EDN: Unterschied zwischen den Versionen

Aus C3D2
Zur Navigation springen Zur Suche springen
KKeine Bearbeitungszusammenfassung
 
(31 dazwischenliegende Versionen von einem anderen Benutzer werden nicht angezeigt)
Zeile 1: Zeile 1:
[[Echt Dezentrales Netz | Deutsch]]
[[Echt Dezentrales Netz | Deutsch]]


: '''We build the new authenticated p2p-based Internet.'''
[[Datei:EDN-logo-b.svg|thumb|none|200px|alt=EDN logo with the letters EDN looking like a network and toped with two WiFi-symbols, one left and one right]]


'''We develop a new protective Internet'''
<br clear=all>
<br>
= Welcome =
= Welcome =


Zeile 10: Zeile 13:
= News =
= News =


We have presented EDN to the people of [https://www.wauland.de/en/index.php ''Wau Holland Foundation''] recently. Thank you for your invitation!
We have a [https://projectedn.wordpress.com/ new website] which addresses potential sponsors.
Recently we have presented EDN to the people of [https://www.wauland.de/en/index.php ''Wau Holland Foundation'']. Thank you for your invitation!


[[Echt Dezentrales Netz/Projekttagebuch | Here]] is our project diary.
[[Echt Dezentrales Netz/Projekttagebuch | Here]] is our project diary.
Zeile 60: Zeile 64:


<br clear=all>
<br clear=all>
We presume a global active attacker that does automated intrusion such as traffic [http://7ywdkxkpi7kk55by.onion/trac/wiki/DeanonymizingTheInternet shaping]. We draw the line before targeted operations.
We presume a global active attacker that does automated intrusion such as traffic [http://7ywdkxkpi7kk55by.onion/trac/wiki/DeanonymizingTheInternet shaping].We share our threat model with [http://secushare.org/threats Secushare].
We share our threat model with [http://secushare.org/threats Secushare].


<br>
<br>
Zeile 126: Zeile 129:
|}
|}


* Social-Networking: Messaging, (Video)-Telephony, File-sharing, Blogging
* Searching contents in local and other reachable networks
* Crypto Currency/ Pay System


* Social-Networking: Messaging, Micro Blogging, (Video)-Telephony;
* Data Storage (individual, group and public access);
* Searching contents in local and other reachable networks;
* Mirroring contents of the "old" internet;
* Payment system;
* Smart contract (blockchain);
* Collaborative document editing.




Zeile 137: Zeile 145:
<br>
<br>
<br>
<br>
== Overtaking the Attackers ==
== Overtaking the Attackers ==


Zeile 159: Zeile 168:


[[Datei:BuildingBridges_CCOby_HebiFot.jpeg|thumb|none|700px|Building Bridges|alt=Bridge being built]]
[[Datei:BuildingBridges_CCOby_HebiFot.jpeg|thumb|none|700px|Building Bridges|alt=Bridge being built]]
We aim to unite the different forces and resources for privacy and security such as the older and upcoming software projects, scientists, activists and others to achieve what none of them could do alone:
We aim to unite the different forces and resources of Free Software projects to achieve what none of them could do alone: Kickstart a network effect and provide a more secure and confidentiality preserving communication means to a significant part of the world-population - a new internet fitted with a set of privacy tuned services. To get there we built bridges by creating a better documentation for circa 20 privacy projects during our [[EDN#Software_Documentation_Marathon.E2.84.A2 | Software Documentation Marathon™]]. It will include a first analysis of the project's security and privacy qualities and recommendations for collaborations between interoperable projects.  
Provide a more secure and confidentiality preserving communication means to a significant part of the world-population - a new internet fitted with a set of privacy tuned services. To get there we built bridges by creating a better documentation for over 70 privacy projects during our [[EDN#Software_Documentation_Marathon.E2.84.A2 | Software Documentation Marathon™]]. It will include a first analysis of the project's security and privacy qualities and recommendations for collaborations between interoperable projects.  
On this basis we are able to proceed with the testing of different stacks and a [[EDN/Testing | Prototypical Realization]] of a wifi-mesh-able new internet with multiple integrated services.
On this basis we are able to proceed with a [[EDN/Testing | Prototypical Realization]] and its evaluation.
<br clear=all>
<br clear=all>
 
