[HacktionLab] [FM Discuss] Press Release: Tunisian Activists Teach How To Bypass Internet Censorship

[Charlie Harvey]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 03/10/11 23:18, mick fuzz wrote:
> with reference to alan's email about non free tools, interestingly
> this is the only floss manuals with non free tools
> 
> the reason behind this is that it was felt that human rights trumped
> free software advocacy in the case of this particular book. a
> pragmatic decision to work around specific situations to do with
> circumvention needs.


Hi mick,

Its not really a question of free software advocacy vs. human rights.

The problem with using non-free tools in that circumstance is that you
can't be sure that closed source security tools actually /do/ protect
you from your human rights abuser. How do you know there isn't a
backdoor in that binary? How do you know the crypto isn't fatally flawed?

You /really/,/really/ need to have the code at least available for
review (even under a shitty non-free licence) when you're talking about
anything to do with security. There's a writeup WRT crypto, for example,
at: http://www.schneier.com/crypto-gram-0205.html#1

Cheers,
Charlie
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=bST6
-----END PGP SIGNATURE-----