Bob Mottram 8 лет назад
Родитель
Сommit
c4c16b8d0d
2 измененных файлов: 154 добавлений и 144 удалений
  1. 3
    1
      doc/EN/usage.org
  2. 151
    143
      website/EN/usage.html

+ 3
- 1
doc/EN/usage.org Просмотреть файл

@@ -386,6 +386,8 @@ ssh myusername@mydomain -p 2222
386 386
 Select /Administrator controls/ then *IRC Menu* and then change the password. An empty password will allow anyone to log in, so you can have a globally accessible IRC system if you wish, although you might want to carefully consider whether that's wise.
387 387
 
388 388
 ** XMPP/Jabber
389
+*** About XMPP
390
+A well written article on the state of XMPP and how it compares to other chat protocols [[https://gultsch.de/xmpp_2016.html][can be found here]].
389 391
 *** Using with Profanity
390 392
 The [[http://profanity.im][Profanity]] shell based user interface and is perhaps the simplest way to use XMPP from a laptop. It's also a good way to ensure that your OTR keys are the same even when logging in from different laptops or devices, and it also means that if those devices later become compomised then there are no locally stored OTR keys to be found.
391 393
 
@@ -462,7 +464,7 @@ Enter your username (username@domainname) and password.
462 464
 Click on *Advanced* and make sure that *Encryption required* and *Ignore SSL certificate errors* are checked.  Ignoring the certificate errors will allow you to use the self-signed certificate created earlier.  Then click *Done* and set your Jabber account and Empathy to *On*.
463 465
 *** Using Tor Messenger
464 466
 Tor Messenger is a messaging client which supports XMPP, and its onion routing enables you to protect the metadata of chat interactions to some extent by making it difficult for an adversary to know which server is talking to which. You can download Tor Messenger from [[https://torproject.org][torproject.org]] and the setup is pretty simple.
465
-*** Using with Android
467
+*** Using with Android/Conversations
466 468
 Install [[https://f-droid.org/][F-Droid]]
467 469
 
468 470
 Search for and install *Orbot* and *Conversations*.

+ 151
- 143
website/EN/usage.html Просмотреть файл

@@ -3,7 +3,7 @@
3 3
 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
4 4
 <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
5 5
 <head>
6
-<!-- 2016-05-31 Tue 09:57 -->
6
+<!-- 2016-06-02 Thu 22:59 -->
7 7
 <meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
8 8
 <meta name="viewport" content="width=device-width, initial-scale=1" />
9 9
 <title></title>
@@ -253,15 +253,15 @@ for the JavaScript code in this tag.
253 253
 </colgroup>
254 254
 <tbody>
255 255
 <tr>
256
-<td class="org-left"><a href="#orgd227ef1">Readme</a></td>
256
+<td class="org-left"><a href="#org0354421">Readme</a></td>
257 257
 </tr>
258 258
 
259 259
 <tr>
260
-<td class="org-left"><a href="#org4d41872">Improving ssh security</a></td>
260
+<td class="org-left"><a href="#org62a38b8">Improving ssh security</a></td>
261 261
 </tr>
262 262
 
263 263
 <tr>
264
-<td class="org-left"><a href="#org12befbb">Administrating the system via an onion address (Tor)</a></td>
264
+<td class="org-left"><a href="#orgd4d2732">Administrating the system via an onion address (Tor)</a></td>
265 265
 </tr>
266 266
 
267 267
 <tr>
@@ -273,46 +273,46 @@ for the JavaScript code in this tag.
273 273
 </tr>
274 274
 
275 275
 <tr>
276
-<td class="org-left"><a href="#orgbbef597">Syncing to the Cloud</a></td>
276
+<td class="org-left"><a href="#org45a063b">Syncing to the Cloud</a></td>
277 277
 </tr>
278 278
 
279 279
 <tr>
280
-<td class="org-left"><a href="#org2041e81">Play Music</a></td>
280
+<td class="org-left"><a href="#orgf6773cb">Play Music</a></td>
281 281
 </tr>
282 282
 
283 283
 <tr>
284
-<td class="org-left"><a href="#orge3622ef">Microblogging (GNU Social)</a></td>
284
+<td class="org-left"><a href="#orge4e772f">Microblogging (GNU Social)</a></td>
285 285
 </tr>
286 286
 
287 287
 <tr>
288
-<td class="org-left"><a href="#org8bb8ad1">Sharing things</a></td>
288
+<td class="org-left"><a href="#org1590af4">Sharing things</a></td>
289 289
 </tr>
290 290
 
291 291
 <tr>
292
-<td class="org-left"><a href="#orga4524b7">Social Network</a></td>
292
+<td class="org-left"><a href="#org6dab34b">Social Network</a></td>
293 293
 </tr>
294 294
 
295 295
 <tr>
296
-<td class="org-left"><a href="#org60367f7">Chat Services</a></td>
296
+<td class="org-left"><a href="#orgd6e5fe0">Chat Services</a></td>
297 297
 </tr>
298 298
 