<br>
<br>
== Software Documentation Marathon™ ==
== Software Documentation Marathon™ ==


[[Datei:RUN_mirroredCCbyClkerFreeVectorImages.svg|thumb|left|200px| Software Documentation Marathon™ [[EDN#Software_Documentation_Marathon.E2.84.A2#Picture_References | (1) ]]|alt=Marathon Runner]]
We plan a ''Software Documentation Marathon™'', where we document and analyze circa 20 free software [https://projectedn.wordpress.com/cutting-edge-technologies/ projects]
<br>
Key elements of our work will be to assemble '''detailed API descriptions''' of the projects and its modules and to identify and highlight '''Interoperability between projects'''.
<br>
<br>
<br>
<br>
<br>
We plan a ''Software Documentation Marathon™'', where we document and analyze over 70 [[EDN/PrivacyProjects | Privacy Software Projects]].
Key elements of our work will be to assemble '''detailed API descriptions''' of the projects and its modules and to identify and highlight '''Interoperability between projects''' for collaboration or sharing code.
<br clear=all>
<br clear=all>
<br>
<br>
[[Datei:Interview-Without-Speech-Bubbles_CCbyGSJ.svg|thumb|left|200px| We conduct personal interviews. [[EDN#Software_Documentation_Marathon.E2.84.A2#Picture_References | (2)]]|alt=Two people sitting at a table.]]
[[Datei:Interview_tiny.jpeg|thumb|left|300px| We conduct personal interviews. [[EDN#Software_Documentation_Marathon.E2.84.A2#Picture_References | (2)]]|alt=Two people sitting at a table.]]
<br>
We will collect the information needed by personal interviews with the privacy project developers.
 
We plan six workshops, where we collect the information needed by personal interviews with the privacy project developers. Every workshop will host 12 projects, so that at the end, we will have dealt with over 70 projects-
quite a milestone for the community.


All the information will be gathered in a standardized way and collected in a semantic wiki providing us with a set of tools to dynamically interconnect, organize and visualize the information.
All the information will be gathered in a standardized way and collected in a semantic wiki providing us with a set of tools to dynamically interconnect, organize and visualize the information.
Zeile 187: Zeile 186:
This way our results will be easy to reuse. It will be published under the Creative Commons licence [https://creativecommons.org/licenses/by-sa/2.0/ CC-BY-SA].
This way our results will be easy to reuse. It will be published under the Creative Commons licence [https://creativecommons.org/licenses/by-sa/2.0/ CC-BY-SA].
The Software Documentation Marathon™ delivers the work base for [[EDN/Testing | Prototyping and Testing]].
The Software Documentation Marathon™ delivers the work base for [[EDN/Testing | Prototyping and Testing]].
 
<br>
 
<br>
<br clear=all>
<br clear=all>
 
; Note: @Software Documentation Marathon™: We used the ™ just for fun to express that we like the name of this phase very much. Everyone who likes the name too can use it!
 
<br>
=== Time Plan ===
 
# Preanalysis, Wiki Building, Organization of workshops (2 month)
# Workshops (6 month)
# Analysis and Consolidation of Documentation (4 month)
 
