BeDemocratic

Hi there,

I’d like to propose the adding of a new optional kit to Haiku. Meaning, it’s really a set of applications I’d like to see packed together which would increase security and civil rights for the very user. Every day that goes we see more and more software which are seriously discussable in terms of personal integrity etc. Time to start fighting back.

In the BeDemocratic package I propose that the following gets added

  1. Encrypted file system…
    using AES or similar (check www.truecrypt.org). This is really for Axel to answer if it’s possible. I’d want to be able to completely encrypt my drives except for sysfiles and folders and make them “MINE” not the governments etc. This would also increase security locally a lot. System files could be unencrypted and when log in, you’d need to enter a password to mount resources (other partitions etc). Is this possible with HaikuFS and if not, how long would it take to implement. I can consider financing this out of my own pocket.

  2. Cookie+Privacy clearance…
    This is something Firefox already utilizes but I would consider adding something to Systray for this which would also clear VirtualMEM and other caches on the drive.

  3. I2P support (www.i2p.net)
    Would load in I2P from start and configure it smoothly. Perhaps easier GUI to change Tunnels+Traffic that get’s to go through it.

  4. PGP support (or similar)
    To fix the issues with all your e-mails being tracked in the western world (and assumingly so in most of the world)

  5. Anonymous Proxy support
    Adding of several anonymous proxys to bookmarks in your webbrowser to let you surf anonymously.

  6. Mass Encrypt/Delete Logs.
    Would search for any logfiles, like used for your webhosting stuff and maybe BeShare etc, and simply encrypt or delete it.

  7. Noiser
    Since one of the primary goals of some new Laws etc. is to do surveillance of your activities. I suggest building some sort of noiser. What it would do is use spare bandwidth and send out bogus requests (similar to SPAM but trafficwise). The noiser should Google words like “Terrorism, How to build a bomb” etc… and through that create extra noise which would simply increase worthless info for those who surveille us. Surely this is interesting if it is used in mass, say 100 000 users. The amount of worthless info would increase dramatically and I would assume the result would be to ignore any info from the computers which send out noise?

Since many users wouldn’t want these enhancements from scratch I’d suggest to put them in a package simply called BeDemocratic. I would imagine that many would be interested of the above however, and I might be naive but I think it shouldn’t be that hard to fix most of the above. Besides, the big hazzle with security has always been that so few puts the muscle in to fix it as it’s always complex. The BeWay is the easy way, and just putting all of the above into one package and clicking install would make life a lot more fun don’t you think?

Besides, what is the bad thing about security?

I like one, two and five. I probably would like three, but I don’t know what it is yet. :stuck_out_tongue:

Four could be tricky. I use keys in my email, but it doesn’t work so well because I’m always sending mail to people who wouldn’t have the foggiest clue what PGP is, thus having to send unencrypted.

Is there a way around that? Perhaps you fill out a short wizard on first boot to fill in your name and email among other things, which then generates the key.

Definitely one, two and five, I like.

togs_01 wrote:
I like one, two and five. I probably would like three, but I don't know what it is yet. :P

Four could be tricky. I use keys in my email, but it doesn’t work so well because I’m always sending mail to people who wouldn’t have the foggiest clue what PGP is, thus having to send unencrypted.

Is there a way around that? Perhaps you fill out a short wizard on first boot to fill in your name and email among other things, which then generates the key.

Definitely one, two and five, I like.

Easily solved in terms of installation. Just package them together and let you choose what to install of the mentioned ones. There’s probably a sixth feature I wanna have as well so might just add it in.

Ehrr… moved sixth up to first post

A 7th Item to BeDemocratic has been added to top. Is it starting to look interesting yet?

The 7th one seems rebellious! :stuck_out_tongue:
Anyways; hmm i dont really understand what I2P is supposed to be; nevertheless the anonymous proxy thing - i dont support it; cuz thaz just like old versions of windows used to keep AOL and similiar links in your computer – its buggy; and especially for me cuz i dont live in US. Better not keep em.
as for the log files thing; as long as its not automatic i dont mind

I agree with the others though ^^

Leaflord wrote:
The 7th one seems rebellious! :P Anyways; hmm i dont really understand what I2P is supposed to be; I agree with the others though ^^

I2P is a lot of things, but basically it’s encrypted traffic to websites which makes it very hard to track what sites you visit and what you actually do there within the network.

For instance, if you wanna download a Torrent anonymously (as in AnonBT) you download through tunnels, and not going straight to the source. At each peer, it get’s send through “tunnels”, meaning others peers which actually don’t have anything to do with your actual download, just to make it trickier to track what is really happening. Just read about it on I2P.net and pick up the FAQ =)

Pretty nice technology!
Hmmm in that case…
i like the first four of the ones you gave; though i think the cookie clearance should be provided by default to any OS…

Leaflord wrote:
Pretty nice technology! Hmmm in that case... i like the first four of the ones you gave; though i think the cookie clearance should be provided by default to any OS...

I don’t necessarily agree that clearing cookies is an OS responsibility - but certainly it would be nice if there was some OS addon that was capable of clearing it for any number of browsers.

I dont see why any/all of those should be a kit…

skoe wrote:
I dont see why any/all of those should be a kit...

I think the intention was that it would be a “Package” - in other words, just an installable selection of software. Not necessarily part of the operating system itself.

umccullough wrote:
skoe wrote:
I dont see why any/all of those should be a kit...

I think the intention was that it would be a “Package” - in other words, just an installable selection of software. Not necessarily part of the operating system itself.

Indeed correct. The Democratic Suite you could say… however, I’d like to hear opinions about the concept as is, and I’d love to hear from Axel regarding encrypting the FS is a possibility

The Internet has never been anonymous, but is increasingly losing the feel that there is any privacy whatsoever. I like some of these ideas. The entire list could probably be done without having to do any OS hacking.

PGP would be nice if there were actually an app out there which integrated it in a simple fashion, like BeMail having a section dealing with encryption. Most “regular” people don’t even know that it’s possible to encrypt e-mails and such to keep out prying eyes. An encrypted filesystem probably wouldn’t require much beyond an addon to add the capability to the kernel just like any other filesystem. Not having any experience with this, though, I couldn’t say for sure.

I really like these options, but not the name. I would prefer something along the lines of BeParanoid or BeAwareThatTheyAreWatchingYouAllTheTimeAndTryingToStealYourThoughts.

HaiCube wrote:
  1. Encrypted file system…
    using AES or similar (check www.truecrypt.org). This is really for Axel to answer if it’s possible. I’d want to be able to completely encrypt my drives except for sysfiles and folders and make them “MINE” not the governments etc. This would also increase security locally a lot. System files could be unencrypted and when log in, you’d need to enter a password to mount resources (other partitions etc). Is this possible with HaikuFS and if not, how long would it take to implement. I can consider financing this out of my own pocket.

Did you have a look at http://www.bebits.com/app/4088/ ?
Not exactly what you want but might help as a start.

Jérôme