commit b2f5b1ccc4f76ebb7c0fb69c6a44992607ca6313 Author: Arturo Filastò art@fuffa.org Date: Mon Mar 16 13:19:04 2015 +0100

Add informed consent text prepared by Dan O'Huiginn in https://lists.torproject.org/pipermail/ooni-dev/2015-January/000208.html --- informed-consent/inform-users-long.md | 55 ++++++++++++++++++++++++++++++++ informed-consent/inform-users-short.md | 10 ++++++ 2 files changed, 65 insertions(+)

diff --git a/informed-consent/inform-users-long.md b/informed-consent/inform-users-long.md new file mode 100644 index 0000000..fdfebbd --- /dev/null +++ b/informed-consent/inform-users-long.md @@ -0,0 +1,55 @@ +# LEGALITY + +OONI does several things which may be illegal in your country, and/or +banned by your ISP. + +OONI's http test will download data from controversial websites, +specifically targeting those which may be censored in your country. +These may include, for example, sites containing pornography or hate +speech. You can find a list of sites checked at +https://github.com/citizenlab/test-lists + +Even where these sites are not blocked, it may be illegal to access +them. It may also be illegal to bypass censorship, as OONI attempts by +using Tor. + +In the most extreme case, any form of network monitoring could be +illegal or banned, or even considered a form of espionage. + +[Include link to some resource on relevant laws globally. Someone like +the EFF must have one of these; does anybody have a link?] + +# PRIVACY + +OONI IS NOT DESIGNED TO PROTECT YOUR PRIVACY. It will reveal information +about your internet connection to the whole world. Particular groups, +such as your ISP and web services used by the ooni tests, will be able +to discover even more detailed information about you. + +THE PUBLIC will be able to see the information collected by OONIprobe. +This will definitely include your approximate location, the network +(ASN) you are connecting from, and when you ran ooniprobe. Other +identifying information, such as your IP address, is not deliberately +collected, but may be included in HTTP headers or other metadata. The +full page content downloaded by OONI could potentially include further +information, for example if a website includes tracking codes or custom +content based on your network location. + +You can see what information OONI releases to the public at +https://ooni.torproject.org/reports/. You should expect this information +to remain online PERMANENTLY. [include details of retention policy, once +we have one] + +THE OONI PROJECT will also be able to see your IP address [What other +info do we get?] + +ORGANIZATIONS MONITORING YOUR INTERNET CONNECTION will be able to see +all web traffic generated by OONI, including your IP address, and will +likely be able to link it to you personally. These organizations might +include your government, your ISP, and your employer. + +ANYBODY WITH ACCESS TO YOUR COMPUTER, now or in the future, may be able +to detect that you have installed or run ooni + +SERVICES CONNECTED TO BY OONI will be able to see your IP address, and +may be able to detect that you are using OONI diff --git a/informed-consent/inform-users-short.md b/informed-consent/inform-users-short.md new file mode 100644 index 0000000..0422d5a --- /dev/null +++ b/informed-consent/inform-users-short.md @@ -0,0 +1,10 @@ +WARNING: Running OONI may be illegal in your country, or forbidden by +your ISP. By running OONI you will connect to web services which may be +banned, and use web censorship circumvention methods such as Tor. The +OONI project will publish data submitted by probes, possibly including +your IP address or other identifying information. In addition, your use +of OONI will be clear to anybody who has access to your computer, and to +anybody who can monitor your internet connection (such as your employer, +ISP or government). + +[link to long version]