On 2014-11-25 9:06 AM, Sheeri Cabral wrote:
My guess is that while poking a firewall hole isn't hard, poking one big enough for every Chinese Firefox user is either too much, too costly or too dangerous to do. Same with trying to teach every individual Firefox user in China how to poke their own firewall holes (to me that feels like we'd be complicit in mass-treason.
For whatever it's worth the state of the art of network monitoring, management, deep packet inspection and logging is way, way further ahead than most people realize, and state-run firewalls and the organizations that run them aren't something you cross lightly. Interacting with the internet in a statistically unusual way is more than enough to raise a flag, much less running a TOR node or a VPN. The Carol in our Alice, Bob and Carol scenario here has an effectively infinite budget, the will to use force and seize assets as it sees fit and a 20-year head start on R&D.

Clearly, the tradeoffs around strong privacy protections can involve real, personal physical risk, sometimes for not having enough privacy, but in some places, sometimes, for trying to have any at all. I'm pretty confident that the Mozillians closest to those relationships are intimately familiar with the risks our users in those places face, though, and will be working to do right by our users first.


- mhoye
_______________________________________________
governance mailing list
[email protected]
https://lists.mozilla.org/listinfo/governance

Reply via email to