[guardian-dev] NYLUG talks for next year?? Orbot and/or Lil'Debian?

[Hans of Guardian]

Title:
"The Guardian Project - a privacy, security and anonymity stack for Android"

Description:
While smartphones have been heralded as the coming of the next generation of communication and collaboration, they are a step backwards when it comes to personal security, anonymity and privacy. The Guardian Project aims to create easy to use apps, open-source software libraries and operating system modifications, and customized mobile devices that can be used and deployed around the world, by any person looking to protect their communications and personal data from unjust intrusion and monitoring.

This talk will give an overview of The Guardian Project, then go deep into the particular projects that the two speakers lead.  Lee will talk about the Open Secure Telephony Network and how you can run your own secure telephone system.  Hans will talk about Android development tools to make it easy to secure your apps: NetCipher for networking, SQLCipher for databases, and IOCipher for file storage.



About Hans-Christoph Steiner:
Hans-Christoph Steiner is a hacker, teacher, and researcher with the Guardian Project. He focuses on the intersection on humans and computers with the goal of creating natural interactions between the two. He has worked in a wide variety of fields, including free software development, media art, robotics, front line tech support, jet-powered amusement park rides, and formal and informal teaching from ages 10 up to graduate students and beyond.  Back in 2005, he set up a Tor node because it sounded like a cool project.  Little did he know that in 2010, Tor would resurface in his life to be central to how he spends his days and supports his family.

About Lee Azzarello:
Lee Azzarello applies technology in ways that liberate and encourage free expression. This adventure has led to work in fields such as grassroots media, independent publishing, file sharing, broadcast, telephony, big data and new media art. He has worked with the Free Software community since 2001. He has very good SEO.


.hc

On Feb 8, 2013, at 12:51 AM, Brian Gupta wrote:

