Your Freenet node is only minimally protected. Your machine is currently hiding from most people, but it's doing so by connecting to strangers. If you connect to friends you already know and trust, Freenet will be better able to protect you.
Please get some connections to people you trust, and add them to your Friends page as soon as possible. Once you have at least 10 Friends, turn on Secure mode and your node will become invisible to the outside world. ---- This does a few things- We want to acknowledge that using Freenet, even in opennet, is more secure than the public internet. Using words like Insecure makes them think that they are now MORE vulnerable, which isn't the right message for someone who just downloaded and installed this software out of paranoia. We also want to encourage people to get their friends to install Freenet, Social Networking style. This is the best way to increase adoption of the network. Essentially, drive home the message that 'If you get your friends to install freenet, you will be more safe'. It also has the side-effect of being true ;) Additionally, I think it's best to "turn on" Secure mode, rather than turning off opennet. It makes it seem like they are getting ADDITIONAL security, not running dangerously unsafely now. Again, keep in mind the user case. "I want to publish this photograph that proves the Government of my city is corrupt. How can I do it safely? " <downloads and fires up freenet.> "TRIVIAL for an attacker? That defeats the entire purpose!" <Uninstalls, and shreds picture. Corruption wins> Versus "I want to publish this photograph that proves the Government of my city is corrupt. How can I do it safely? " <downloads and fires up freenet.> "Hrmm.. Well, this is better than nothing. I better start small, and get some of my other democracy-loving friends to join too." "Once enough of us do, then it'll be safe enough to release my photo showing the coverup." <Keeps using freenet, and moves to Darkenet in a few days. Corruption loses> Matthew Toseland wrote: > On Friday 14 December 2007 09:12, Julien Cornuwel wrote: > >> Matthew Toseland a ?crit : >> >> >>> Your node is currently running in insecure mode. It is trivial for an >>> > attacker > >>> to find your node, and you could be connected to the Bad Guys right now. >>> Please get some connections to people you trust and add them to the >>> > Friends > >>> page as soon as possible, you will be much less vulnerable. When you have >>> > at > >>> least 10 Friends, turn off insecure mode and your node will become >>> > invisible > >>> to the outside world. >>> >> I'm not sure using the words "Insecure" and "Please get some >> connections" are a good thing. Opennet is not that insecure. >> > > It isn't? IMHO opennet is fairly insecure. Not only can you do local > correlation to determine whether your peers are the source of a specific > request, you can do network-level attacks based on the location of requests > to gradually locate the originator. > > >> Of course >> it is if compared to pure-darknet, but it's still far more secure than >> the internet. And most users just can't get connections to people they >> know and trust because no one they know uses freenet. >> > > "Please get some connections to people you trust" isn't clear enough? It's > even clearer on the previous warning, but the previous warning is too big. > >> Just yesterday, I met someone on #freenet-fr who knew nobody in the >> network. But after a few readings, he decided that opennet was insecure, >> refused to enable it and came to IRC to get Friends ! He thought we used >> Friends like in the friend-slots of eMule, not like in >> real-life-friends. I think we should stress that point. >> > > LOL. > >> What about : >> Your node is not running at its maximal security level. It is trivial >> for an attacker to find your node, and you could be connected to the Bad >> Guys right now. If people you actually know and trust are using Freenet, >> you can connect to them using the Friends page to increase your security >> level. When you have at least 10 Friends, turn off insecure mode and >> your node will become invisible to the outside world. >> >> ------------------------------------------------------------------------ >> >> _______________________________________________ >> Devl mailing list >> Devl at freenetproject.org >> http://emu.freenetproject.org/cgi-bin/mailman/listinfo/devl
