Author: phobos Date: 2011-05-16 14:39:26 +0000 (Mon, 16 May 2011) New Revision: 24757 Added: projects/presentations/2011-anonymity-usability-humans-UCL.pdf projects/presentations/2011-anonymity-usability-humans-UCL.tex projects/presentations/images/april3rd-torgui-main_open_text_annotated.png projects/presentations/images/direct-users-2011-05-15-300-all-2010-01-01.png projects/presentations/images/tor-cli-start.png projects/presentations/images/tor-gui-competition-webpage.png projects/presentations/images/tork-osd-thumb.jpg projects/presentations/images/tork-osd-thumb.png projects/presentations/images/vidalia-control-panel.png Modified: projects/presentations/images/vidalia-network-map.png Log: add presentation for UCL today, including related images and tex file. Added: projects/presentations/2011-anonymity-usability-humans-UCL.pdf =================================================================== (Binary files differ) Property changes on: projects/presentations/2011-anonymity-usability-humans-UCL.pdf ___________________________________________________________________ Added: svn:mime-type + application/octet-stream Added: projects/presentations/2011-anonymity-usability-humans-UCL.tex =================================================================== --- projects/presentations/2011-anonymity-usability-humans-UCL.tex (rev 0) +++ projects/presentations/2011-anonymity-usability-humans-UCL.tex 2011-05-16 14:39:26 UTC (rev 24757) @@ -0,0 +1,246 @@ +\documentclass{beamer} +\mode<presentation> +\usetheme{Boadilla} +\title{Anonymity, Usability, and Humans. Pick Two.} +\author{Andrew Lewman \\ andrew@torproject.org} +\date{16 May 2011} +\begin{document} + +\begin{frame} +\maketitle +\begin{center} +\includegraphics[height=3cm]{./images/2009-tor-logo} +\end{center} +\end{frame} + +\begin{frame} +\frametitle{What are we talking about?} +\begin{itemize} +\item Crash course on anonymous communications +\item Quick overview of Tor +\item Usability, Security, and Humans +\end{itemize} +\end{frame} + +\begin{frame} +\frametitle{The Tor Project, Inc.} +501(c)(3) non-profit organization dedicated to the research and development of technologies for online anonymity and privacy +\begin{center} +\includegraphics[height=5cm]{./images/2009-oval_sticker_new} +\end{center} +\end{frame} + +\begin{frame} +\frametitle{What is anonymity?} +\includegraphics[width=10cm]{./images/2llg3ts} +\end{frame} + +\begin{frame} +\frametitle{Anonymity isn't cryptography} +\begin{itemize} +\item Cryptography protects the contents in transit +\item You still know who is talking to whom, how often, and how much data is sent. +\end{itemize} +\begin{center} +\includegraphics[width=5cm]{./images/encryption-cc-by-sa} +\end{center} +\end{frame} + +\begin{frame} +\frametitle{Anonymity isn't steganography} +Attacker can tell Alice is talking to someone, how often, and how much data is sent. +\bigskip + +\begin{center} +\includegraphics[width=5cm]{./images/steganography-cc-by-sa} +\end{center} +\end{frame} + +\begin{frame} +\frametitle{Anonymity isn't just wishful thinking...} +\begin{itemize} +\item "You can't prove it was me!" +\pause \item "Promise you won't look" +\pause \item "Promise you won't remember" +\pause \item "Promise you won't tell" +\pause \item "I didn't write my name on it!" +\pause \item "Isn't the Internet already anonymous?" +\end{itemize} +\end{frame} + +\begin{frame} +\frametitle{..since "weak" isn't anonymity.} +\begin{itemize} +\item<1> \textit{"You can't prove it was me!"} Proof is a very \textbf{strong} word. Statistical analysis allows suspicion to become certainty. +\item<2> \textit{"Promise you won't look/remember/tell"} Will other parties have the abilities and incentives to keep these promises? +\item<3> \textit{"I didn't write my name on it!"} Not what we're talking about. +\item<4> \textit{"Isn't the Internet already anonymous?"