Re: [guardian-dev] Ripple app

2016-12-12 Thread arrase 
2016-12-12 13:41 GMT+01:00 Hans-Christoph Steiner :

>
> Those are also very useful things for a panic setup.  The other key part
> of the design of Panic Kit is that triggers are separate from responses.
>  So things like deleting, sending messages, backing up data, etc. should
> be in a "responder" app.  Then any trigger app can include that as one
> of the possible responses, including your Ripple fork
>

You are right , the idea is build a two separate apps, one for the trigger
, with the ability of request ripple activation from others apps via Intent
and other app with the collection of available actions.


> Our InThe Clear could provide some examples for various deletion tasks:
> https://github.com/guardianproject/InTheClear.git
>
> Another thing to consider is the whole SQLCipher/IOCipher/CacheWord
> model of secure, app-local data storage.  CacheWord manages the key to
> SQLCipher/IOCipher, and the user unlocks that key with their password.
> If the CacheWord key file is deleted, the user no longer has a way to
> unlock SQLCipher/IOCipher: the user's password unlocks the key only, not
> the data.  So then you can just backup the tiny cacheword key file (<
> 1kb), then in a panic delete just that.  Then once things are safe, just
> restore that tiny file.
>

 hmmm.very interesting, i will take it in consideration for a feature,
many thanks :)
___
List info: https://lists.mayfirst.org/mailman/listinfo/guardian-dev
To unsubscribe, email:  guardian-dev-unsubscr...@lists.mayfirst.org

Re: [guardian-dev] Ripple app

2016-12-12 Thread Hans-Christoph Steiner 

Those are also very useful things for a panic setup.  The other key part
of the design of Panic Kit is that triggers are separate from responses.
 So things like deleting, sending messages, backing up data, etc. should
be in a "responder" app.  Then any trigger app can include that as one
of the possible responses, including your Ripple fork.

Our InThe Clear could provide some examples for various deletion tasks:
https://github.com/guardianproject/InTheClear.git

Another thing to consider is the whole SQLCipher/IOCipher/CacheWord
model of secure, app-local data storage.  CacheWord manages the key to
SQLCipher/IOCipher, and the user unlocks that key with their password.
If the CacheWord key file is deleted, the user no longer has a way to
unlock SQLCipher/IOCipher: the user's password unlocks the key only, not
the data.  So then you can just backup the tiny cacheword key file (<
1kb), then in a panic delete just that.  Then once things are safe, just
restore that tiny file.

.hc

arrase:
> ok, as you suggest i'm gonna do a hard fork of the project and start my own
> app.
> 
> I'm gonna do something more complex where Ripple was only one of the
> possible actions.
> 
> I would like to allow:
> 
> - Delete a user configurable folder list
> - Use a tool like secure-delete for delete sensible data
> - Backup data to a secure server before delete
> - Send an alert message (via sms , publish to social networks,...)
> - Send ripple to others apps
> - .i'm thinking :)
> 
> A feature request will be taken in consideration :)
> 
> 2016-12-12 13:13 GMT+01:00 Hans-Christoph Steiner > :
> 
>>
>> I think those are great ideas for a panic button app.  I'm not sure that
>> Ripple is the app to have those.  One of the core ideas of Ripple, as
>> well as all Panic Kit work, is that the panic trigger apps can be made
>> super simple with as little config or options as possible so that they
>> are dead simple to understand and use.  Setting up panic buttons is
>> already stressful enough as it is, so the apps that work in that
>> ecosystem need to strive to avoid that stress.  This design is bourne
>> out of experience with our InTheClear app and Amnesty Intl's Panic Button.
>>
>> That said, the whole panic button idea needs more people thinking about
>> UX and making working designs so that we can find out what actually
>> works for people.  So I encourage you to fork Ripple and publish your
>> own panic button app.  The code is quite simple as it is, so I don't
>> think there is much maintenance work to be shared.
>>
>> Also, FYI, multiple panic trigger apps can be installed and active at
>> the same time.
>>
>> .hc
>>
>> arrase:
>>> I made a pull request with two features:
>>>
>>> - An option for disable countdown
>>> - An option for run PanicActivity  when user logs in after a configurable
>>> number of unsuccessful password attempts
>>>
>>> Thank can be usseful if some forces you to unlock your device, then you
>> can
>>> set a bad password a number of time and when finally you login you have a
>>> chance for quickly lauch a Ripple action.
>>>
>>> But in other hand there is a chance than your opponet holds the device
>> and
>>> ask you for a the pin, so i'm thinking in add an option for raise Ripple
>>> acion withouth swipe confirmation after a number unsuccessful password
>>> attempts.
>>>
>>> 2016-12-11 19:11 GMT+01:00 arrase :
>>>
 Hi,

 I would like to add some features to Ripple App:

 - fire ripple from a persistant notification
 - an option for disable the countdown
 - fire ripple after user unlocks the device if a user predefined
>> sequence
 of hardware buttons was clicked

 What do you think about?