299 299
 <tr>
300
-<td class="org-left"><a href="#org8ce4d68">RSS Reader</a></td>
300
+<td class="org-left"><a href="#org6900b88">RSS Reader</a></td>
301 301
 </tr>
302 302
 
303 303
 <tr>
304
-<td class="org-left"><a href="#org85ca1e1">Git Projects</a></td>
304
+<td class="org-left"><a href="#org83b4f81">Git Projects</a></td>
305 305
 </tr>
306 306
 
307 307
 <tr>
308
-<td class="org-left"><a href="#orge977acc">Adding or removing users</a></td>
308
+<td class="org-left"><a href="#org18a42fd">Adding or removing users</a></td>
309 309
 </tr>
310 310
 </tbody>
311 311
 </table>
312 312
 
313
-<div id="outline-container-orgd227ef1" class="outline-2">
314
-<h2 id="orgd227ef1">Readme</h2>
315
-<div class="outline-text-2" id="text-orgd227ef1">
313
+<div id="outline-container-org0354421" class="outline-2">
314
+<h2 id="org0354421">Readme</h2>
315
+<div class="outline-text-2" id="text-org0354421">
316 316
 <p>
317 317
 After the system has installed a README file will be generated which contains passwords and some brief advice on using the installed systems. You can read this with the following commands:
318 318
 </p>
@@ -333,9 +333,9 @@ To exit you can either just close the terminal or use <b>CTRL-x CTRL-c</b> follo
333 333
 </p>
334 334
 </div>
335 335
 </div>
336
-<div id="outline-container-org4d41872" class="outline-2">
337
-<h2 id="org4d41872">Improving ssh security</h2>
338
-<div class="outline-text-2" id="text-org4d41872">
336
+<div id="outline-container-org62a38b8" class="outline-2">
337
+<h2 id="org62a38b8">Improving ssh security</h2>
338
+<div class="outline-text-2" id="text-org62a38b8">
339 339
 <p>
340 340
 To improve ssh security you can generate an ssh key pair on your system and then upload the public key to the Freedombone.
341 341
 </p>
@@ -388,9 +388,9 @@ If you wish to only use ssh keys then log in to the Freedombone, become the root
388 388
 </div>
389 389
 </div>
390 390
 
391
-<div id="outline-container-org12befbb" class="outline-2">
392
-<h2 id="org12befbb">Administrating the system via an onion address (Tor)</h2>
393
-<div class="outline-text-2" id="text-org12befbb">
391
+<div id="outline-container-orgd4d2732" class="outline-2">
392
+<h2 id="orgd4d2732">Administrating the system via an onion address (Tor)</h2>
393
+<div class="outline-text-2" id="text-orgd4d2732">
394 394
 <p>
395 395
 You can also access your system via the Tor system using an onion address. To find out what the onion address for ssh access is you can do the following:
396 396
 </p>
@@ -436,9 +436,9 @@ Subsequently even if dynamic DNS isn't working you may still be able to administ
436 436
 </p>
437 437
 </div>
438 438
 </div>
439
-<div id="outline-container-orgbbef597" class="outline-2">
440
-<h2 id="orgbbef597">Syncing to the Cloud</h2>
441
-<div class="outline-text-2" id="text-orgbbef597">
439
+<div id="outline-container-org45a063b" class="outline-2">
440
+<h2 id="org45a063b">Syncing to the Cloud</h2>
441
+<div class="outline-text-2" id="text-org45a063b">
442 442
 <p>
443 443
 <a href="https://syncthing.net/">Syncthing</a> provides a similar capability to proprietary systems such as <a href="http://www.drop-dropbox.com/">Dropbox</a>, and also is well suited for use with low power single board computers. You can have one or more directories which are synchronized across your various laptops/desktops/devices, and this makes it hard for you to ever lose important files. The manner in which the synchronization is done is pretty secure, such that it would be difficult for passive adversaries (mass surveillance, "<i>men in the middle</i>", etc) to know what files you're sharing. Of course, you don't necessarily need to be running a server in order to use Syncthing, but if you do have a server which is always running then there's always at least one place to synchronize your files to or from.
444 444
 </p>
@@ -448,9 +448,9 @@ Freedombone provides Syncthing shared directories for each user on the system, p
448 448
 </p>
449 449
 </div>
450 450
 
