[tor-dev] One-Click-Publishing HS - aka "Project Cute"
sina at redteam.io
Wed Oct 30 18:44:12 UTC 2013
-----BEGIN PGP SIGNED MESSAGE-----
I have been trying to help get Project Cute which is a "point-and-click"
hidden service blogging tool, off the ground.
So far I have 2 documents that have come out as a result of a few IRC chats.
1) Possible use-cases:
2) Working draft Design Document:
Any comment or attention from you is very much appreciated.
All the best,
For the sake of discussion, I am pasting the Use Case document, so you can just reply away:
This document is an attempt to list the possible users of a
"one-click-publishing" hidden service. The goal of this effort,
is to provide developers with a set of options and features that could support
their development decisions. It is also an attempt to describe the challenges and
risks associated with anonymous content publishing
1) Activist - a single person
This is a person with a specific message or material. Wishes to
share some content with the world, without revealing identity.
This activist/publisher can operate from a range of private and public
places. Such as: Work, Home, School, Internet Cafe and the public library.
May or may not be able to dedicate a hardware for such activities.
But we can assume access to to a computer that can be booted with a USB or CD.
2) Activists - 2 or more of them
They all access the same site from different places on the Internet.
They have specific political/social agenda. Often they maintain an AFK
identity and an on-line persona. Hoping for a level of privacy. They
each have different roles based on their skills. Roles like reporter,
editor, graphic designer and comment-moderator. They publish content
on a consistent bases, and very determined to get their words out.
Such groups are the building blocks of large scale political/social movements.
Their activities lead to mass protests and social change.
This could be an employee of an evil entity that is about
to do harm. For example company X bypassing international laws &
selling DPI boxes to dictatorships. This whistle blower wishes to stay
anonymous in fear of retribution. He/She may have limited technical
abilities, and facing a well resourced adversary.
I call this group professionals because they usually operate like a
business and involved in some sort of commercial activity. This group
includes and not limited to: Newspapers, public and private entities.
They wish to use the features such as end-to-end encryption and DDoS
mitigation of hidden services, but don't have the desire or technical
ability to setup a proper Hidden service. Many major newspapers are
setting up whistle blowing portals on their websites already.
5) Anonymous Crime Reporters
Police departments have webportals for the public to send "anonymous" crime
reports. The reality is that these portals are NOT anonymous, considering
the state of insecurities on the Internet. Such Law Enforcement groups
can instead direct crime-reporters to launch a self hosted hidden service
and not depend their lives on privacy by policy.
6) Anyone that does not or can not got to wordpress.com and register for a free blog.
Help me identify these groreality ups :)
“Be the change that you wish to see in the world.” Mahatma Gandhi
-----BEGIN PGP SIGNATURE-----
-----END PGP SIGNATURE-----
More information about the tor-dev