browser session, then your real IP can't be leaked, because it defaults to Tor for all network activity (and spoofs the MAC address in the case of TailsOS). But for the 'average person' as you describe, these tools are typically not within their threat model. I can understand journalists and marginalized communities using them, but not run-of-the-mill users who like to Skype grandma on their Windows machine and have Internet Explorer as their main browser.

jchw 8y ago

Sure, Tor and I2P are great. Tor Browser Bundle even tries to be useful to the average person. And yet, I still think there's work to be done. I'm thinking we need a new application platform entirely. There are some contenders for that, but progress has been slow.

octosphere 8y ago
> I'm thinking we need a new application platform entirely. Well the state of the art seems to be Whonix[1] and Qubes[2],and TailsOS[3] [1] https://www.whonix.org/ https://www.whonix.org/ [2] https://www.qubes-os.org/ https://www.qubes-os.org/ [3] https://tails.boum.org/ https://tails.boum.org/ The idea behind these Operating Systems is that even if you somehow got hacked, it limits the damage caused. For example, in Qubes you can open a potentially malicious PDF in a separate dedicated Fedora template/image, then delete the VM after viewing the PDF. With Whonix/Tails, you can also limit the damage caused, so if some intel agency decides to drop an 0day/RCE vuln in your Tor Browser session, then your real IP can't be leaked, because it defaults to Tor for all network activity (and spoofs the MAC address in the case of TailsOS). But for the 'average person' as you describe, these tools are typically not within their threat model. I can understand journalists and marginalized communities using them, but not run-of-the-mill users who like to Skype grandma on their Windows machine and have Internet Explorer as their main browser.