451
-<div id="outline-container-org2017748" class="outline-3">
452
-<h3 id="org2017748">On a laptop</h3>
453
-<div class="outline-text-3" id="text-org2017748">
451
+<div id="outline-container-org48189f6" class="outline-3">
452
+<h3 id="org48189f6">On a laptop</h3>
453
+<div class="outline-text-3" id="text-org48189f6">
454 454
 <p>
455 455
 Install syncthing:
456 456
 </p>
@@ -505,9 +505,9 @@ Now wait for a few minutes. Eventually you will see two messages appear within t
505 505
 </p>
506 506
 </div>
507 507
 </div>
508
-<div id="outline-container-orgdc7d76f" class="outline-3">
509
-<h3 id="orgdc7d76f">On Android</h3>
510
-<div class="outline-text-3" id="text-orgdc7d76f">
508
+<div id="outline-container-org5cde70e" class="outline-3">
509
+<h3 id="org5cde70e">On Android</h3>
510
+<div class="outline-text-3" id="text-org5cde70e">
511 511
 <p>
512 512
 Install Syncthing and Connectbot from F-droid.
513 513
 </p>
@@ -538,12 +538,12 @@ Now wait for a few minutes or more. Eventually you should receive two notificati
538 538
 </div>
539 539
 </div>
540 540
 </div>
541
-<div id="outline-container-org2041e81" class="outline-2">
542
-<h2 id="org2041e81">Play Music</h2>
543
-<div class="outline-text-2" id="text-org2041e81">
544
-</div><div id="outline-container-org0e10332" class="outline-3">
545
-<h3 id="org0e10332">With the DLNA service</h3>
546
-<div class="outline-text-3" id="text-org0e10332">
541
+<div id="outline-container-orgf6773cb" class="outline-2">
542
+<h2 id="orgf6773cb">Play Music</h2>
543
+<div class="outline-text-2" id="text-orgf6773cb">
544
+</div><div id="outline-container-org812b15f" class="outline-3">
545
+<h3 id="org812b15f">With the DLNA service</h3>
546
+<div class="outline-text-3" id="text-org812b15f">
547 547
 <p>
548 548
 An easy way to play music on any mobile device in your home is to use the DLNA service. Copy your music into a directory called "<i>Music</i>" on a USB thumb drive and then insert it into from socket on the Beaglebone.
549 549
 </p>
@@ -584,9 +584,9 @@ The DLNA service will only work within your local home network, and isn't remote
584 584
 </div>
585 585
 </div>
586 586
 
587
-<div id="outline-container-orge3622ef" class="outline-2">
588
-<h2 id="orge3622ef">Microblogging (GNU Social)</h2>
589
-<div class="outline-text-2" id="text-orge3622ef">
587
+<div id="outline-container-orge4e772f" class="outline-2">
588
+<h2 id="orge4e772f">Microblogging (GNU Social)</h2>
589
+<div class="outline-text-2" id="text-orge4e772f">
590 590
 <p>
591 591
 To log into your GNU Social site first obtain your username and password from the "microblogging" section of the readme file.
592 592
 </p>
@@ -615,9 +615,9 @@ GNU Social has a clutter-free mobile user interface which can be accessed via a
615 615
 </div>
616 616
 </div>
617 617
 
618
-<div id="outline-container-org8bb8ad1" class="outline-2">
619
-<h2 id="org8bb8ad1">Sharing things</h2>
620
-<div class="outline-text-2" id="text-org8bb8ad1">
618
+<div id="outline-container-org1590af4" class="outline-2">
619
+<h2 id="org1590af4">Sharing things</h2>
620
+<div class="outline-text-2" id="text-org1590af4">
621 621
 <p>
622 622
 If you have the GNU Social microblogging system installed then it's also possible to share things or services between groups or with particular users. This can be useful for sharing items within a family, club or in a local sharing economy. Sharing things freely, without money, reveals the social basis at the root of all economics which money normally conceals or obscures.
623 623
 </p>
@@ -644,20 +644,20 @@ The "<i>catalog</i>" button then allows you to search for shared things within t
644 644
 </div>
645 645
 </div>
646 646
 
647
-<div id="outline-container-orga4524b7" class="outline-2">
648
-<h2 id="orga4524b7">Social Network</h2>
649
-<div class="outline-text-2" id="text-orga4524b7">
650
-</div><div id="outline-container-orgb69ddfa" class="outline-3">
651
-<h3 id="orgb69ddfa">Domains</h3>
652
-<div class="outline-text-3" id="text-orgb69ddfa">
647
+<div id="outline-container-org6dab34b" class="outline-2">
648
+<h2 id="org6dab34b">Social Network</h2>
649
+<div class="outline-text-2" id="text-org6dab34b">
650
+</div><div id="outline-container-org8fa1350" class="outline-3">
651
+<h3 id="org8fa1350">Domains</h3>
652
+<div class="outline-text-3" id="text-org8fa1350">
653 653
 <p>
654 654
 Both Hubzilla and GNU Social try to obtain certificates automatically at the time of installation via Let's Encrypt. This will likely mean that in order for this to work you'll need to have obtained at least one "official" domain via a domain selling service, since Let's Encrypt mostly doesn't seem to work with free subdomains from sites such as freeDNS.
655 655
 </p>
656 656
 </div>
657 657
 </div>
658
-<div id="outline-container-org9695337" class="outline-3">
659
-<h3 id="org9695337">Initial install</h3>
660
-<div class="outline-text-3" id="text-org9695337">
658
+<div id="outline-container-orgffa28d3" class="outline-3">
659
+<h3 id="orgffa28d3">Initial install</h3>
660
+<div class="outline-text-3" id="text-orgffa28d3">
661 661
 <p>
662 662
 On first visiting your Hubzilla site you'll see the login screen. The first thing you need to do is <b>register</b> a new user. The first user on the system then becomes its administrator.
663 663
 </p>
@@ -671,19 +671,19 @@ On first visiting your Hubzilla site you'll see the login screen. The first thin
671 671
 </div>
672 672
 </div>
673 673
 