} Nope! +\end{itemize} +\end{frame} + +\begin{frame} +\frametitle{Anonymous communication} +\begin{itemize} +\item People have to hide in a crowd of other people ("anonymity loves company") +\item The goal of the system is to make all users look as similar as possible, to give a bigger crowd +\item Hide who is communicating with whom +\item Layered encryption and random delays hide correlation between input traffic and output traffic +\end{itemize} +\end{frame} + +\begin{frame} +\frametitle{Low-latency versus High-latency anonycomm systems} +\begin{itemize} +\item Tor is not the first system; ZKS, mixmaster, single-hop proxies, Crowds, Java Anon Proxy. +\item Low-latency systems are vulnerable to end-to-end correlation attacks. +\item High-latency systems are more resistant to end-to-end correlation attacks, but by definition, less interactive. +\end{itemize} +\end{frame} + +\begin{frame} +\frametitle{Low-latency systems are all the rage} +\begin{itemize} +\item<1> Interactive apps: web, instant messaging, VOIP, ssh, X11, cifs/nfs, video streaming (millions of users) +\item<1> Multi-hour delays: email, nntp, blog posting? (tens of thousands of users?) +\item<2> \begin{center}\begin{Large}And if anonymity loves company...\end{Large}\end{center} +\end{itemize} +\end{frame} + +\begin{frame} +\frametitle{What is Tor?} +\begin{itemize} +\item online anonymity software and network +\pause \item open source, freely available (3-clause BSD license) +\pause \item active research environment: \\ +Rice, UMN, NSF, NRL, Drexel, Waterloo, Cambridge UK, Bamberg Germany, Boston Univ, Harvard, MIT, RPI, Georgia Tech +\pause \item increasingly diverse toolset: \\ +Tor, Torbutton, Tor Browser Bundle, TAILS Anonymous Operating System, Tor Weather, Tor auto-responder, Secure Updater, Orbot, Torora, Tor Check, Arm, Nymble, Tor Control, Tor Wall, TorVM +\end{itemize} +\end{frame} + +\begin{frame} +\frametitle{How is Tor different from other systems?} +\begin{overlayarea}{9cm}{6cm} +\only<1>{\includegraphics[height=7cm]{./images/single_hop_relay}} +\only<2>{\includegraphics[height=7cm]{./images/evil_single_hop_relay}} +\only<3>{\includegraphics[height=7cm]{./images/data_snooping_single_hop_relay}} +\end{overlayarea} +\end{frame} + +\begin{frame} +\frametitle{Who uses Tor?} +\parbox{8cm}{\sloppy +\setbeamercolor{background}[\includegraphics[scale=0.35]{./images/anonymousman}} +\parbox{3cm}{\sloppy +\begin{flushleft} +\begin{itemize} +\begin{small} +\item Normal people +\item Law Enforcement +\item Human Rights Activists +\item Business Execs +\item Militaries +\item Abuse Victims +\end{small} +\end{itemize} +\end{flushleft} +} +\end{frame} + +\begin{frame} +\frametitle{estimated 300k to 800k daily users} +\setbeamercolor{background}[\includegraphics[scale=0.4]{./images/huge-crowd}] +\end{frame} + +\begin{frame} +\frametitle{How many people use Tor daily?} +\includegraphics[scale=0.5]{./images/direct-users-2011-05-15-300-all-2010-01-01} +\end{frame} + +\begin{frame} +\frametitle{Online and Offline change happens} +\includegraphics[scale=0.5]{./images/egypt} +\end{frame} + +\begin{frame} +\frametitle{...spring is in the air...} +\begin{center} +\includegraphics[scale=1.2]{./images/paco-primera-pagina-oleo-lienzo-110-x-150-cms-2008-red} +\end{center} +\end{frame} + +\begin{frame} +\frametitle{Tor hidden services} +\includegraphics[scale=0.5]{./images/hidden-federalist} +\end{frame} + + +\begin{frame} +\frametitle{Anonymity, Usability, and Humans} +\begin{itemize} +\item Allow the user to fully configure Tor rather than manually searching for and opening text files. +\item Let users learn about the current state of their Tor connection, and configure or find out whether any of their applications are using it. +\item Make alerts and error conditions visible to the user. +\item Run on Windows, Linux, and OS X, on a normal consumer-level machine. +\end{itemize} +\end{frame} + +\begin{frame} +\frametitle{First iteration: command line} +\includegraphics[scale=0.8]{./images/tor-cli-start} +\end{frame} + +\begin{frame} +\frametitle{Second iteration: GUI controller contest} +%http://replay.web.archive.org/20081220230929/http://www.torproject.org/gui/i... +\includegraphics[scale=0.6]{./images/tor-gui-competition-webpage} +\end{frame} + +\begin{frame} +\frametitle{TorK} +%http://replay.web.archive.org/20081222193036/http://anonymityanywhere.com/to... +\includegraphics[scale=0.6]{./images/tork-osd-thumb} +\end{frame} + +\begin{frame} +\frametitle{April3rd} +%http://replay.web.archive.org/20081228051332/http://www.april3rd.com/tor/ +\includegraphics[scale=0.4]{./images/april3rd-torgui-main_open_text_annotated} +\end{frame} + +\begin{frame} +\frametitle{Vidalia} +\includegraphics[scale=0.3]{./images/vidalia-network-map} +\end{frame} + +\begin{frame} +\frametitle{Time for a demo} +Demonstration of Tor Browser Bundle +\end{frame} + +\begin{frame} +\frametitle{Experience so far} +\begin{itemize} +\item Our web site is confusing to users and not technical enough for researchers. +\pause \item Concepts of anonymity and its threats escape most users.