[Globaleaks-talk] Request for more information

[Claudio Agosti]

Hi Cheryl :)

On Thu, Mar 26, 2015 at 1:55 AM, cheryl soares <cheryl.soares at isyxtech.com>
wrote:

> Dear Global leaks
>

Google will say "*do you mean GlobaLeaks*"  ;) ? (only one "L" in the
middle)



> Just came across your solution. Need to know the following:
>
> 1)      Can it work within an intranet of an organization
>
GlobaLeaks by default, it is exposed only in localhost, because is
interfaced only via Tor network (which speaks in localhost), and is
reachable by Tor network knowing the hidden service name.

However, to answer your question: Yes can works in an Intranet, you have
two technical options (depending if you wants make globaleaks accessible
only to the Intranet Users [option 'a'] or for more complex network design
[option 'b'])

a) Using Tor2Web proxy in order to permit people inside the intranet
connect without having Tor installed, and making the proxy IP address
accessible only via Intranet. This option permit to remove Tor Browser
Bundle as requirement for the whistleblower.

b) If the intranet connection is secure against eavesdropping, you can just
edit the file /etc/default/globaleaks specifiy the external IP address
permitted to bind globaleaks service. In very few cases that can happen in
safety.

2)      How are new requirements handled, would there be additional charges
>

Requests can be done opening an issue on github:
https://github.com/globaleaks/GlobaLeaks/issues

There is not a price list, but if the request diverge from the roadmap we
have already funded, we've to evaluate how much effort will take. In these
case, we do not just "implement what is requested" but perform an analysis
of the requirement + try to put the adopters needs in comparison with the
many other adopters request we have + try to figure out how the feature can
benefit all the other initiatives. to go thought this process, you can do
it contacting projects at logioshermes.org (Hermes Center for Transparency and
Digital Human rights https://logioshermes.org is the organisation behind
GlobaLeaks and Tor2Web). Depending on the required effort, kind of project,
amount day/man required, we ask for a consultancy fee.

Of course, if you want try a more transparent process, we can manage also
through this mailing list which archives are public:
http://lists.globaleaks.org/pipermail/globaleaks-talk/

3)      How are updates and upgrades handled
>
When a minor or major update is ready in the github repository, test are
performed and the new stable release is "tagged" in github, appling a PGP
signature from the development key.
Along the new version, a debian package is published in
https://deb.globaleaks.org
At that point, every server with globaleaks, can be update with "apt-get
update globaleaks".

4)      Will you in the future come up with a pricing structure for this
>
Hermes Center is a No Profit dedicated only to the software development,
and, we lack the structure to offer a professional SLA (like, 24h 7 days
assistance). At the moment we have not an answer about the future. Anyway,
we have thought about that once a while.



Best regards to all the readers, this mailing list is quite silent, also if
our progress are quite exciting and constant.
I'll share some of the latest meaningful links:

   - Hermes in Partnership with Transparency International Philippines:
   http://www.transparency-ph.org/2015/03/technology-for-transparency-transparency-international-philippines-ti-ph-partners-with-the-hermes-center-for-transparency-and-digital-human-rights-hermes/
   - Adoption and endorsing of MexicoLeaks causes trouble before the first
   story:
   http://www.washingtonpost.com/blogs/worldviews/wp/2015/03/13/mexicos-version-of-wikileaks-causes-controversy-before-its-first-story/
   - Our experiment at the International Journalism Festival, to provide
   every interested journalist with GlobaLeaks account to be embedded in their
   blog/newspaper:
   http://www.journalismfestival.com/programme/2015/greenwald-in-a-box-a-hermes-experiment
   - The great integration that OCCRP (Organized Crime and Corruption
   Reporting Project) has done in their installation:
   https://occrp.org/occrpleaks/


bye,
Claudio

-- 
Claudio Agosti - Board Member
HERMES center for transparency and digital human rights
No profit association - http://logioshermes.org - https://globaleaks.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.globaleaks.org/pipermail/globaleaks-talk/attachments/20150326/86dcd303/attachment.html>