> Great, I really appreciate your guys flexibility!! (Sorry for the
> delayed response, as I've been working 13-15 hour days, and am a
> little tired.) It sounds like we have agreement on a talk title:
> 
> "The Guardian Project - a privacy, security and anonymity stack for Android"
> 
> So would one or both of you guys be up for drafting the announcement
> copy of the talk? (I would be greatly appreciative if we can hammer
> this out by valentine's day which is our next meeting, as I'd love to
> start spreading the word.)
> 
> The general format is:
> 
> 1) Talk description.. this should have enough details that it will
> help folks decide whether or not the talk is of interest. It doesn't
> have to be super long, and you can look through past meeting
> announcements, for past examples:
> http://nylug.org/meetings/index.shtml
> 2) Relevant links
> 3) Bios of speakers
> 
> Cheers,
> Brian
> 
> P.S. - We may have a surprise guest in March. Zack is coming to the US
> to go to LibrePlanet, and there is a better than 50/50 chance he will
> be accepting our offer to give an off-schedule talk to NYLUG. (Topic
> still to be determined.)
> 
> On Tue, Feb 5, 2013 at 10:39 PM, Lee Azzarello <lee at rockingtiger.com> wrote:
>> I can talk about the stuff published on the web with Hans and then each
>> of us can talk about the projects we work on right now.
>> 
>> I'm working on extending OSTN, a standard for integration secure voice.
>> The current R&D is federated SIP, XMPP to SIP address translations, ZRTP
>> versus DTLS and why security is a Big Deal on mobile.
>> 
>> I do not like using mathematical operators in talk titles. I do like
>> 
>> "The Guardian Project - a privacy, security and anonymity stack for
>> Android". We are primarily security researchers and hackers, Android is
>> the platform the majority of the current projects reach.
>> 
>> -lee
>> 
>> On 2/4/13 10:12 PM, Hans-Christoph Steiner wrote:
>>> 
>>> 
>>> On 02/01/2013 11:29 PM, Brian Gupta wrote:
>>>> On Fri, Feb 1, 2013 at 7:57 PM, Lee Azzarello <lee at rockingtiger.com> wrote:
>>>>> Hello Brian,
>>>> 
>>>> Hey Lee! (How's FOSDEM? I so wish I could go, and so wish the
>>>> Northeast US had a FOSDEM like event.)
>>>> 
>>>> First let me ask, is trying to have this be a general GP talk with
>>>> deep dives into the sub-projects you guys are working on the wrong
>>>> approach here?
>>>> 
>>>> My thoughts here are that, I know it's more work to prep, and likely
>>>> pushing you guys a bit out of your confort zones, but it's my belief
>>>> that the high level GP stuff would act as glue, tying OStel and
>>>> Lil'Debi together, because otherwise, there wouldn't be a very clear
>>>> understanding of how they are related, and the session might seem a
>>>> bit disjointed, and the overall mission of the project might be lost.)
>>> 
>>> I like the idea of the talk being an overview of what we do, then Lee and I
>>> will each go into detail on a specific project or two.  Lil' Debi is not a
>>> central tool in our mission, so I'll probably only mention it in passing.
>>> Instead I'd like to "deep dive" about IOCipher and SQLCipher-for-Android.
>>> Both of them are developer tools that provide native APIs for using
>>> encryption.  IOCipher provides encrypted virtual disks without needed root
>>> access, it is based on the java.io file API.  SQLCipher-for-Android is an
>>> encrypted database that you can use using the standard android.database API.
>>> 
>>> 
>>> 
>>>>> I can talk a lot about more "realtime" stuff, like voice, walkie talkies
>>>>> and video. I'm also building out infra for these services so I can talk
>>>>> about Chef and AWS and cloud stuff.
>>>> 
>>>> Assuming the "realtime" stuff is part of GP (which it sounds like it
>>>> is), then that would certainly be on topic for the extended "deep
>>>> dive" part of the preso that I am envisioning.
>>>> 
>>>> As for the Chef/Cloud/AWS stuff, if it is specific to GP, and
>>>> important to understanding GP then by all means include it. If on the
>>>> other hand it's a generic "best practices" kind of talk you have in
>>>> mind, then let's schedule that as a separate talk, on a separate
>>>> night, as I believe it would target a different audience, and would