674
-<div id="outline-container-org60367f7" class="outline-2">
675
-<h2 id="org60367f7">Chat Services</h2>
676
-<div class="outline-text-2" id="text-org60367f7">
677
-</div><div id="outline-container-orgba28c46" class="outline-3">
678
-<h3 id="orgba28c46">IRC</h3>
679
-<div class="outline-text-3" id="text-orgba28c46">
674
+<div id="outline-container-orgd6e5fe0" class="outline-2">
675
+<h2 id="orgd6e5fe0">Chat Services</h2>
676
+<div class="outline-text-2" id="text-orgd6e5fe0">
677
+</div><div id="outline-container-orgb13bb9a" class="outline-3">
678
+<h3 id="orgb13bb9a">IRC</h3>
679
+<div class="outline-text-3" id="text-orgb13bb9a">
680 680
 <p>
681 681
 IRC is useful for multi-user chat. The classic use case is for software development where many engineers might need to coordinate their activities, but it's also useful for meetings, parties and general socialising.
682 682
 </p>
683 683
 </div>
684
-<div id="outline-container-orgddc9e41" class="outline-4">
685
-<h4 id="orgddc9e41">Irssi</h4>
686
-<div class="outline-text-4" id="text-orgddc9e41">
684
+<div id="outline-container-org5e99691" class="outline-4">
685
+<h4 id="org5e99691">Irssi</h4>
686
+<div class="outline-text-4" id="text-org5e99691">
687 687
 <p>
688 688
 The easiest way to use irssi is to connect to your system, like this:
689 689
 </p>
@@ -699,9 +699,9 @@ Then select <b>IRC</b> from the menu. However, other than via this method using
699 699
 </p>
700 700
 </div>
701 701
 </div>
702
-<div id="outline-container-org4090ef2" class="outline-4">
703
-<h4 id="org4090ef2">HexChat</h4>
704
-<div class="outline-text-4" id="text-org4090ef2">
702
+<div id="outline-container-org71fad07" class="outline-4">
703
+<h4 id="org71fad07">HexChat</h4>
704
+<div class="outline-text-4" id="text-org71fad07">
705 705
 <p>
706 706
 HexChat (formerly XChat) is compatible with proxying via Tor and so provides the best security when connecting to your IRC server. It will allow you to connect to your IRC server's onion address.
707 707
 </p>
@@ -733,7 +733,7 @@ mkdir -p ~/.config/hexchat
733 733
 <span class="org-string"># HexChat should not use the same circuit/exit server as other Tor applications.</span>
734 734
 <span class="org-string"># Otherwise activity in different applications could be correlated to the same</span>
735 735
 <span class="org-string"># pseudonym. There is a way to prevent that.</span>
736
-<span class="org-string"># It is called stream isolation. We use IsolateSOCKSAuth, </span>
736
+<span class="org-string"># It is called stream isolation. We use IsolateSOCKSAuth,</span>
737 737
 <span class="org-string"># see https://www.torproject.org/docs/tor-manual-dev.html.en</span>
738 738
 <span class="org-string"># The password is actually not required, but it does not hurt either.</span>
739 739
 <span class="org-string"># Will probable not hurt on Tor 0.2.2 and below.</span>
@@ -758,7 +758,7 @@ mkdir -p ~/.config/hexchat
758 758
 <span class="org-string"># /set irc_hide_version ON</span>
759 759
 <span class="org-string"># /set identd OFF &lt;-- NOT working on all HexChat-based IRC software.</span>
760 760
 <span class="org-string"># But still highly suggested to include &amp; use it.</span>
761
-<span class="org-string"># Probable not needed on UNIX, source: http://xchat.org/faq/#q21 </span>
761
+<span class="org-string"># Probable not needed on UNIX, source: http://xchat.org/faq/#q21</span>
762 762
 <span class="org-string">dcc_auto_chat = 0</span>
763 763
 <span class="org-string">dcc_auto_resume = 0</span>
764 764
 <span class="org-string">dcc_auto_send = 0</span>
@@ -774,9 +774,9 @@ mkdir -p ~/.config/hexchat
774 774
 <span class="org-string"># -&gt; Quit: &lt;Deleted everything!&gt;</span>
775 775
 <span class="org-string"># -&gt; Leave channel: &lt;Deleted everything!&gt;</span>
776 776
 <span class="org-string"># -&gt; Away: &lt;Deleted everything!&gt;</span>
777
-<span class="org-string">away_reason = </span>
778
-<span class="org-string">irc_part_reason = </span>
779
-<span class="org-string">irc_quit_reason = </span>
777
+<span class="org-string">away_reason =</span>
778
+<span class="org-string">irc_part_reason =</span>
779
+<span class="org-string">irc_quit_reason =</span>
780 780
 