>>>
>>
>> --
>> PGP fingerprint: EE66 20C7 136B 0D2C 456C  0A4D E9E2 8DEA 00AA 5556
>> https://pgp.mit.edu/pks/lookup?op=vindex=0xE9E28DEA00AA5556
>>
> 

-- 
PGP fingerprint: EE66 20C7 136B 0D2C 456C  0A4D E9E2 8DEA 00AA 5556
https://pgp.mit.edu/pks/lookup?op=vindex=0xE9E28DEA00AA5556
___
List info: https://lists.mayfirst.org/mailman/listinfo/guardian-dev
To unsubscribe, email:  guardian-dev-unsubscr...@lists.mayfirst.org

Re: [guardian-dev] Ripple app

2016-12-12 Thread Hans-Christoph Steiner 

I think those are great ideas for a panic button app.  I'm not sure that
Ripple is the app to have those.  One of the core ideas of Ripple, as
well as all Panic Kit work, is that the panic trigger apps can be made
super simple with as little config or options as possible so that they
are dead simple to understand and use.  Setting up panic buttons is
already stressful enough as it is, so the apps that work in that
ecosystem need to strive to avoid that stress.  This design is bourne
out of experience with our InTheClear app and Amnesty Intl's Panic Button.

That said, the whole panic button idea needs more people thinking about
UX and making working designs so that we can find out what actually
works for people.  So I encourage you to fork Ripple and publish your
own panic button app.  The code is quite simple as it is, so I don't
think there is much maintenance work to be shared.

Also, FYI, multiple panic trigger apps can be installed and active at
the same time.

.hc

arrase:
> I made a pull request with two features:
> 
> - An option for disable countdown
> - An option for run PanicActivity  when user logs in after a configurable
> number of unsuccessful password attempts
> 
> Thank can be usseful if some forces you to unlock your device, then you can
> set a bad password a number of time and when finally you login you have a
> chance for quickly lauch a Ripple action.
> 
> But in other hand there is a chance than your opponet holds the device and
> ask you for a the pin, so i'm thinking in add an option for raise Ripple
> acion withouth swipe confirmation after a number unsuccessful password
> attempts.
> 
> 2016-12-11 19:11 GMT+01:00 arrase :
> 
>> Hi,
>>
>> I would like to add some features to Ripple App:
>>
>> - fire ripple from a persistant notification
>> - an option for disable the countdown
>> - fire ripple after user unlocks the device if a user predefined sequence
>> of hardware buttons was clicked
>>
>> What do you think about?
>>
> 

-- 
PGP fingerprint: EE66 20C7 136B 0D2C 456C  0A4D E9E2 8DEA 00AA 5556
https://pgp.mit.edu/pks/lookup?op=vindex=0xE9E28DEA00AA5556
___
List info: https://lists.mayfirst.org/mailman/listinfo/guardian-dev
To unsubscribe, email:  guardian-dev-unsubscr...@lists.mayfirst.org

Re: [guardian-dev] Ripple app

2016-12-11 Thread arrase 
I made a pull request with two features:

- An option for disable countdown
- An option for run PanicActivity  when user logs in after a configurable
number of unsuccessful password attempts

Thank can be usseful if some forces you to unlock your device, then you can
set a bad password a number of time and when finally you login you have a
chance for quickly lauch a Ripple action.

But in other hand there is a chance than your opponet holds the device and
ask you for a the pin, so i'm thinking in add an option for raise Ripple
acion withouth swipe confirmation after a number unsuccessful password
attempts.

2016-12-11 19:11 GMT+01:00 arrase :

> Hi,
>
> I would like to add some features to Ripple App:
>
> - fire ripple from a persistant notification
> - an option for disable the countdown
> - fire ripple after user unlocks the device if a user predefined sequence
> of hardware buttons was clicked
>
> What do you think about?
>
___
List info: https://lists.mayfirst.org/mailman/listinfo/guardian-dev
To unsubscribe, email:  guardian-dev-unsubscr...@lists.mayfirst.org