<br>
<br>


=== Software Documentation Contents ===
=== Software Documentation Contents ===


<gallery mode="nolines" widths=200px heights=200px perrow=2>
<gallery mode="nolines" widths=200px heights=200px perrow=3>
Datei:Prozent1.svg|alt=Percent|'''Status Quo of the Marathon''' (progress bar), total and for every single project [[EDN#Software_Documentation_Marathon.E2.84.A2#Picture_References | (3)]];
Datei:Prozent1.svg|alt=Percent|'''Status Quo of the Marathon''' (progress bar), total and for every single project [[EDN#Software_Documentation_Marathon.E2.84.A2#Picture_References | (3)]];
Datei:Coloredshapesccby10binary-Dmos.svg.png|alt=Colored Shapes|'''Basic Information''': programming-language(s), software-licence(s), etc. [[EDN#Software_Documentation_Marathon.E2.84.A2#Picture_References | (4)]];
Datei:Coloredshapesccby10binary-Dmos.svg.png|alt=Colored Shapes|'''Basic Information''': programming-language(s), software-licence(s), etc. [[EDN#Software_Documentation_Marathon.E2.84.A2#Picture_References | (4)]];
Zeile 211: Zeile 204:
Datei:Ccbycarlitos-BikeWheel.svg|alt=Bike-wheel|'''Double Implementations''' of similar functionality [[EDN#Software_Documentation_Marathon.E2.84.A2#Picture_References | (9)]];
Datei:Ccbycarlitos-BikeWheel.svg|alt=Bike-wheel|'''Double Implementations''' of similar functionality [[EDN#Software_Documentation_Marathon.E2.84.A2#Picture_References | (9)]];
Datei:Tanabata-Wish-TreeCCbyuroesch_REcoloredbyDmos.svg|alt=Tanabata-Wish-Tree|'''Top Features''' the projects would like to implement/integrate (that meet hard problems such as anonymity and large scale mesh-networking) [[EDN#Software_Documentation_Marathon.E2.84.A2#Picture_References | (10)]];
Datei:Tanabata-Wish-TreeCCbyuroesch_REcoloredbyDmos.svg|alt=Tanabata-Wish-Tree|'''Top Features''' the projects would like to implement/integrate (that meet hard problems such as anonymity and large scale mesh-networking) [[EDN#Software_Documentation_Marathon.E2.84.A2#Picture_References | (10)]];
Datei:Cycling_CC0.png|'''Tests performed''' : Details about tests that have been already performed by the projects|alt=a person riding a bike;
</gallery>
</gallery>


Zeile 227: Zeile 221:
* Is component or standalone (full app) or runs on bare metal
* Is component or standalone (full app) or runs on bare metal
* Runs on Unix like operating systems
* Runs on Unix like operating systems
=== Perspective ===
For every project may be offered four different perspectives that display different properties of the project:
* User
* Development
* Management/admin
* Networking (position in OSI-layer)


=== Benefits ===
=== Benefits ===
Zeile 251: Zeile 236:


== Combination-Prototyping and Testing ==
== Combination-Prototyping and Testing ==
[[Datei:Maxresdefault_.jpgg|thumb|none|700px|alt=a set of mechanic tools]]
[[Datei:Maxresdefault_.jpg|thumb|none|700px|alt=a set of mechanic tools]]
The [[EDN#Software_Documentation_Marathon | Software Documentation Marathon™]] delivers our working basis to preselect a combination of projects or modules that are interoperable and meet our [[EDN/Criteria | standard]].
The [[EDN#Software_Documentation_Marathon | Software Documentation Marathon™]] delivers our working basis to preselect a combination of projects or modules that are interoperable and meet our [[EDN/Criteria | standard]].
In this phase our objective will be to create prototypes and test them in a generic manner on a virtual and a real testbed.
In this phase our objective will be to create prototypes and test them in a generic manner on a virtual and a real testbed.
During this phase we will conduct Collaboration Workshops to bring together interoperable projects- especially new internet and application projects.
 
<br clear=all>
<br clear=all>


'''Testing Objectives:'''
'''Testing Objectives:'''


* Deployability
* Deployability and Configurability
* Configurability
* Scalability
* Reliability: Under normal conditions, hard conditions, attacks: Percentage of completed/successful processes.
* Reliability: Under normal conditions, hard conditions, attacks: Percentage of completed/successful processes.
* Performance: How does a complete process take in worst case?
* Performance: How does a complete process take in worst case?
Zeile 277: Zeile 262:
'''Testing:'''
'''Testing:'''


* The various services on different stacks
* One or two services on different stacks
* New combinations of modules for the stacks
* New combinations of modules for the stacks
* Multiple network configurations with respect to specific situations (e.g., attack scenarios, dense and distant mesh, internet connected nodes)
* Multiple network configurations with respect to specific situations (e.g., attack scenarios, dense and distant mesh, internet connected nodes)
* Multiple services on one stack




Zeile 286: Zeile 272:
* Best stack for given service and situation
* Best stack for given service and situation
* Optimal network configuration for the different use cases
* Optimal network configuration for the different use cases
* Best tradeoffs between usability, performance and security
* Sweet spots between scalability, performance, and privacy and security