>>>> stand on its own as a talk. (It's certainly interesting to many folks
>>>> in either case.)
>>>> 
>>>>> I wrote a catchy title just this week on anonymous PTT online.
>>>>> 
>>>>> https://guardianproject.info/2013/01/31/anonymous-cb-radio-with-mumble-and-tor/
>>>>> 
>>>>> Regarding the catchy title, please don't say "Anoymous + Android =
>>>>> Guardian Project" since that statement is false. Some of the GP apps
>>>>> have anonymity, some have security, some have both. These are all
>>>>> different things.
>>>> 
>>>> I'm really feeling that we need to hook people with the talk title,
>>>> which will be the subject of the email announcing it. It's a bit
>>>> challenging in this case, as many people haven't heard of the Guardian
>>>> Project. This is a unfortunate, as I feel that the work you guys are
>>>> doing is VERY important. I am excited that you guys are doing this
>>>> talk, as this is a good opportunity to change that, and improve the
>>>> project's visibility..
>>>> 
>>>> So assuming a GP talk with the deep dives, and the thoughts about
>>>> introducing folks in a way that will catch their attention, here are
>>>> my next batch of proposed titles:
>>>> 
>>>> "The Guardian Project - an Android privacy, security and anonymity stack",
>>>> or "Anonymous + Android ~ Guardian Project",
>>>> or "Anonymous + Secure + Android ~= Guardian Project",
>>>> or "Android OS + Guardian Security Layer = safer mobile computing",
>>>> or "Securing Human Rights through Mobile Technology"
>>>> or "???"
>>> 
>>> 
>>> This works for me:
>>>> "The Guardian Project - an Android privacy, security and anonymity stack",
>>> 
>>> I could be OK with this:
>>>> "Android OS + Guardian Project = safer mobile computing",
>>> 
>>> .hc
>>> 
>>> 
>>>> Remember the title needs to be something that will get geeks to open
>>>> their email and read the description of the talk, which can go into
>>>> more detail. Most of the tech we cover, geeks have heard of. GP isn't
>>>> there yet.
>>>> 
>>>> Please let me know if any of the above titles work for you?
>>>> 
>>>>> The official site has good copywriting for a high level of what we do.
>>>>> You can take stuff from https://guardianproject.info
>>>> 
>>>> Ok. Will check it out.
>>>> 
>>>>> There is also a research wiki at https://guardianproject.info/wiki/
>>>> 
>>>> Ah cool.. this would be good for a short "roadmap/future planning" section.
>>>> 
>>>>> -lee
>>>>> 
>>>>> 
>>>>> On 2/1/13 11:42 PM, Brian Gupta wrote:
>>>>>> Congratulations!!! I completely understand, as the sleep deprivation
>>>>>> newborns inflict on their parents, isn't something non-parents can
>>>>>> really fathom. (It's akin to POW stories.) You are actually surfacing
>>>>>> about a month earlier than I did for our first, as she didn't settle
>>>>>> into semi-sane sleep cycles for 4 months.
>>>>>> 
>>>>>> So I think the first thing we need to do is have a catchy title. Was
>>>>>> thinking something like "Anonymous + Android = Guardian Project".
>>>>>> (Please say if you don't like it, but I definitely think we need to
>>>>>> hook folks with the title, and can't assume folks know what the
>>>>>> Guardian Project is.)
>>>>>> 
>>>>>> Let's hash out an agenda, and then we can work out the announcement
>>>>>> copy. (I'm gonna propose something below, please give me your
>>>>>> thoughts.)
>>>>>> 
>>>>>> I think we need to touch on use cases like what NF is doing, plus use
>>>>>> cases in this country, and other first world markets. (Basically cover
>>>>>> why the project is important, why the audience might want to use it,
>>>>>> and where they should recommend it to others. If there are any
>>>>>> commercial use cases, this would also be the time to touch on them.)
>>>>>> 
>>>>>> A short history lesson would probably be interesting.
>>>>>> 
>>>>>> A high level technical overview of the components. (both the ones
>>>>>> targeted at users and those targeted at developers).
>>>>>> 
>>>>>> Deep dive into technical components where it makes sense. (IE: The
>>>>>> subprojects you and Lee are working on.)
>>>>>> 
>>>>>> How to get started as a user.
>>>>>> 
>>>>>> How to get started as an Android app developer.
>>>>>> 
>>>>>> How to get involved in the guardian project as a contributor.
