Jonathan Wilkes <[email protected]> writes: > Finally, the user of riseup must trust the description of their service on > the website to be true because it is a form of > privacy by policy. If joining it is to be anything other than practicing the > bad habit of trusting implicitly something you > read on a list on the internet, you need to know and trust someone from the > internet security/privacy world who can vouch > for the security of the system based on their own human trust relationship > with someone who runs riseup (or is closely > connected to it). If you're a human rights worker and you have such a > relationship with a security/privacy expert, you'd > do better to pay them for some tutoring sessions on seting up and using one > or more of the following: ssh, Tor, Tor + ssh, > torchat, and possibly otr + pidgin and help them develop a working experience > about what the threats are to their privacy in > those instances.
I happen to know and trust someone who can vouch for the security of the system due to my human trust relationship with someone who runs riseup. Do you have any suggestions for what Riseup can do to resolve that concern for you? I don't disagree with you, I'm just curious about solutions here. I think Riseup has done a few things to try to close that gap. One has been a long term building up of trust among individuals and groups, which spreads out through recommendations by those people to others. Riseup people being involved in various forms of activism (from counter globalization movement organizing, to indymedia, to occupy and other much less well known, or hyper local activist efforts) has been one way that has happened. In various ways Riseup has been involved in defending, or fighting for the freedoms that Riseup tries to protect, sometimes that has come in the form of legal battles that Riseup has either joined or been subjected to, coalitions that Riseup has joined, or campaigns that Riseup has participated in. In other cases it comes technically through publishing documentation, guides, howtos and writing patches and software that embody the various political principles that Riseup tries to adhere to (such as privacy and log anonymization patches, or social networking software, etc.). Another way is active involvement in free software, Debian in particular. Contributing to that ecosystem because the political ideals are harmonious makes a lot of sense for an organization that is actually trying to fulfill its stated 'policies'. micah
-- Too many emails? Unsubscribe, change to digest, or change password by emailing moderator at [email protected] or changing your settings at https://mailman.stanford.edu/mailman/listinfo/liberationtech