<br>
<br>
Zeile 301: Zeile 287:
</gallery>
</gallery>
<br clear=all>
<br clear=all>
= Costs =
Find our calculations [https://libreplanet.org/wiki/File:EDNprojectCalculationFebruar2016.ods here].
<br>


= Community and Crew =
= Community and Crew =
Zeile 316: Zeile 298:
<div><ul>  
<div><ul>  
<li style="display: inline-block;"> [[Datei:Team.jpeg|thumb|none|300px]] </li>
<li style="display: inline-block;"> [[Datei:Team.jpeg|thumb|none|300px]] </li>
<li style="display: inline-block;"> [[Datei:FirstContact.png|thumb|none|150px|
First contact: demos et posteo dot de
alt=Write us in [https://www.bitmessage.org/wiki/Main_Page Bitmessage]: BM-NBqqoMzajZNXQru2Kz4JXqq6RbsEmeuL| QR Bitmessage]] </li>
</ul></div>


Write us in [https://www.bitmessage.org/wiki/Main_Page Bitmessage]:
Public key via: [http://pgp.mit.edu/pks/lookup?op=get&search=0xF4B0EE66407332D8 keyserver]
BM-NBqqoMzajZNXQru2Kz4JXqq6RbsEmeuL


Email: demos et posteo dot de, [https://pgp.mit.edu/pks/lookup?op=get&search=0x2DB71A63B0932843 GPG], Fingerprint:
Fingerprint:   8B64 374A C01A 69E1 0BF2 0955 F4B0 EE66 4073 32D8
9A0E 7D84 0D22 F15A 3FE3 4756 2DB7 1A63 B093 2843


= Picture References =
= Picture References =
Zeile 350: Zeile 328:
[[Kategorie:Projekt]]
[[Kategorie:Projekt]]
[[Kategorie:EDN]]
[[Kategorie:EDN]]
[[Kategorie:Abkürzung]]

Aktuelle Version vom 17. Januar 2018, 08:05 Uhr

Deutsch

EDN logo with the letters EDN looking like a network and toped with two WiFi-symbols, one left and one right

We develop a new protective Internet

Welcome

This is the official wiki of the research and software project EDN (Echt Dezentrales Netz - real decentralized network). Our vision is to provide a more secure and confidentiality preserving communication means to billions of people: individuals, families and organisations of whatever format - a new internet fitted with a set of privacy tuned services running on local individual or public infrastructure and meets our standard.

News

We have a new website which addresses potential sponsors. Recently we have presented EDN to the people of Wau Holland Foundation. Thank you for your invitation!

Here is our project diary.


Note
.onion addresses can be accessed via Tor Browser Bundle

Status Quo

Centralization, Outdated Protocols




Social graphs can be extracted easily at central points of failure (1)


The prevalent digital communication means undermine their users' data integrity and confidentiality starting with all digital communication of one country going through one or just a few telecommunication providers' servers. These accumulate data, including metadata, which is the basis to derive people's social graphs, movement patterns and even psychological profiles. Further centres of data accumulation are services like Facebook, Twitter or Youtube. They profited by peoples' wish to reach as many people as possible. This has led them to focus on using certain services - known as the Network Effect - rather than privacy and security aspects. This not only helped these services grow significantly, but also led to huge data accumulations in few locations. These have its own value for several groups and provoke criminal activity to access and misuse it. When your hardware gets stolen you soon will notice that. It makes a transition from you - the rightful owner - to another one. Usually data won't be moved just copied. You won't notice the access directly or never if you have entrusted it to another party or let your digital communication flow through a single instance exposing all your meta data. To make things worse the current internet protocols base on a completely outdated threat model as the Snowden revelations have shown at the very latest. They are by design vulnerable to a number of attacks.(1, 2, 3). These open ways to undermine even overlaying structures, such as Tor, deanonymizing its shelter seeking users and hidden services by traffic correlation.