781 781
 <span class="org-string"># By default, HexChat based IRC software uses your platform OS(Operating System)s</span>
782 782
 <span class="org-string"># login user name as your nickname, user name, real name.  To prevent leaking</span>
@@ -879,9 +879,9 @@ Click <b>close</b> and then <b>connect</b>.
879 879
 </div>
880 880
 </div>
881 881
 
882
-<div id="outline-container-org9484fef" class="outline-4">
883
-<h4 id="org9484fef">Emacs</h4>
884
-<div class="outline-text-4" id="text-org9484fef">
882
+<div id="outline-container-org27b5dc8" class="outline-4">
883
+<h4 id="org27b5dc8">Emacs</h4>
884
+<div class="outline-text-4" id="text-org27b5dc8">
885 885
 <p>
886 886
 If you are an Emacs user then you can also connect to your IRC server via Emacs.
887 887
 </p>
@@ -914,9 +914,9 @@ Add the following to your Emacs configuration file:
914 914
 </div>
915 915
 </div>
916 916
 </div>
917
-<div id="outline-container-org9b8b601" class="outline-4">
918
-<h4 id="org9b8b601">Changing or removing the IRC password</h4>
919
-<div class="outline-text-4" id="text-org9b8b601">
917
+<div id="outline-container-org5a97002" class="outline-4">
918
+<h4 id="org5a97002">Changing or removing the IRC password</h4>
919
+<div class="outline-text-4" id="text-org5a97002">
920 920
 <p>
921 921
 By default the IRC server is set up to require a password for users to log in. The password is the same for all users. If you want to change or remove the password:
922 922
 </p>
@@ -934,12 +934,20 @@ Select <i>Administrator controls</i> then <b>IRC Menu</b> and then change the pa
934 934
 </div>
935 935
 </div>
936 936
 
937
-<div id="outline-container-org177547a" class="outline-3">
938
-<h3 id="org177547a">XMPP/Jabber</h3>
939
-<div class="outline-text-3" id="text-org177547a">
940
-</div><div id="outline-container-org42a6bf4" class="outline-4">
941
-<h4 id="org42a6bf4">Using with Profanity</h4>
942
-<div class="outline-text-4" id="text-org42a6bf4">
937
+<div id="outline-container-org7291dac" class="outline-3">
938
+<h3 id="org7291dac">XMPP/Jabber</h3>
939
+<div class="outline-text-3" id="text-org7291dac">
940
+</div><div id="outline-container-orge2f4227" class="outline-4">
941
+<h4 id="orge2f4227">About XMPP</h4>
942
+<div class="outline-text-4" id="text-orge2f4227">
943
+<p>
944
+A well written article on the state of XMPP and how it compares to other chat protocols <a href="https://gultsch.de/xmpp_2016.html">can be found here</a>.
945
+</p>
946
+</div>
947
+</div>
948
+<div id="outline-container-orgc4a599b" class="outline-4">
949
+<h4 id="orgc4a599b">Using with Profanity</h4>
950
+<div class="outline-text-4" id="text-orgc4a599b">
943 951
 <p>
944 952
 The <a href="http://profanity.im/">Profanity</a> shell based user interface and is perhaps the simplest way to use XMPP from a laptop. It's also a good way to ensure that your OTR keys are the same even when logging in from different laptops or devices, and it also means that if those devices later become compomised then there are no locally stored OTR keys to be found.
945 953
 </p>
@@ -1029,9 +1037,9 @@ When accessed via the user control panel the client is automatically routed thro
1029 1037
 </p>
1030 1038
 </div>
1031 1039
 </div>
1032
-<div id="outline-container-orga19db7e" class="outline-4">
1033
-<h4 id="orga19db7e">Using with Jitsi</h4>
1034
-<div class="outline-text-4" id="text-orga19db7e">
1040
+<div id="outline-container-org242aa31" class="outline-4">
1041
+<h4 id="org242aa31">Using with Jitsi</h4>
1042
+<div class="outline-text-4" id="text-org242aa31">
1035 1043
 <p>
1036 1044
 Jitsi is the recommended communications client for desktop or laptop systems, since it includes the <i>off the record</i> (OTR) feature which provides some additional security beyond the usual SSL certificates.
1037 1045
 </p>
@@ -1061,9 +1069,9 @@ You can also <a href="https://www.youtube.com/watch?v=vgx7VSrDGjk">see this vide
1061 1069
 </p>
1062 1070
 </div>
1063 1071
 </div>
1064
-<div id="outline-container-org73d82a5" class="outline-4">
1065
-<h4 id="org73d82a5">Using with Ubuntu</h4>
1066
-<div class="outline-text-4" id="text-org73d82a5">
1072
+<div id="outline-container-org2648b57" class="outline-4">
1073
+<h4 id="org2648b57">Using with Ubuntu</h4>
1074
+<div class="outline-text-4" id="text-org2648b57">
1067 1075
 <p>
1068 1076
 The default XMPP client in Ubuntu is Empathy.  Using Empathy isn't as secure as using Jitsi, since it doesn't include the <i>off the record</i> feature, but since it's the default it's what many users will have easy access to.
1069 1077
 </p>
@@ -1081,17 +1089,17 @@ Click on <b>Advanced</b> and make sure that <b>Encryption required</b> and <b>Ig
1081 1089
 </p>
1082 1090
 </div>
1083 1091
 </div>
1084
-<div id="outline-container-orgcb2c024" class="outline-4">
1085
-<h4 id="orgcb2c024">Using Tor Messenger</h4>
1086
-<div class="outline-text-4" id="text-orgcb2c024">
1092
+<div id="outline-container-org62cb3d2" class="outline-4">
1093
+<h4 id="org62cb3d2">Using Tor Messenger</h4>
1094
+<div class="outline-text-4" id="text-org62cb3d2">
1087 1095
 <p>
1088 1096
 Tor Messenger is a messaging client which supports XMPP, and its onion routing enables you to protect the metadata of chat interactions to some extent by making it difficult for an adversary to know which server is talking to which. You can download Tor Messenger from <a href="https://torproject.org/">torproject.org</a> and the setup is pretty simple.
1089 1097
 </p>
1090 1098
 </div>
1091 1099
 </div>
1092
-<div id="outline-container-orga138d20" class="outline-4">
1093
-<h4 id="orga138d20">Using with Android</h4>
1094
-<div class="outline-text-4" id="text-orga138d20">
1100
+<div id="outline-container-org5e9c5d3" class="outline-4">
1101
+<h4 id="org5e9c5d3">Using with Android/Conversations</h4>
1102
+<div class="outline-text-4" id="text-org5e9c5d3">
1095 1103
 <p>
1096 1104
 Install <a href="https://f-droid.org/">F-Droid</a>
1097 1105
 </p>
@@ -1105,7 +1113,7 @@ Add an account and enter your Jabber/XMPP ID and password.
1105 1113
 </p>
1106 1114
 
