7 ms·
No closed source mesh networking can be secure. However good user experience it has. They are no different than using WhatsApp. Indeed in that respect at least
by dragonsh 7y ago
No closed source mesh networking can be secure. However good user experience it has. They are no different than using WhatsApp. Indeed in that respect at least Signal is better.
I am not sure why protestors did not adopt the open source serval mesh project apk and ios app. [1]
In Hong Kong given the density of building it's bit hard to have a line of sight, so it will still be hard to build a local network. But it's still possible to build a completely wireless network over the top of the buildings to communicate with each other.
This communications can be blocked, but then it will still work if enough people switch on their mobile phone and WiFi router to communicate with each other over peer to peer network which is a combination of wired and wireless. [2] [3] [4] [5] [6]
[1] http://www.servalproject.org/ http://www.servalproject.org/
[2] https://ssbc.github.io/scuttlebutt-protocol-guide/ https://ssbc.github.io/scuttlebutt-protocol-guide/
[3] https://dat.foundation/ https://dat.foundation/
[4] http://subnodes.org/ http://subnodes.org/
[5] https://hyperboria.net/ https://hyperboria.net/
[6] http://www.servalproject.org/ http://www.servalproject.org/
- cwyers 7y agoBecause Serval isn't in the App Store yet?
- radicalriddler 7y agoI believe that's the point. You need to download the APK or whatever IOS provides for developer packages. This means less tracking from the vendor (Google, Apple)
- Illniyar 7y agoThere is no way to install apps on ios outside the appstore.
- iancarroll 7y agoXcode is able to dynamically generate a development provisioning profile, even if you do not have a (paid) developer account. So side-loading is definitely possible, in some respects.
- Illniyar 7y agoYou need to create a developer account, learn how to use xCode (not at all trivial), and even with all that you need to reinstall it every 7 days. Effectively sideloading does not exist. The fact that 0.001 percent of people who own an iPhone can, with great effort, sideload apps is irrelevant.
- newscracker 7y agoUnable to reply to Illniyar’s comment below. To add to those points on the difficulty (actually practical impossibility), you’d also need to have access to a Mac to do all those things every seven days. That’s a very big ask, along with the technical know how to use Xcode, for so many people in Hong Kong.
- 3xblah 7y agoDoes anyone know the reason(s) why Apple makes it impractical to sideload?
- toxik 7y agoSide loading is a threat to Apples control over all iOS and similar AppStore devices. If I didn’t want to comply with the very far-reaching requirements for e g in-app stores, I could just ask my users to side load my app. If for example Audible did this, it’d be a real threat.
- iaml 7y agoI'm not 100% sure because I didn't use it, but cydia impactor might work.
- cwyers 7y ago1) It doesn't seem to be a principled decision to stay out of the App Store on the part of Serval's author, who says "trying to get the app approved for release on the Apple App Store. But that will be an adventure for another day." https://servalpaul.blogspot.com/2018/11/serval-chat-ios-port-finally-emerges.html https://servalpaul.blogspot.com/2018/11/serval-chat-ios-port... 2) This wasn't planned out months in advance. This is a protest that is organically sprouting up. Nobody wants to add jailbreaking or xCode to the onboarding process for people to join a protest movement. 3) I think worrying about Apple tracking what apps you install is the least of anyone's problems there at the moment.
- kilburn 7y ago3) I think the worry is China forcing Apple to produce this info (list of HK users with said app installed), not what Apple themselves would do with it. Maybe not a dealbreaker, but something to consider...
- cwyers 7y agoI think China getting that information from Apple is sort of a second-order concern at this point. In a more stable situation, yeah, you don't want the police to have a reason to knock on your door. When you're gearing up to go protest in public and the cops are dropping tear gas on everybody, those sorts of lists are less important. Not saying that it doesn't matter, but there is no such thing as absolute security, it's a series of tradeoffs.