>>>>>> 
>>>>>> Q&A session.
>>>>>> 
>>>>>> I know it's a lot, but we can give you guys 2 - 2.5 hours if you're up
>>>>>> to prepping talks that cover that much time. (The topic certainly
>>>>>> warrants it.)
>>>>>> 
>>>>>> Also we will be both recording and publishing video of the meeting, as
>>>>>> well as live streaming video.
>>>>>> 
>>>>>> Audience-wise if we get the topic and announcement copy right, we
>>>>>> should be able to get you an audience of 100-150 geeks.
>>>>>> 
>>>>>> Cheers,
>>>>>> Brian
>>>>>> 
>>>>>> P.S. - I've added James to the cc, since he's recently started helping
>>>>>> out with speaker coordination.
>>>>>> P.S.S. - I really like the new site.
>>>>>> 
>>>>>> On Fri, Feb 1, 2013 at 4:50 PM, Hans-Christoph Steiner
>>>>>> <hans at guardianproject.info> wrote:
>>>>>>> 
>>>>>>> Hey Brian,
>>>>>>> 
>>>>>>> Sorry for the radio silence, I'm still emerging back into the real world after
>>>>>>> the birth of my second son, three months ago.
>>>>>>> 
>>>>>>> I personally can talk about the general Guardian Project mission, our our
>>>>>>> efforts to make cryptography more useable and useful, and our developer tools
>>>>>>> for making it easy to add privacy and security to any android app (and iOS to
>>>>>>> a small degree).  Lee is mostly working on Open Secure Telephony.  He's at
>>>>>>> FOSDEM now, but I'll try to pin him down for details on this when he gets back.
>>>>>>> 
>>>>>>> So I can write up more info if you want to specify an area for us to focus on.
>>>>>>> 
>>>>>>> .hc
>>>>>>> 
>>>>>>> 
>>>>>>> On 01/26/2013 08:27 PM, Brian Gupta wrote:
>>>>>>>> Hi guys.. If you want to just give me an outline on what you plan to cover,
>>>>>>>> I can take point on writing a draft for your review.
>>>>>>>> 
>>>>>>>> Thanks,
>>>>>>>> Brian
>>>>>>>> 
>>>>>>>> On Mon, Dec 31, 2012 at 2:01 AM, Brian Gupta <brian.gupta at brandorr.com>wrote:
>>>>>>>> 
>>>>>>>>> Hey guys, had some time so I figured I'd followup with what we need for
>>>>>>>>> the annoucnement copy. This year I'm trying to have at least the next two
>>>>>>>>> meetings listed at a time so it would be great if we could get this sorted
>>>>>>>>> by our next meeting on Jan 10th (Ted T'so).
>>>>>>>>> 
>>>>>>>>> We'll need:
>>>>>>>>> 
>>>>>>>>> 1) Title: (I have "Guardian Project -Open Source Mobile Security and
>>>>>>>>> Privacy" as the placeholder, but I suspect we want to at least mention
>>>>>>>>> Android in the title, to catch people's eyes)
>>>>>>>>> 
>>>>>>>>> 2) Main description: a couple or so paragraphs describing your talk. We
>>>>>>>>> have over 1000 members of varying interests, so the more detailed the
>>>>>>>>> description, the easier it makes it for people to decide if the meeting is
>>>>>>>>> right for them.
>>>>>>>>> 
>>>>>>>>> 3) Links: Any relevant links
>>>>>>>>> 
>>>>>>>>> 4) Speaker Bios: WIll need shortish bios for both of you guys. (Two or
>>>>>>>>> three sentences each.)
>>>>>>>>> 
>>>>>>>>> Thanks,
>>>>>>>>> Brian
>>>>>>>>> 
>>>>>>>>> On Mon, Oct 22, 2012 at 11:52 AM, Brian Gupta <brian.gupta at brandorr.com>wrote:
>>>>>>>>> 
>>>>>>>>>> You got it. Thanks again!! Danny, cc'ed, will be in touch at some point
>>>>>>>>>> to coordinate the announcement copy, and logistics.
>>>>>>>>>> 
>>>>>>>>>> Thanks,
>>>>>>>>>> Brian
>>>>>>>>>> 
>>>>>>>>>> 
>>>>>>>>>> On Mon, Oct 22, 2012 at 11:44 AM, Hans-Christoph Steiner <hans at at.or.at>wrote:
>>>>>>>>>> 
>>>>>>>>>>> 
>>>>>>>>>>> Lee and I want Apr 11th!
>>>>>>>>>>> 
>>>>>>>>>>> .hc
>>>>>>>>>>> 
>>>>>>>>>>> 
>>>>>>>>>>> On 10/19/2012 01:38 AM, Brian Gupta wrote:
>>>>>>>>>>>> Hi guys. Please note at this point Jan, Feb, Mar, and Jun are booked.
>>>>>>>>>>>> Leaving:
>>>>>>>>>>>> 
>>>>>>>>>>>> Apr 11
>>>>>>>>>>>> May 9
>>>>>>>>>>>> Jul 11
>>>>>>>>>>>> Aug 15
>>>>>>>>>>>> Sep 12
>>>>>>>>>>>> Oct 10
>>>>>>>>>>>> Nov 14
>>>>>>>>>>>> 
>>>>>>>>>>>> I still feel a join preso would be great, if you guys are game.
>>>>>>>>>>>> 
>>>>>>>>>>>> Thanks,
>>>>>>>>>>>> Brian
>>>>>>>>>>>> 
>>>>>>>>>>>> On Sat, Sep 22, 2012 at 11:54 PM, Brian Gupta <
>>>>>>>>>>> brian.gupta at brandorr.com>wrote:
>>>>>>>>>>>> 
>>>>>>>>>>>>> Are you guys interested in doing a joint presentation? I am open to