1107 1115
 <p>
1108
-From the menu select <b>Settings</b> then <b>Expert Settings</b>. Select <b>Connect via Tor</b> and depending on your situation you might also want to select <b>Don't save encrypted messages</b>.
1116
+From the menu select <b>Settings</b> then <b>Expert Settings</b>. Select <b>Connect via Tor</b> and depending on your situation you might also want to select <b>Don't save encrypted messages</b>. Also within expert settings select <b>Keep in foreground</b>. This will enable you to still receive notifications when your device is in standby mode with the screen turned off.
1109 1117
 </p>
1110 1118
 
1111 1119
 <p>
@@ -1122,21 +1130,21 @@ Port:      5222
1122 1130
 </div>
1123 1131
 
1124 1132
 <p>
1125
-Then select <b>Next</b>. When chatting you can use the lock icon to encrypt your conversation. It's also going through Tor, so passive surveillance of the metadata should not be easy for an adversary.
1133
+Then select <b>Next</b>. When chatting you can use the lock icon to encrypt your conversation. OMEMO is the recommended type of encryption. It's also going through Tor, so passive surveillance of the metadata should not be easy for an adversary.
1126 1134
 </p>
1127 1135
 </div>
1128 1136
 </div>
1129 1137
 </div>
1130
-<div id="outline-container-orgcec97b0" class="outline-3">
1131
-<h3 id="orgcec97b0">Tox</h3>
1132
-<div class="outline-text-3" id="text-orgcec97b0">
1138
+<div id="outline-container-orgb955168" class="outline-3">
1139
+<h3 id="orgb955168">Tox</h3>
1140
+<div class="outline-text-3" id="text-orgb955168">
1133 1141
 <p>
1134 1142
 Tox is an encrypted peer-to-peer messaging system and so should work without Freedombone. It uses a system of nodes which act as a sort of directory service allowing users to find and connect to each other. The Tox node ID on the Freedombone can be found within the README within your home directory. If you have other users connect to your node then you will be able to continue chatting even when no other nodes are available.
1135 1143
 </p>
1136 1144
 </div>
1137
-<div id="outline-container-orgdb3fd38" class="outline-4">
1138
-<h4 id="orgdb3fd38">Using the Toxic client</h4>
1139
-<div class="outline-text-4" id="text-orgdb3fd38">
1145
+<div id="outline-container-org13de011" class="outline-4">
1146
+<h4 id="org13de011">Using the Toxic client</h4>
1147
+<div class="outline-text-4" id="text-org13de011">
1140 1148
 <p>
1141 1149
 Log into your system with:
1142 1150
 </p>
@@ -1160,20 +1168,20 @@ Then from the menu select <b>Tox Chat</b>. Tox is encrypted by default and also
1160 1168
 </div>
1161 1169
 </div>
1162 1170
 
