[tor-commits] [spec/master] Add informed consent text prepared by Dan O'Huiginn in https://lists.torproject.org/pipermail/ooni-dev/2015-January/000208.html

[art at torproject.org]

commit b2f5b1ccc4f76ebb7c0fb69c6a44992607ca6313
Author: Arturo Filastò <art at fuffa.org>
Date:   Mon Mar 16 13:19:04 2015 +0100

    Add informed consent text prepared by Dan O'Huiginn in https://lists.torproject.org/pipermail/ooni-dev/2015-January/000208.html
---
 informed-consent/inform-users-long.md  |   55 ++++++++++++++++++++++++++++++++
 informed-consent/inform-users-short.md |   10 ++++++
 2 files changed, 65 insertions(+)

diff --git a/informed-consent/inform-users-long.md b/informed-consent/inform-users-long.md
new file mode 100644
index 0000000..fdfebbd
--- /dev/null
+++ b/informed-consent/inform-users-long.md
@@ -0,0 +1,55 @@
+# LEGALITY
+
+OONI does several things which may be illegal in your country, and/or
+banned by your ISP.
+
+OONI's http test will download data from controversial websites,
+specifically targeting those which may be censored in your country.
+These may include, for example, sites containing pornography or hate
+speech. You can find a list of sites checked at
+https://github.com/citizenlab/test-lists
+
+Even where these sites are not blocked, it may be illegal to access
+them. It may also be illegal to bypass censorship, as OONI attempts by
+using Tor.
+
+In the most extreme case, any form of network monitoring could be
+illegal or banned, or even considered a form of espionage.
+
+[Include link to some resource on relevant laws globally. Someone like
+the EFF must have one of these; does anybody have a link?]
+
+# PRIVACY
+
+OONI IS NOT DESIGNED TO PROTECT YOUR PRIVACY. It will reveal information
+about your internet connection to the whole world. Particular groups,
+such as your ISP and web services used by the ooni tests, will be able
+to discover even more detailed information about you.
+
+THE PUBLIC will be able to see the information collected by OONIprobe.
+This will definitely include your approximate location, the network
+(ASN) you are connecting from, and when you ran ooniprobe. Other
+identifying information, such as your IP address, is not deliberately
+collected, but may be included in HTTP headers or other metadata. The
+full page content downloaded by OONI could potentially include further
+information, for example if a website includes tracking codes or custom
+content based on your network location.
+
+You can see what information OONI releases to the public at
+https://ooni.torproject.org/reports/. You should expect this information
+to remain online PERMANENTLY. [include details of retention policy, once
+we have one]
+
+THE OONI PROJECT will also be able to see your IP address [What other
+info do we get?]
+
+ORGANIZATIONS MONITORING YOUR INTERNET CONNECTION will be able to see
+all web traffic generated by OONI, including your IP address, and will
+likely be able to link it to you personally. These organizations might
+include your government, your ISP, and your employer.
+
+ANYBODY WITH ACCESS TO YOUR COMPUTER, now or in the future, may be able
+to detect that you have installed or run ooni
+
+SERVICES CONNECTED TO BY OONI will be able to see your IP address, and
+may be able to detect that you are using OONI
diff --git a/informed-consent/inform-users-short.md b/informed-consent/inform-users-short.md
new file mode 100644
index 0000000..0422d5a
--- /dev/null
+++ b/informed-consent/inform-users-short.md
@@ -0,0 +1,10 @@
+WARNING: Running OONI may be illegal in your country, or forbidden by
+your ISP. By running OONI you will connect to web services which may be
+banned, and use web censorship circumvention methods such as Tor. The
+OONI project will publish data submitted by probes, possibly including
+your IP address or other identifying information. In addition, your use
+of OONI will be clear to anybody who has access to your computer, and to
+anybody who can monitor your internet connection (such as your employer,
+ISP or government).
+
+[link to long version]