\\"I want my Youtube!" "I use tor to organize on facebook." +\pause \item Cultural differences and their expectations of software, usability, anonymity, privacy, and what tor provides. +\pause \item Software leaks data all over the place. Stopping these leaks leads to unexpected user experiences. +\pause \item Five years since we last dabbled in Usability. +\end{itemize} +\end{frame} + +\begin{frame} +\frametitle{Next steps} +Visit \url{https://www.torproject.org/} for more information, links, and ideas. +\end{frame} + +\begin{frame} +\frametitle{Copyright} +\begin{itemize} +\item who uses tor? \url{http://www.flickr.com/photos/mattw/2336507468/siz}, Matt Westervelt, CC-­BY-­SA. +\item 500k, \url{http://www.flickr.com/photos/lukaskracic/334850378/sizes/l/}, Luka Skracic, used with permission. +\item spring is in the air, Paco Pomet, http://pacopomet.wordpress.com/ +\end{itemize} +\end{frame} + +\end{document} Property changes on: projects/presentations/2011-anonymity-usability-humans-UCL.tex ___________________________________________________________________ Added: svn:mime-type + text/x-tex Added: projects/presentations/images/april3rd-torgui-main_open_text_annotated.png =================================================================== (Binary files differ) Property changes on: projects/presentations/images/april3rd-torgui-main_open_text_annotated.png ___________________________________________________________________ Added: svn:mime-type + image/png Added: projects/presentations/images/direct-users-2011-05-15-300-all-2010-01-01.png =================================================================== (Binary files differ) Property changes on: projects/presentations/images/direct-users-2011-05-15-300-all-2010-01-01.png ___________________________________________________________________ Added: svn:mime-type + image/png Added: projects/presentations/images/tor-cli-start.png =================================================================== (Binary files differ) Property changes on: projects/presentations/images/tor-cli-start.png ___________________________________________________________________ Added: svn:mime-type + image/png Added: projects/presentations/images/tor-gui-competition-webpage.png =================================================================== (Binary files differ) Property changes on: projects/presentations/images/tor-gui-competition-webpage.png ___________________________________________________________________ Added: svn:mime-type + image/png Added: projects/presentations/images/tork-osd-thumb.jpg =================================================================== (Binary files differ) Property changes on: projects/presentations/images/tork-osd-thumb.jpg ___________________________________________________________________ Added: svn:mime-type + image/jpeg Added: projects/presentations/images/tork-osd-thumb.png =================================================================== (Binary files differ) Property changes on: projects/presentations/images/tork-osd-thumb.png ___________________________________________________________________ Added: svn:mime-type + image/png Added: projects/presentations/images/vidalia-control-panel.png =================================================================== (Binary files differ) Property changes on: projects/presentations/images/vidalia-control-panel.png ___________________________________________________________________ Added: svn:mime-type + image/png Modified: projects/presentations/images/vidalia-network-map.png =================================================================== (Binary files differ)