1163
-<div id="outline-container-org501d819" class="outline-3">
1164
-<h3 id="org501d819">VoIP (Voice and text chat)</h3>
1165
-<div class="outline-text-3" id="text-org501d819">
1166
-</div><div id="outline-container-orgdc57626" class="outline-4">
1167
-<h4 id="orgdc57626">Text chat</h4>
1168
-<div class="outline-text-4" id="text-orgdc57626">
1171
+<div id="outline-container-org9f26f68" class="outline-3">
1172
+<h3 id="org9f26f68">VoIP (Voice and text chat)</h3>
1173
+<div class="outline-text-3" id="text-org9f26f68">
1174
+</div><div id="outline-container-org7802763" class="outline-4">
1175
+<h4 id="org7802763">Text chat</h4>
1176
+<div class="outline-text-4" id="text-org7802763">
1169 1177
 <p>
1170 1178
 In addition to voice it is also possible to do text chat via mumble. The security of this is pretty good provided that you do it via Plumble and Orbot on mobile, but compared to other options such as XMPP/Conversations or Tox the security is not as good, since the mumble server currently doesn't support forward secrecy.
1171 1179
 </p>
1172 1180
 </div>
1173 1181
 </div>
1174
-<div id="outline-container-org04ad172" class="outline-4">
1175
-<h4 id="org04ad172">Using with Ubuntu</h4>
1176
-<div class="outline-text-4" id="text-org04ad172">
1182
+<div id="outline-container-org3b2c825" class="outline-4">
1183
+<h4 id="org3b2c825">Using with Ubuntu</h4>
1184
+<div class="outline-text-4" id="text-org3b2c825">
1177 1185
 <p>
1178 1186
 Within the software center search for "mumble" and install the client then run it. Skip through the audio setup wizard.
1179 1187
 </p>
@@ -1183,9 +1191,9 @@ Click on "add new" to add a new server and enter the default domain name for the
1183 1191
 </p>
1184 1192
 </div>
1185 1193
 </div>
1186
-<div id="outline-container-orgb4b2c69" class="outline-4">
1187
-<h4 id="orgb4b2c69">Using with Android</h4>
1188
-<div class="outline-text-4" id="text-orgb4b2c69">
1194
+<div id="outline-container-orga909223" class="outline-4">
1195
+<h4 id="orga909223">Using with Android</h4>
1196
+<div class="outline-text-4" id="text-orga909223">
1189 1197
 <p>
1190 1198
 Install <a href="https://f-droid.org/">F-Droid</a>
1191 1199
 </p>
@@ -1220,24 +1228,24 @@ Selecting the server by pressing on it then connects you to the server so that y
1220 1228
 </div>
1221 1229
 </div>
1222 1230
 </div>
1223
-<div id="outline-container-org1be673f" class="outline-3">
1224
-<h3 id="org1be673f">SIP phones</h3>
1225
-<div class="outline-text-3" id="text-org1be673f">
1231
+<div id="outline-container-org3b7d05d" class="outline-3">
1232
+<h3 id="org3b7d05d">SIP phones</h3>
1233
+<div class="outline-text-3" id="text-org3b7d05d">
1226 1234
 <p>
1227 1235
 Freedombone also supports SIP phones The username and domain is the same as for your email address, and the SIP password and extension number will appear within the README file in your home directory. Various SIP client options are available, such as CSipSimple on Android and Jitsi on desktop or laptop machines. Ideally use clients which support ZRTP, which will provide the best level of security.
1228 1236
 </p>
1229 1237
 </div>
1230
-<div id="outline-container-orgab3e4be" class="outline-4">
1231
-<h4 id="orgab3e4be">About ZRTP</h4>
1232
-<div class="outline-text-4" id="text-orgab3e4be">
1238
+<div id="outline-container-orga03b428" class="outline-4">
1239
+<h4 id="orga03b428">About ZRTP</h4>
1240
+<div class="outline-text-4" id="text-orga03b428">
1233 1241
 <p>
1234 1242
 <a href="https://jitsi.org/Documentation/ZrtpFAQ">ZRTP</a> appears to be the current best standard to end-to-end encrypted voice calls, combining good security with simplicity of use. When the initial cryptographic negotiation between phones is done at the start of a call a short authentication string (SAS) is calculated and displayed at both ends. To check that there isn't anyone intercepting the call and acting as a <i>man in the middle</i> - as <a href="https://en.wikipedia.org/wiki/Stingray_phone_tracker">stingray type devices</a> try to do - the short authentication string can be read out and verbally confirmed between the callers. If it's the same then you can be pretty confident that the call is secure.
1235 1243
 </p>
1236 1244
 </div>
1237 1245
 </div>
1238
-<div id="outline-container-org73123dc" class="outline-4">
1239
-<h4 id="org73123dc">Using with CSIPSimple</h4>
1240
-<div class="outline-text-4" id="text-org73123dc">
1246
+<div id="outline-container-orge39d408" class="outline-4">
1247
+<h4 id="orge39d408">Using with CSIPSimple</h4>
1248
+<div class="outline-text-4" id="text-orge39d408">
1241 1249
 <p>
1242 1250
 Add an account. Under <b>General Wizards</b> choose <b>Expert</b> and enter the following details:
1243 1251
 </p>
@@ -1293,9 +1301,9 @@ If everything is working the account should appear in green with a status of <b>
1293 1301
 </p>
1294 1302
 </div>
1295 1303
 </div>
1296
-<div id="outline-container-org75089a5" class="outline-4">
1297
-<h4 id="org75089a5">Using with Ring</h4>
1298
-<div class="outline-text-4" id="text-org75089a5">
1304
+<div id="outline-container-org6930b9a" class="outline-4">
1305
+<h4 id="org6930b9a">Using with Ring</h4>
1306
+<div class="outline-text-4" id="text-org6930b9a">
1299 1307
 <p>
1300 1308
 From the menu select <b>Manage accounts</b>.
1301 1309
 </p>
@@ -1348,9 +1356,9 @@ Select the <b>Security</b> tab. Under <b>SRTP Key Exchange</b> select <b>ZRTP</b
1348 1356
 </div>
1349 1357
 </div>
1350 1358
 