- phs318u 7y agoKeep in mind that Apple's iCloud services in China are not actually provided by Apple. They are provided by Cloud Big Data Industrial Development Co., Ltd., and allows Apple to, "continue to improve iCloud services in China mainland and comply with Chinese regulations". [0] This service even has different terms of service, than the standard iCloud offering (though I haven't done a diff to see what's changed). The effect of this is that the encryption keys for the service for Chinese users, are in the hands of a state-owned company (not Apple). I'm a big support of Apple's approach and ethics with respect to privacy generally, however if you're in China, or a citizen of China, then it's probably safe to assume that anything on or passing through iCloud, is fully accessible to the state, without requiring Apple's involvement (e.g. via subpoena). [0] https://support.apple.com/en-us/HT208351 https://support.apple.com/en-us/HT208351
- andrerm 7y agoGoogle knows and logs forever every app you start on your device doesn't matter if installed from Google Play or not.
- m-p-3 7y agoThat website is.. something The background makes it kinda hard to read
- rqs 7y agoYou know something is good when it has to be recommended twice in one comment. I like to add one point here: Mesh network is not only good for protest, it also useful when network is unstable, for example during bad weather, disastrous event etc. Let's don't forget mesh net can also be use to off-load some of the traffic from the "Normal network", plus good for privacy (If the network is built on top a verified open source structure). I don't think it's a good idea of advertising a type of tech "good for protest/revolution/revolt/something like that". If you do that, the tech will never be adopted.
- imvetri 7y agoSomething works, it helps their protests admist disruption of telecom. Appreciate that please. Not everything needs to be technical. More we speak of tech, more morale we loose.
- GuiA 7y agoWe can support what works today, while commenting on its shortfalls to raise awareness and build better, more secure solutions for tomorrow.
- elevenoh 7y agoMore we speak of tech, more morale we lose. Meaning human-centric vs tech-centric morale/world-view?
- imvetri 7y agoExample: One side of the world: Hey we used bluetooth to communicate to my next door neighbour while our internet was being sniffed by the government. Other side of the world: Hey man, looks like the bluetooth tech they were using is pretty outdated. I wonder how they are living. How did the talk get diverted ? Why the other side of the world didn't talk about whats important? How can they start appreciating first than putting the intellect mind into work? Whats feels wrong? Something feels wired in the brain. Haaa right! Tech is as addictive as any other addiction. Intellect is the addictive substance. Big brains know it, We use it, We think along with it. So what got lost? When did we stop to think like a humble monkey instead like a greedy machine ? couple more questions. point - Balance the mind with its own nature and external influence. Reject if something feels wrong. Or atleast dont express. Depression is prevalent in tech. Why ! Because brain was giving you signs from beginning that it isnt healthy. Everything is connected. Hope I gave you the message you needed.
- intricatedetail 7y agoYou can use PGP encrypted messages over any network to be secure.
- adrianN 7y agoIt is my impression that the Party is not shy to use rubber hose cryptanalysis, so you better make sure to stay anonymous. That is quite hard with PGP.
- _-___________-_ 7y agoNo forward secrecy.
- qrbLPHiKpiux 7y agoI’d prefer anonymity over security.
- konschubert 7y agoIs the point that it’s secure, or that it cannot be blocked?
- kerkeslager 7y ago> No closed source mesh networking can be secure. However good user experience it has. They are no different than using WhatsApp. Indeed in that respect at least Signal is better. > I am not sure why protestors did not adopt the open source serval mesh project apk and ios app. Because they don't share your value system, and chose a better user experience over a more secure system. I want free software to win, which is perhaps a more extreme value system than yours (if you understand the difference between free software and open source software). But it strikes me as a bit naive to assume that free software will win on superior ideology alone. It's no coincidence that free software is winning in areas where it provides the best user experience (server OS-es, browsers) and losing in areas where it provides a worse user experience (user OS-es, most web applications).
- thinkingemote 7y agoI think the idea was that open source was more secure when it comes to communication rather than having to choose open source for ideological reasons. Security seems like a good reason to me.
- kerkeslager 7y agoDoes "useability" not also seem like a good reason to you? "Security is more important than useability" is an ideology.