<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Tahoma
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>
You are proving my point, Nuno... considering the present sociological mix... if you can't make programs and protocols foolproof... security and privacy depends on the paranoia (or lack thereof) of ALL the users. If you stick to those you trust... you'll be only a few. As a political movement... you'll imperatively need to be more... so you'll lower your exigences and start communicating with people taking security risks.<br><br>I do not have to know technical details of Retroshare or any other solution to assert that... it follows automatically from standard social and political imperatives under present circumstances. Security and trust are antagonists to political spreading like wildfire... and as the latter is what we long for... the first will be given up.<br><br>Consider the ongoing discussion about opening up and bringing transparency to the pp-leaders mailing list. Majority, under present circumstances, will not consider drawbacks... they will blindly ask for what they take as the ultimate solution against corruption and power-grabbing, no matter how naive a position this is. You won't get the time to convince them of the fact that they are wrong.<br><br>So, we have to be very careful with the tools we propose, because once the majority finds them fit for any purpose they can imagine... you won't be able to take it back from them... for any reason, even good ones.<br><br>I've got similar concerns about Liquid Feedback.<br><br>Antonio<br><br><div><div id="SkyDrivePlaceholder"></div><hr id="stopSpelling">Date: Sat, 21 Jul 2012 16:43:43 +0100<br>From: nuno.cardoso@pp-international.net<br>To: pp.international.general@lists.pirateweb.net<br>Subject: Re: [pp.int.general] MeowCat, a new internet messaging platform<br><br><div class="ecxgmail_quote">On Fri, Jul 20, 2012 at 5:49 PM, Antonio Garcia <span dir="ltr"><<a href="mailto:ningunotro@hotmail.com">ningunotro@hotmail.com</a>></span> wrote:<br><blockquote class="ecxgmail_quote" style="border-left:1px #ccc solid;padding-left:1ex">
<div><div dir="ltr">
Date: Fri, 20 Jul 2012 16:45:19 +0100<br><div><div>From: <a href="mailto:nuno.cardoso@pp-international.net">nuno.cardoso@pp-international.net</a><br>To: <a href="mailto:pp.international.general@lists.pirateweb.net">pp.international.general@lists.pirateweb.net</a><br>
Subject: Re: [pp.int.general] MeowCat, a new internet messaging platform<br><br></div><div><div>On Fri, Jul 20, 2012 at 3:45 PM, Antonio Garcia <span dir="ltr"><<a href="mailto:ningunotro@hotmail.com">ningunotro@hotmail.com</a>></span> wrote:<br>
<blockquote style="border-left:1px #ccc solid;padding-left:1ex">
<div><div dir="ltr">
Nuno,<br><br>If you can trace all the connections... sooner or later you will have access to enough indiscretions, or even maybe force a few :( , so that the encryption in itself will not really matter.<br></div></div></blockquote>
<div><br></div></div><div><div>Retroshare is a F2F system. You only connect to those you trust.<br><br></div>>> Then you have to admit it is not suitable for a political party trying to get heaps of new members soon, to have also a voters base that will bring it some results in elections. If you stick only to those you trust to adhere to the same strict standards on trust as you handle... you are bound to stay alone or have no privacy at all. Those really adhering to the necessary standards are a very small minority... and you always have to fear finally trusting someone that does not care at all.<br>
</div></div></div></div></div></blockquote><div><br></div><div>Again your words prove that you didn't even look into the program you are commenting on. Please, inform yourself before you comment.</div><div>You only connect to those you trust, and they connect to those they trust, and so on, and those subsets don't have to intersect and end up creating a larger network. Connections despite being made only to those you trust, can reach the larger network anonymously hopping through trusted connections using a <a href="http://retroshare.sourceforge.net/wiki/index.php/Documentation:TurtleHopping" target="_blank">Turtle router</a> (<a href="http://en.wikipedia.org/wiki/Turtle_F2F" target="_blank">original idea</a>). You do know the concept of <a href="http://en.wikipedia.org/wiki/Six_degrees_of_separation" target="_blank">six degrees of separation</a> right? Same thing...</div>
<div> </div><blockquote class="ecxgmail_quote" style="border-left:1px #ccc solid;padding-left:1ex"><div><div dir="ltr"><div><div><div>>> This is mass dinamics and mere factual statistics. You can ignore the facts, it will get you no closer to a solution.</div>
</div></div></div></div></blockquote><div><br></div><div>So please, follow your advice and don't ignore the facts of Retroshare, learn them first before speaking of what you don't fully know yet.</div><div> </div>
<blockquote class="ecxgmail_quote" style="border-left:1px #ccc solid;padding-left:1ex"><div><div dir="ltr"><div><div><div><div>Everything is encrypted from connection to connection, so you can't track a single packet beyond any hop, you can't even know if the information it contained stopped or continued to a final destination.</div>
</div>
<div><div>The only possible "indiscretions" are those you are willing to connect to, your Friends, and "force a few" you can't do unless you break the mathematical laws that provide PGP it's strengths.<br>