>>>>>>>>>>>>> two separate talks, if you guys feel that would be better, but it
>>>>>>>>>>>>> seems like these presentations would go well together, and we have the
>>>>>>>>>>>>> venue booked for 3 hours each month. (6-9) Typically we start the
>>>>>>>>>>>>> meetings around 6:30, and end between 8:00 and 8:30pm, which means
>>>>>>>>>>>>> that we could handle up to 2 hours of presos during a single meeting.
>>>>>>>>>>>>> 
>>>>>>>>>>>>> We have the Chelsea Market space reserved on the following dates
>>>>>>>>>>> (capacity
>>>>>>>>>>>>> 155):
>>>>>>>>>>>>> 
>>>>>>>>>>>>> Jan 10
>>>>>>>>>>>>> Feb 14
>>>>>>>>>>>>> Mar 14
>>>>>>>>>>>>> Apr 11
>>>>>>>>>>>>> May 9
>>>>>>>>>>>>> Jun 13
>>>>>>>>>>>>> Jul 11
>>>>>>>>>>>>> Aug 15
>>>>>>>>>>>>> Sep 12
>>>>>>>>>>>>> Oct 10
>>>>>>>>>>>>> Nov 14
>>>>>>>>>>>>> 
>>>>>>>>>>>>> I have just started reaching out for speakers, so the calendar is
>>>>>>>>>>>>> open. Do you guys have any preferences for dates that would work best?
>>>>>>>>>>>>> 
>>>>>>>>>>>>> Thanks,
>>>>>>>>>>>>> Brian
>>>>>>>>>>>>> 
>>>>>>>>>>>>> On Fri, Sep 14, 2012 at 9:30 PM, Hans-Christoph Steiner <
>>>>>>>>>>> hans at at.or.at>
>>>>>>>>>>>>> wrote:
>>>>>>>>>>>>>> 
>>>>>>>>>>>>>> I can also talk about Orbot, Lil Debi, and other Guardian apps.
>>>>>>>>>>>>>> 
>>>>>>>>>>>>>> .hc
>>>>>>>>>>>>>> 
>>>>>>>>>>>>>> On 09/13/2012 08:44 PM, Brian Gupta wrote:
>>>>>>>>>>>>>>> Definitely interested!!  Will be in touch soon.
>>>>>>>>>>>>>>> On Sep 13, 2012 1:55 AM, "Lee Azzarello" <lee at rockingtiger.com>
>>>>>>>>>>> wrote:
>>>>>>>>>>>>>>> 
>>>>>>>>>>>>>>>> I can talk about OStel. It's the only open source secure VoIP
>>>>>>>>>>> system
>>>>>>>>>>>>>>>> that implements a proposed standard! Runs on lots of mobile
>>>>>>>>>>> platforms
>>>>>>>>>>>>>>>> too.
>>>>>>>>>>>>>>>> 
>>>>>>>>>>>>>>>> -lee
>>>>>>>>>>>>>>>> 
>>>>>>>>>>>>>>>> On Tue, Sep 11, 2012 at 10:03 AM, Brian Gupta <
>>>>>>>>>>>>> brian.gupta at brandorr.com>
>>>>>>>>>>>>>>>> wrote:
>>>>>>>>>>>>>>>>> Hi guys,
>>>>>>>>>>>>>>>>> 
>>>>>>>>>>>>>>>>> I was catching up with Nathan Freitas, and we got on the topic of
>>>>>>>>>>>>>>>>> Guardian/Orbot. I asked him when he was coming to NYC and could
>>>>>>>>>>> give a
>>>>>>>>>>>>>>>>> talk for NYLUG, and it seems he is in India for the indefinite
>>>>>>>>>>> future,
>>>>>>>>>>>>>>>>> and suggested I get in touch with you guys, since you are both
>>>>>>>>>>>>>>>>> involved in the project.
>>>>>>>>>>>>>>>>> 
>>>>>>>>>>>>>>>>> He also mentioned that  mentioned that Hans is working on a Debian
>>>>>>>>>>>>>>>>> chroot layered on top of Android called Lil'Debian.
>>>>>>>>>>>>>>>>> 
>>>>>>>>>>>>>>>>> I still haven't booked any speakers for next year. NYLUG (as Lee
>>>>>>>>>>>>>>>>> knows) now meets at the Google's space in Chelsea Market, which is
>>>>>>>>>>>>>>>>> much more convenient than our old space in midtown. (No IDs
>>>>>>>>>>> required
>>>>>>>>>>>>>>>>> to attend the meetings either!)
>>>>>>>>>>>>>>>>> 
>>>>>>>>>>>>>>>>> Any interest? If so please be aware that we meet on the second
>>>>>>>>>>>>>>>>> Thursday of every month. As of yet I haven't really started
>>>>>>>>>>> reaching
>>>>>>>>>>>>>>>>> out to folks for next year, so the calendar is completely open.
>>>>>>>>>>> Both
>>>>>>>>>>>>>>>>> of these topics sound great, and would make interesting talks. If
>>>>>>>>>>> you
>>>>>>>>>>>>>>>>> guys have any interest, please let me know which month works
>>>>>>>>>>> best, and
>>>>>>>>>>>>>>>>> I will pencil you in. (As a planner, the earlier in the year the
>>>>>>>>>>>>>>>>> better, but I understand that your schedules, and the timing of
>>>>>>>>>>> the
>>>>>>>>>>>>>>>>> projects may make certain months better than other's. e.g. if
>>>>>>>>>>> there is
>>>>>>>>>>>>>>>>> a big upcoming release that you want to cover later in the year.)
>>>>>>>>>>>>>>>>> 
>>>>>>>>>>>>>>>>> Thanks,
>>>>>>>>>>>>>>>>> Brian
>>>>>>>>>>>>>> 
>>>>>>>>>>>>> 
>>>>>>>>>>>> 
>>>>>>>>>>>> 
>>>>>>>>>>>> 
>>>>>>>>>>> 
>>>>>>>>>> 
>>>>>>>>>> 
>>>>>>>>>> 
>>>>>>>>>> --
>>>>>>>>>> <http://aws.amazon.com/solutions/solution-providers/brandorr/>
>>>>>>>>>> 
>>>>>>>>>> 
>>>>>>>>> 
>>>>>>>>> 
>>>>>>>>> --
>>>>>>>>> <http://aws.amazon.com/solutions/solution-providers/brandorr/>
>>>>>>>>> 
>>>>>>>> 
>>>>>>>> 
>>>>>>>> 
>>>>> 
>>