[liberationtech] Request for comments: Gaza Trust Package

[Uncle Zzzen]

KheOps said:
> Unless I didn't see it, may I suggest to add links and checksums for the
> Tor Browser Bundle on Linux & Mac?
You're right. I'll add them.
This was just a preliminary version, to get responses regarding the text,
the proposed procedure, and the idea in general.

> Maybe a few VPN software as well?
I don't know any VPN software packages for any platform. I have linux (so
it comes with openvpn) and not many people have computers where I live :).
Is there anything standard (and open-source) for Windows and mac, or is it
provider-dependent? (I know that some VPN providers generate a
user-specific .exe installer).

Also: are VPNs a practical solution for an untrusted zone?

Yishay Mor said:
> I may have missed something, but I'm not sure how Tor can shield you
against a Mark 84.
Although in semitic languages "trust" and "security" are derived from the
same root, the Gaza Trust packages doesn't provide security. It doesn't
protect from attacks (not even cyber ones). It only protects from mistrust.
For example: many Gaza Care packages contain a PDF with fisrt-aid
instructions in Arabic. Suppose you're in Gaza and someone offers it to you
on a memory stick, but you can't tell whether it contains malware or
disinformation.
This affects the entire population: not only the ones who were hit by a
Mark 84, but also those who didn't give them first aid because they were
afraid to open the PDF that could have taught them how to.

*Request for verified arabic first aid guide*
The reason why I didn't include the Arabic PDF files in my package is that
I don't read Arabic and can't vouch for these files.
I'd like to add at least a first aid guide, because it would demonstrate
that trust packages don't only deal with software.
If an Arabic speaking doctor or medic on this list can point to an SSL url
of a decent first aid guide in Arabic, and several Arabic speaking
doctors/medics +1 it, I'd gladly include it. I trust this list to be big
enough so that if there's anything wrong with that file (including malware)
- it is bound to be discovered.

In general: if there are files you'd like to see in a trust package, best
is to create one yourself ;)

Peace,
The Dod
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.stanford.edu/pipermail/liberationtech/attachments/20121120/a871e7a3/attachment.html>