commit efc7eea85ff23dc737aa4d318e42fb009a5448b8
Author: gus <[email protected]>
Date: Wed Oct 2 21:26:03 2019 -0400
Add digital security risks disclaimer and quick assessment
---
content/training/risks/contents.lr | 52 ++++++++++++++++++++++++++++++++++++++
1 file changed, 52 insertions(+)
diff --git a/content/training/risks/contents.lr
b/content/training/risks/contents.lr
new file mode 100644
index 0000000..6da1774
--- /dev/null
+++ b/content/training/risks/contents.lr
@@ -0,0 +1,52 @@
+_model: page
+---
+title: Risks
+---
+body:
+
+To our knowledge, no Tor trainer has ever faced consequences as a result of
training others or speaking about Tor. However, in some countries and in
certain circumstances, it's possible that a simply gathering of human rights
defenders could be very risky, illegal or even subject of imprisonment,
physical assaults, large fines, threats, placement on government watch lists
and targeting for surveillance.
+
+If you want to run a Tor training for the first time and you don't know how to
assess the political and social environment, we strongly encourage you read
this document and, in case of doubt, to reach out Tor Community Team privately.
+
+Some of potential risks of running a digital security training are only valid
in specific contexts. Therefore the potential risks associated to running a Tor
training depend on:
+
+1. **Your threat model.** A high-profile activist already under a lot of
surveillance, for example, might attract more attention when reaching out other
activists to run a digital security training.
+2. **The laws and regulations in the country.** Best to consult with local
lawyers and local freedom of expression organizations, and learn whether your
country has a record in prosecuting individuals engaging in similar types of
activities.
+3. **The types of training.** Not all trainings carry the same weight in terms
of potential risk. For example, talking about privacy on digital age might be
appreciable, but teaching how to circumvent government censorship could be a
serious felony.
+4. **The audience.** Gathering university students might not attract
attention, but in case of a group of journalists working on leaked documents
about government corruption, you might need to be extra careful on how to reach
out them in a private way.
+5. **The training venue.** Running a Tor training in some spaces could expose
your participants identity. Ideally, you should use a private space that you
can control the participants entrance. Check before the training if
participants are comfortable on revealing their identity to a third party, if
it's the case.
+
+## Evaluating risks
+
+Some questions you may want to answer before running a digital security
training include:
+
+* Has anyone in my country ever been criminalized based on their internet
activity? (This does not necessarily need to be specific to digital security
training or use of Tor)
+* Are there laws in my country that require Internet Service Providers (ISPs)
to track my online activity?
+* Is it illegal for me to access certain websites?
+* Does my country prohibit me from using:
+ * Cryptography?
+ * Anonymity software?
+
+Note, this is not an exhaustive list of questions.
+
+Additionally, while many countries do not have laws specifically prohibiting
the activity of running digital security training, the use of digital security
tools may still be criminalized in certain countries under other, broader laws.
For example, using Tor Browser may be viewed as illegal or anti-government
activity.
+
+Please note that we are not lawyers, and any information we give you does not
constitute legal advice. Additionally, your communication with us is not
protected by any legal privilege so law enforcement may subpoena and obtain any
information you give us. However, we may be able to put you in touch with
lawyers who are capable of addressing your questions and/or concerns.
+
+Some relevant resources include:
+
+ * [EFF Know your rights](https://www.eff.org/issues/know-your-rights)
+ * [EFF Tor legal
FAQ](https://community.torproject.org/relay/community-resources/eff-tor-legal-faq/)
+ * [OONI disclaimer](https://ooni.io/about/risks/)
+---
+color: primary
+---
+html: two-columns-page.html
+---
+key: 6
+---
+section: training
+---
+section_id: training
+---
+subtitle: Things you should be aware before running a digital security training
_______________________________________________
tor-commits mailing list
[email protected]
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-commits