These conditions- the brokeness and centralization- facilitate:

  • Censorship: On plattforms and by countries;
  • Passive Mass Spying;
  • Active Intrusion on a global scale;

It is most likely that patches like overlay networks can only ease the shortcomings of the current internet but not fix it using this vulnerable basis for confidential communication. This may be less critical for high latency networks over the Internet or Sneakernets that do not use the internet at all. Alternative networks, however suffer from the following problems. Their network is unlikely to gain enough users, due to shortcomings in their accessibility and usability. Thus, it will not be attractive for most people wanting to communicating with their friends. Moreover, such a small user group might also jeopardize the users anonymity and privacy, as each user is deemed suspicions and errors in the network stack take longer to get fixed. Finally, this cast doubt on the whole idea of an alternative network. To break this cycle, we think that multiple well tuned secure solutions must be brought together focusing on accessibility and usability, to combine and increase their small user groups and kick start the required Network Effect.

Threat Model


We presume a global active attacker that does automated intrusion such as traffic shaping.We share our threat model with Secushare.



Competitiveness and Lack of Collaboration

Here is our list of Privacy Software Projects.

man standing on a field covered with scattered pieces of paper
Highly fragmented privacy and security software landscape (3)

The privacy and security software landscape is highly fragmented. This has implications for their quality and therefore for their users' privacy and security. We found over 80 Free Software Privacy Projects and this is nowhere near complete regarding this survey. All compete for contributors, funding, users, bandwidth while implementing redundant, often mediocre solutions which is no wonder since most of them lack resources to do it all good. This leads to bad code documentation, which consequently impedes potential help by new developers or researchers finding vulnerabilities and providing more secure solutions. These are some reasons why there is almost no collaboration between the projects although they share the same goals and would benefit from these collaborations exceptionally.




Goal


City Wide Communication via local infrastructure

Regarding the design flaws of the current internet, we believe that a complete new internet providing confidentiality, integrity of communication and censorship-resistance is indispensable. We envision the new stack to be

  • Privacy tuned for and delivered with several services
  • Convenient and attractive to use, focusing on accessibility and usability
  • Able to run on local individual or public infrastructure
  • Free Software

The new internet uses the existing infrastructure to form a difficult-to-monitor cellphone/router/computer network. Its communication runs, first and foremost, on top of a combination of WiFi, copper and fibre optics. Moreover, we consider Bluetooth, Ultra Wideband (UWB), red light, UKW and satellite uplinks - shortly all allowed frequencies and means of digital communication.



Criteria for the New Internet

The new internet should meet the following criteria. The quality of security and privacy might vary between the different exposed services. (...).


Services

public personal/private
Text Chat of local (neighboring) nodes To a single person: Chat, Email or SMS To multiple people: Chat or mailing list
Audio/Telephony/Video Call among locally restricted nodes normal call conference call
Other formats ? ? ?


  • Social-Networking: Messaging, Micro Blogging, (Video)-Telephony;
  • Data Storage (individual, group and public access);
  • Searching contents in local and other reachable networks;
  • Mirroring contents of the "old" internet;
  • Payment system;
  • Smart contract (blockchain);
  • Collaborative document editing.




Overtaking the Attackers

The arms race between attackers and defenders over data security and privacy on the internet is ongoing. However the conditions are good to overtake the attackers generously and change the game in favor of the defenders by way of variety replacing the broken internet by a combination of cutting-edge technologies:


  • New internet protocol stacks: There are new internet stacks among the privacy software projects such as GNUnet, Maidsafe, Net2o and implementations: http://www.irati.eu/ RINA. They have developed privacy aware routing and decentral naming systems for over ten years now. They are waiting for having services set and top of them and evaluated.
  • Matured operating systems for embedded devices and wifi-meshnet-routing: It increases the effort of espionage if a computer network is decentralized. One important part of this is even to decentralize local communication by using a wireless network in connection with multiple internet accesses. Open Wireless Communities are existing already for some years. Have developed and optimized their routing algorithms and gained experience. They deploy routers and boards using Linux-based firmwares such as OpenWRT and DD-WRT. GNUnet has already been packet for OpenWRT and has potential to revolutionize Open Wireless communities.
  • Authority Free Onion Routing using BRAHMS is on the way.
  • Reproducible Builds: "to empower anyone to verify that no flaws have been introduced during the build process by reproducing byte-for-byte identical binary packages from a given source."