<br></div>>> Yes, your friends. Unless you choose them very well, vulnerable to ordinary phishing, no need to break their encryption keys. Not everyone is plenty aware of the dangers.<br></div></div></div></div></div>
</blockquote><div><br></div><div>So please stop throwing FUD concepts at a technology that you clearly don't know and that don't even apply. Phishing? Really?</div><div>If someone is going to start adding and trusting people he doesn't really know into a Friend2Friend system it's is own problem, he's basically transforming it for himself into a normal Peer2Peer, or as I like to call them, Promiscuous2Promiscuous, but that doesn't affect anyone beyond him, precisely because of the technology. That user may be an idiot, but the technology protects everyone else from his stupidity.</div>
<div> </div><blockquote class="ecxgmail_quote" style="border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">
<div><div>Please inform yourself on the technologies before spreading <a href="http://en.wikipedia.org/wiki/Fear%2c_uncertainty_and_doubt" target="_blank">FUD</a>, and if you really found a way to break it please provide a working example and not some vague rambling that doesn't even make sense. I already saw this pattern in the LQFB/eVoting debate on the PP-EU list and it starts to hint a bit of <a href="http://en.wikipedia.org/wiki/Technophobia" target="_blank">Technophobia</a>. Sorry to put it so bluntly, but it really, really, really looks like it.<br>
<br></div>>> I am no technophobe at all. The security breach is in our brains and our statistical behaviour as members of the crowd, not necessarily in the technology.<br></div></div></blockquote><div><br></div><div>
OK, then just stop attacking the technologies with FUD and focus on the real problem then, the people. If you concern is <a href="http://en.wikipedia.org/wiki/Phishing" target="_blank">phishing</a>, start educating them about phishing, how it works, and that it can even work without computers under other names on the greater scope of <a href="http://en.wikipedia.org/wiki/Social_engineering_%28computer_security%29" target="_blank">Social Engineering</a>. It's a problem about trusting things blindly just because they look official or whatever, not because this or that technology.</div>
<blockquote class="ecxgmail_quote" style="border-left:1px #ccc solid;padding-left:1ex"><div>
<div dir="ltr">
<div><div><div><blockquote style="border-left:1px #ccc solid;padding-left:1ex"><div><div dir="ltr">Yesterday someone was talking about a new service from Google... who would scramble the faces on videos you upload for you.<br>
<br>Now, people might find it an interesting feature... but if I were police searching for people and evidence... I would have paid for google to offer such a service, as a honeypot for naive activists.<br></div></div></blockquote>
<div><br></div></div><div><div>So you are comparing a libre open source program with full scrutiny available by looking at the source code (I did, I even compile my own copy from source) where the User is in full control to a proprietary service from mega corporation where the User is the product being sold and that has policies that force cooperation with governments on demand? O....K....<br>
<br></div>>> Well, no, you seem biased ;( ... I was not talking about the technology at all, let even comparing more than one... I was talking about inconscience of the people towards danger and risks.<br><br>>> I was saying that if you upload UNSCRAMBLED faces and trust Google to scramble them for you... the police might be highly interested in obtaining from Google the unscrambled version you gave them... of the faces someone thought were worth scrambling... there is a higher probability for finding interesting faces there... than in randomly uploaded videos of crowds. And at that moment it is Google who decides, not you. You may not even get to know you turned in your friends with your ignorant and irresponsible behaviour.<br>
</div></div></div></div></div></blockquote><div><br></div><div>Ok, so forget about the technology, my reasoning persists with the same wording, you are comparing a situation "where the User is in full control" to one "where the User is the product being sold"... No need for bias or technology in the reasoning.</div>
<div> </div><blockquote class="ecxgmail_quote" style="border-left:1px #ccc solid;padding-left:1ex"><div><div dir="ltr"><div><div><div>>> See, technology was just attrezzo for the reasoning.<br></div>
</div>
</div></div></div></blockquote><div><br></div><div>Yet a reasoning that makes no sense because it puts in the same bag two very distinct things...</div><div> </div><blockquote class="ecxgmail_quote" style="border-left:1px #ccc solid;padding-left:1ex">
<div><div dir="ltr"><div><div><div>>> Let's not forget to be intelligent just because technology can help us to be lazy.<br></div></div></div></div></div></blockquote><div><br></div><div>Sometimes people don't need to be geniuses to gain from technology, even if they are lazy, they just need to NOT be stupid.</div>
<div>If one is going to use a F2F as a promiscuous P2P then I guess he's using a hammer on a screw and a screwdriver on a nail.</div><div><br></div><div>Pirate regards,</div><div>Nuno</div></div>
<br>____________________________________________________
Pirate Parties International - General Talk
pp.international.general@lists.pirateweb.net
http://lists.pirateweb.net/mailman/listinfo/pp.international.general</div> </div></body>
</html>