I've just put up a post here: Combating “Fake News” With a Smartphone
“Proof Mode”
https://guardianproject.info/2017/02/24/combating-fake-news-with-a-smartphone-proof-mode/

I pasted in the post below. There are some good technical bits on how we
are auto-generating OpenPGP keys for signing, and using the new Android
QuickSettings API, as well.

Check it out, or just jump direct to the project and app. 

The source and direct APK downloads are available on Github:
https://github.com/guardianproject/proofmode

The beta release is also available today for Android phones on Google
Play. We hope to have an iPhone version in beta in the next few months.

We have also published a sample batch proof data set on Github here:
https://github.com/guardianproject/proofmode/tree/master/samples/sample-proof-1

****

We have been working for many years with our partners at WITNESS, a
leading human rights media training and advocacy organization, to figure
out how best to turn smartphone cameras into tools of empowerment for
activists. While it is often enough to use the visual pixels you capture
to create awareness or pressure on an issue, sometimes you want those
pixels to actually be treated as evidence. This means, you want people
to trust what they see, to know it hasn’t been tampered with, and to
believe that it came from the time, place and person you say it came
from.

Enter, ProofMode, a light, minimal “reboot” of our more heavyweight,
verified media app, CameraV. Our aim was to create a lightweight (<
3MB!), almost invisible utility (minimal battery impact!), that you can
run all of the time on your phone (no annoying notifications or popups),
that automatically adds extra digital proof data to all photos and
videos you take. This data can then be easily shared, when you really
need it, through a “Share Proof” share action, to anyone you choose over
email or a messaging app, or uploaded to a cloud service or reporting
platform.

On the technical front, what the app is doing is automatically
generating an OpenPGP key for this installed instance of the app itself,
and using that to automatically sign all photos and videos at time of
capture. A sha256 hash is also generated, and combined with a snapshot
of all available device sensor data, such as GPS location, wifi and
mobile networks, altitude,  device language, hardware type, and more.
This is also signed, and stored with the media. All of this happens with
no noticeable impact on battery life or performance, every time the user
takes a photo or video. We have been running it for months on fairly
old, low end phones, and you just forget it is happening. 

While we are very proud of the work we did with the CameraV and
InformaCam projects, the end results was a complex application and
proprietary data format that required a great deal of investment by any
user or community that wished to adopt it. Furthermore, it was an app
that you had to decide and remember to use, in a moment of crisis. With
ProofMode, we both wanted to simplify the adoption of the tool, and make
it nearly invisible to the end-user, while making it the adoption of the
tool by organizations painless through simple formats like CSV and known
formats like PGP signatures.

Our design goals included the following:

* Run all of the time in the background without noticeable battery,
storage or network impact
* Provide a no-setup-required, automatic new user experience that works
without requiring training
* Use strong cryptography for strong identity and verification features,
but not encryption
* Produce “proof” sensor data formats that can be easily parse, imported
by existing tools (CSV)
* Do not modify the original media files; all proof metadata storied in
separate file
* Support chain of custody needs through automatic creation of sha256
hashes and PGP signatures
* Do not require a persistent identity or account generation

We also were able to take advantage of the new Android “Quick Settings”
developer API, to add a ProofMode toggle button right along side other
system functions like Wifi, Location, Bluetooth and more. This fulfills
a vision that WITNESS has had for a while in mainstreaming the concept
of our prototype into mainstream adoption, giving every citizen
journalist a quick mode to activate when their moment arrives.

You can read a bit more in the project README on the workflow we imagine
being used for all of this. What we hope is that the ProofMode app is
simple and low impact enough that potential users will install and
forget that it is there. It will go along doing its business quietly
without fuss, until the users realizes they have taken a photo or video
that might have some value as digital evidence. Then, using the SHARE
PROOF action, send their proof data set off to an organization,
journalist, lawyer, or other advocate that would be able to verify the
chain of custody and integrity of the files and proof using off the
shelf OpenPGP and CSV visualization tools. While we have a bit more work
to do on the last part, we already have many partners in the human
rights world who are skilled and capable of doing just that.

If you’d like to learn more about the CameraV app and our collaboration
with WITNESS and Coletivo Papo Reto video activist group in Brazil,
please watch this video below from the Al Jazeera “Rebel Geeks”
documentary.

-- 
  Nathan of Guardian
  [email protected]
_______________________________________________
List info: https://lists.mayfirst.org/mailman/listinfo/guardian-dev
To unsubscribe, email:  [email protected]

Reply via email to