Beneficiaries of the New Internet

In the long run everyone will benefit from the new internet, since it is censorship resistant, provides confidentiality and integrity preserving services. It results in:

  • Average citizens regaining parts of their privacy, informational self determination, ​​freedom of assembly, ​secrecy of correspondence and free speech - basic civil rights that ensure and back up our democracies.
  • Safer government institutions and companies from espionage and "cyber" attacks.


Use cases are for example online banking, government communication with citizens including tax returns, diplomatic and business communication and journalism.

Approach

Bridge being built
Building Bridges

We aim to unite the different forces and resources of Free Software projects to achieve what none of them could do alone: Kickstart a network effect and provide a more secure and confidentiality preserving communication means to a significant part of the world-population - a new internet fitted with a set of privacy tuned services. To get there we built bridges by creating a better documentation for circa 20 privacy projects during our Software Documentation Marathon™. It will include a first analysis of the project's security and privacy qualities and recommendations for collaborations between interoperable projects. On this basis we are able to proceed with the testing of different stacks and a Prototypical Realization of a wifi-mesh-able new internet with multiple integrated services.


Software Documentation Marathon™

We plan a Software Documentation Marathon™, where we document and analyze circa 20 free software projects Key elements of our work will be to assemble detailed API descriptions of the projects and its modules and to identify and highlight Interoperability between projects.

Two people sitting at a table.
We conduct personal interviews. (2)

We will collect the information needed by personal interviews with the privacy project developers.

All the information will be gathered in a standardized way and collected in a semantic wiki providing us with a set of tools to dynamically interconnect, organize and visualize the information. Beside graphs and images it enables dynamically generated tables or query based searches. This way our results will be easy to reuse. It will be published under the Creative Commons licence CC-BY-SA. The Software Documentation Marathon™ delivers the work base for Prototyping and Testing.


Note
@Software Documentation Marathon™: We used the ™ just for fun to express that we like the name of this phase very much. Everyone who likes the name too can use it!



Software Documentation Contents


Some properties could be organized like this:

  • Claims to provide (list of criteria)
  • (Actually provides (list of criteria)-> checked by testing phase)
  • Enables (list of services)
  • Replaces (list of proprietary software)
  • Prevents (list of attacks under (list of conditions))-> threat model (type)-TRIKE
  • Interfaces with (ecosystem): ?
  • Interconnects with (list of OSI-layers, list of software projects, list of modules)
  • Implements (list of modules)
  • Is component or standalone (full app) or runs on bare metal
  • Runs on Unix like operating systems

Benefits

The documentation leads to:

  • Better maintainability of code, deployability without big effort by the projects;
  • Saving ressources ((wom-)men-power, in best case bandwidth and computational cost;
  • Faciliate collaboration between projects in order to solve hard problems such as anonymity but also provide other desired features and better usability;
  • Ensuring security more easy by using proven modules;
  • A thorough Knowledge-base for researchers and developers that spares valuable time to get to know other projects without reading tons of code;
  • A thorough Knowledge-base for foundations in this field;



Combination-Prototyping and Testing

a set of mechanic tools

The Software Documentation Marathon™ delivers our working basis to preselect a combination of projects or modules that are interoperable and meet our standard. In this phase our objective will be to create prototypes and test them in a generic manner on a virtual and a real testbed.


Testing Objectives:

  • Deployability and Configurability
  • Scalability
  • Reliability: Under normal conditions, hard conditions, attacks: Percentage of completed/successful processes.
  • Performance: How does a complete process take in worst case?
  • Lightweight: Payload and program size
  • Security and Privacy : Resists a list of attacks in percentage.



Testing:

  • One or two services on different stacks
  • New combinations of modules for the stacks
  • Multiple network configurations with respect to specific situations (e.g., attack scenarios, dense and distant mesh, internet connected nodes)
  • Multiple services on one stack


Test Results Reveal

  • Best stack for given service and situation
  • Optimal network configuration for the different use cases
  • Sweet spots between scalability, performance, and privacy and security


Best Current Practice Recommendation

The following is an essence of a Best Current Practice Recommendation.


Community and Crew

We are stakeholders of GNU consensus and allies of the #youbroketheinternet project. To our crew belong software architects, a student of Fine Arts, Privacy Project developers and Privacy and Security researchers.

Contact

Be with us!