[Freedombox-discuss] Package Lists and Configuration

[Michael Rogers]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 04/02/13 10:28, Johan Henselmans wrote:
> I am still wondering how you could find a solution for being found
> on a network by the people that you want to let you find, and not
> be found by the ones that you do not want anything to do with.
> 
> I mention this because it seemed that in the Syrian situation
> there was a rumor that satellite phone locations were used for
> rocket attacks.
> 
> The only solution I see is some server that will distribute your 
> current IP address based on who you have indicated to trust. Which
> of course leads to the question who to trust that server.
> 
> Do you guys see/know any solution for this problem?

Hi Johan,

I don't think concealing your IP address would protect you against
rocket attacks. As far as I know, there are two ways to locate a
satellite phone that have nothing to do with its IP address. The first
is radio triangulation. The second is the GPS location that the phone
transmits when it connects to the satellite.

However, for less extreme situations I'm still interested in the
problem of publishing your IP address so that only trusted people can
retrieve it.

One possibility would be to publish your IP address in a DHT under a
key known only to yourself and the trusted people (or you might use a
different DHT key for each trusted person). But the DHT nodes would be
able to see which IP addresses were retrieving which other IP
addresses, so they'd be able to map the social network.

To prevent that, you could encrypt the IP address before storing it in
the DHT - but the DHT nodes would still be able to see which IP
addresses were retrieving encrypted data published by which other IP
addresses.

To prevent /that/, everyone could access the DHT through an anonymity
system such as Tor - but in that case you might as well publish your
IP address through a Tor hidden service and forget about the DHT.

And that looks a lot like FreedomBuddy. :-)

Cheers,
Michael
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEcBAEBAgAGBQJRESnQAAoJEBEET9GfxSfMAzYIAIQS8Hr35cp8dGyhdPYKo8xN
76VWHyZyG/wpR7ihLsuipt3KtdXYl8LIUCIaYh6s3ZgXZgLFSTJqGcTosDf+ho9D
cqW4KiEJ5lUii5u0L5BfDYDy7rl9gFqsPomBjg4T+s2GzXZwyTf0jYPtVZ2FuAAP
yNwDDwW240AeSTfr2MAWdDd/Ln2sZGrG5AlmszkNvMYEnRuvxtmP50IZkdKHgXTO
ixOexWVk9l8FFlPF0hYZQkxzJz9pC+ZpNvhVAMQPmfIojTjOrYJm0k+w3A1TPcqC
ZAnU+KekBINFUOx5LVAG34GLLIPWQCIl9FNbwnZM3QIXYTUaAW0D0zueGHB1x9U=
=deBw
-----END PGP SIGNATURE-----