[tor-commits] [community/staging] Add digital security risks disclaimer and quick assessment

[hiro at torproject.org]

commit efc7eea85ff23dc737aa4d318e42fb009a5448b8
Author: gus <gus at torproject.org>
Date:   Wed Oct 2 21:26:03 2019 -0400

    Add digital security risks disclaimer and quick assessment
---
 content/training/risks/contents.lr | 52 ++++++++++++++++++++++++++++++++++++++
 1 file changed, 52 insertions(+)

diff --git a/content/training/risks/contents.lr b/content/training/risks/contents.lr
new file mode 100644
index 0000000..6da1774
--- /dev/null
+++ b/content/training/risks/contents.lr
@@ -0,0 +1,52 @@
+_model: page
+---
+title: Risks
+---
+body:
+
+To our knowledge, no Tor trainer has ever faced consequences as a result of training others or speaking about Tor. However, in some countries and in certain circumstances, it's possible that a simply gathering of human rights defenders could be very risky, illegal or even subject of imprisonment, physical assaults, large fines, threats, placement on government watch lists and targeting for surveillance. 
+
+If you want to run a Tor training for the first time and you don't know how to assess the political and social environment, we strongly encourage you read this document and, in case of doubt, to reach out Tor Community Team privately.
+
+Some of potential risks of running a digital security training are only valid in specific contexts. Therefore the potential risks associated to running a Tor training depend on:
+
+1. **Your threat model.** A high-profile activist already under a lot of surveillance, for example, might attract more attention when reaching out other activists to run a digital security training.
+2. **The laws and regulations in the country.** Best to consult with local lawyers and local freedom of expression organizations, and learn whether your country has a record in prosecuting individuals engaging in similar types of activities.
+3. **The types of training.** Not all trainings carry the same weight in terms of potential risk. For example, talking about privacy on digital age might be appreciable, but teaching how to circumvent government censorship could be a serious felony.
+4. **The audience.** Gathering university students might not attract attention, but in case of a group of journalists working on leaked documents about government corruption, you might need to be extra careful on how to reach out them in a private way.
+5. **The training venue.** Running a Tor training in some spaces could expose your participants identity. Ideally, you should use a private space that you can control the participants entrance. Check before the training if participants are comfortable on revealing their identity to a third party, if it's the case.
+
+## Evaluating risks
+
+Some questions you may want to answer before running a digital security training include:
+
+* Has anyone in my country ever been criminalized based on their internet activity? (This does not necessarily need to be specific to digital security training or use of Tor)
+* Are there laws in my country that require Internet Service Providers (ISPs) to track my online activity?
+* Is it illegal for me to access certain websites?
+* Does my country prohibit me from using:
+  * Cryptography?
+  * Anonymity software?
+
+Note, this is not an exhaustive list of questions.
+
+Additionally, while many countries do not have laws specifically prohibiting the activity of running digital security training, the use of digital security tools may still be criminalized in certain countries under other, broader laws. For example, using Tor Browser may be viewed as illegal or anti-government activity.
+
+Please note that we are not lawyers, and any information we give you does not constitute legal advice. Additionally, your communication with us is not protected by any legal privilege so law enforcement may subpoena and obtain any information you give us. However, we may be able to put you in touch with lawyers who are capable of addressing your questions and/or concerns.
+
+Some relevant resources include:
+    
+  * [EFF Know your rights](https://www.eff.org/issues/know-your-rights)
+  * [EFF Tor legal FAQ](https://community.torproject.org/relay/community-resources/eff-tor-legal-faq/)
+  * [OONI disclaimer](https://ooni.io/about/risks/)
+---
+color: primary
+---
+html: two-columns-page.html
+---
+key: 6
+---
+section: training
+---
+section_id: training
+---
+subtitle: Things you should be aware before running a digital security training