通訊加密方案
本篇源自 2013/8/3 凱道萬人送仲丘相關討論：
https://groups.google.com/forum/#!topic/g0v-general/zabwyXJB7mg
- 開源社群如何支援大型公民運動、實現公民不服從
- 如何確保（媒體發稿）網路暢通、（內部人員）通訊安全
- 場子太大，如何解決影音現場傳送、向外轉播問題
- 街頭運動如何有效計算人次
電話 Voice
BlackBerry Messager(BBM) for BlackBerry, iOS, Android, Windows Phone
- Features
- Make BBM Video calls or Screen Share over Wi-Fi or the mobile network on the latest smartphones (only BlackBerry 10).
- Send and receive messages with unlimited length.
- Choose a personal BBM display picture and status.
- Real-time confirmations when messages are being written, delivered and read.
- Share photos, videos and more with multiple contacts at once.
- Add contacts by scanning QR Codes, using NFC technology or sharing PINs.
- Send files such as documents, photos, music, videos up to 100MB.
- Create and join groups where you can share and discuss lists, photos etc.
- Share location.
- Create, likes or comment BBM Channels.
- Free Call BBM contacts over Wi-Fi (only BlackBerry OS).
- Voice Call BBM contacts over Wi-Fi and mobile data [BBM app Android]
- BBM中文頁面介紹（含下載點）：http://www.bbm.com/bbm/zh_cn.html
- BBM Protected 企業、團體組織版介紹
- 《影片介紹》BBM Protected - Secure IM
- PROTECT DATA IN-TRANSIT
- BBM Protected is designed to provide full end-to-end message encryption from the time a BBM Protected user sends a message to when the recipient receives the message. It incorporates three layers of security.
- BBM Protected introduces a new layer of encryption to the existing BBM security model.
- Messages between BBM Protected users are encrypted using a PGP like model. The sender and recipient have unique public/private encryption and signing keys.
- These keys are generated on the device, by the FIPS 140-2 certified cryptographic library, and are controlled by the enterprise.
- BBM and BlackBerry are not involved in brokering the key exchanges, so at no time are they stored within the BlackBerry infrastructure.
- Each message uses a new random symmetric key for message encryption.
- A Triple DES 168-bit BBM scrambling key encrypts messages on the sender’s smartphone, and is used to authenticate and decrypt messages on the recipient’s phone.
- TLS encryption between the smartphone and the BBM infrastructure helps protect BBM messages from eavesdropping or manipulation.
RedPhone
RedPhone - (only for android) https://play.google.com/store/apps/details?id=org.thoughtcrime.redphone&hl=zh_TW
Kryptos -
http://kryptoscommunications.com/
Mumble
Open source、類似無線電對講機、RC 語音聊天室
中心化伺服器架構，需要確認伺服器本身安全性。
跨平臺 Desktop&Mobile
傳輸的大小可設定品質來控制（Desktop）
可加密、針對使用者發 channel 的憑證
官網每月付 $7 美金可以自動生成一個 Server for 15 users.
據說德國海盜黨有在用
- official site: http://www.mumble.com/
- 自己架 Server doc: http://mumble.sourceforge.net/ACL_Tutorial/English
- iOS: https://itunes.apple.com/us/app/mumble/id443472808?mt=8
little issues:
適合團體內部使用，遊行現場可能需要解決頻寬問題
iOS & Android Client 端的設定選項不多，iOS 沒有 Push to talk 可能會變成災難 iOS 也有 PTT 功能，需要額外設定。
SMS
TextSecure Beta
https://play.google.com/store/apps/details?id=org.thoughtcrime.securesms
(for iOS)
https://github.com/WhisperSystems/TextSecure-iOS
Instant Message
OTR加密教學：http://billy3321.blogspot.com/2013/08/otrgtalkfacebook.html
TOX: https://github.com/irungentoo/ProjectTox-Core
safeslinger: http://www.cylab.cmu.edu/safeslinger/
- 教學：http://blog.g0v.tw/post/58513500285
- 非 Open source、快速上手
BitMessage
- 從 bitcoin 衍生出的訊息傳遞系統；匿名、分散式，有類似 mailist 的機制叫做 chan(channel)，可訂閱方便擴散訊息。
- 安裝、下載：https://bitmessage.org/wiki/Main_Page
- 網頁版客戶端：https://bitmessage.ch
Telegram https://telegram.org/
- open source 反應速度很快，需要一隻電話號碼去收簡訊，以電話號碼當作帳號 client 目前提供， windows、iOS、Android、Mac OSX、Web client、CLI、等
- wall command on linux server ( http://www.webhostingtalk.com/showthread.php?t=39656 )- (irc log)
- WireRoom is written in js, powered by node js( https://github.com/c9s/WireRoom/ ) - (irc log)
Gilgamesh
- Secure Bluetooth peer-to-peer instant messaging and broadcasting.
- https://f-droid.org/repository/browse/?fdfilter=gilgamesh&fdid=info.guardianproject.gilga
What is GPG
http://tetralet.luna.com.tw/index.php?op=ViewArticle&articleId=58&blogId=1
Email 加密
GPG for gmail
http://howto.cnet.com/8301-11310_39-10434684-285/want-really-secure-gmail-try-gpg-encryption/
VoIP
http://tox.im/
- open source
Web Browser
http://webpg.org/
Voting System
- PyBitmessageVote is a trustless, private and decentralized peer-to-peer voting scheme. https://github.com/jesperborgstrup/PyBitmessageVote
如何得知被監聽
?
運動現場已知需求
1. 記者發稿專用網路
2. 媒體組即時上傳影像、新聞稿、臉書
3. 工作人員（e.g. 交通組）無障礙通訊
4. 核心幹部機密加密通訊：阿端safeslinger教學文
匿名os 系統 使用USB或光碟等
*
https://www.youtube.com/watch?v=YlmM7b8OdRI
*
https://www.youtube.com/watch?v=BWTaqSyYb6k