[tor-talk] (no subject)

Bernard Tyers - ei8fdb ei8fdb at ei8fdb.org
Thu Sep 26 20:33:53 UTC 2013


On 26 Sep 2013, at 00:59, Roger Dingledine <arma at mit.edu> wrote:

> On Wed, Sep 25, 2013 at 11:17:20PM +0100, Bernard Tyers - ei8fdb wrote:
>> This is true, but people will use what they can if they have
>> difficulties. Anything that helps people installed TBB must be useful,
>> right?
> 
> No? As one example, if you're an activist in <country X> you maybe
> shouldn't get TBB from your government's website.

From your government's website? You mean adding the repo ppa:upubuntu-com/tor? 

If so, then true, the user has no clue about where the install is coming from. But possibly, neither do they know..

Fair point, but to counter this the user needs education *before* they download TBB from *whereever*.

If the user is already at the point of already having it on their computer, they have downloaded it, and their intention is to install it.

They need education of the best place to get it from, as opposed to from some (potentially) dodgy youtube video.

If a video shows how to do it insecurely, but a well-written, but technical FAQ explains the same, some people will choose the nice and simple video.

I don't agree this is right, but this is what people do.


> Speaking of which, I don't think that youtube video had any mention of
> checking signatures or anything? (But I didn't watch it carefully and
> didn't listen to it at all.) I guess it has you adding a separate deb
> repository, and you fetch the keyring for that, so assuming you fetched it
> right you're likely to get the package it wanted you to get -- whatever
> that is.

There was no audio. Just some randomer hightlighting text in a textpad to show the step he/she was on.

If we could do some simple steps in the video for signature checking, they'd also help.


> As another example, until the TBB can update itself
> (which is actually coming pretty soon I hope:
> https://trac.torproject.org/projects/tor/ticket/4234 ), we need users
> to understand how and when to upgrade. We're doing a poor job of that
> now, but having even more ways that people install it could make the
> issue even worse.
> 
>> I've had a look around, but I haven't come across any "official Tor
>> Project videos" to help people get TBB installed on [insert OS]?
>> 
>> Are there any created? If not, I could try and do some short videos
>> for Debian, OS X. Just using the "official" steps direct from TP website.
> 
> I'd suggest checking out TBB 3.x and thinking about videos for that
> instead:
> https://blog.torproject.org/category/tags/tbb-30
> Since I'm hoping we can drop TBB 2.x real soon now.


Ok, I'll try that this weekend.

Incidentally, is anyone on the list going to Open ITP's CTS? If anyone is interested in meeting up, I'll be there. Let me know on/off-list.

Bernard

--------------------------------------
Bernard / bluboxthief / ei8fdb

IO91XM / www.ei8fdb.org

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 841 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20130926/7e689f70/attachment.sig>


More information about the tor-talk mailing list