1351
-<div id="outline-container-org8ce4d68" class="outline-2">
1352
-<h2 id="org8ce4d68">RSS Reader</h2>
1353
-<div class="outline-text-2" id="text-org8ce4d68">
1359
+<div id="outline-container-org6900b88" class="outline-2">
1360
+<h2 id="org6900b88">RSS Reader</h2>
1361
+<div class="outline-text-2" id="text-org6900b88">
1354 1362
 <p>
1355 1363
 The way that RSS reading is set up on Freedombone gives you strong reading privacy. Not only is there onion routing between you and the server but also between the server and the source of the RSS feed. The only down side is that many RSS feeds are still http only, and so could be vulnerable to injection attacks, but it's expected that more of this will go to https in the foreseeable future due to a combination of growing recognition of security issues and systems like Let's Encrypt which make obtaining certificates much easier.
1356 1364
 </p>
@@ -1362,9 +1370,9 @@ The way that RSS reading is set up on Freedombone gives you strong reading priva
1362 1370
 </div>
1363 1371
 </div>
1364 1372
 
1365
-<div id="outline-container-orgdfd5ab2" class="outline-3">
1366
-<h3 id="orgdfd5ab2">Finding the onion address</h3>
1367
-<div class="outline-text-3" id="text-orgdfd5ab2">
1373
+<div id="outline-container-orgd6f9dd5" class="outline-3">
1374
+<h3 id="orgd6f9dd5">Finding the onion address</h3>
1375
+<div class="outline-text-3" id="text-orgd6f9dd5">
1368 1376
 <p>
1369 1377
 See the control panel for the RSS reader onion address.
1370 1378
 </p>
@@ -1389,9 +1397,9 @@ To set up the system open <a href="http://rss_reader_onion_address/">http://rss_
1389 1397
 </div>
1390 1398
 </div>
1391 1399
 
1392
-<div id="outline-container-org6ce5e98" class="outline-3">
1393
-<h3 id="org6ce5e98">On mobile</h3>
1394
-<div class="outline-text-3" id="text-org6ce5e98">
1400
+<div id="outline-container-orgf644c96" class="outline-3">
1401
+<h3 id="orgf644c96">On mobile</h3>
1402
+<div class="outline-text-3" id="text-orgf644c96">
1395 1403
 <p>
1396 1404
 To access the RSS reader from a mobile device you can install a Tor compatible browser such as OrFox. It will try to automatically change to the mobile version of the user interface. Remember to add the site to the NoScript whitelist, and you may also need to turn HTTPS Everywhere off.
1397 1405
 </p>
@@ -1403,9 +1411,9 @@ A note for the paranoid is that on mobile devices you get redirected to a differ
1403 1411
 </blockquote>
1404 1412
 </div>
1405 1413
 </div>
1406
-<div id="outline-container-org24f9b8e" class="outline-3">
1407
-<h3 id="org24f9b8e">With Emacs</h3>
1408
-<div class="outline-text-3" id="text-org24f9b8e">
1414
+<div id="outline-container-orgbbffda2" class="outline-3">
1415
+<h3 id="orgbbffda2">With Emacs</h3>
1416
+<div class="outline-text-3" id="text-orgbbffda2">
1409 1417
 <p>
1410 1418
 If you are an Emacs user then you can also read your RSS feeds via the <a href="https://github.com/dk87/avandu">Avandu</a> mode.
1411 1419
 </p>
@@ -1447,9 +1455,9 @@ And ensure that the Tor daemon is installed:
1447 1455
 </div>
1448 1456
 </div>
1449 1457
 </div>
1450
-<div id="outline-container-org85ca1e1" class="outline-2">
1451
-<h2 id="org85ca1e1">Git Projects</h2>
1452
-<div class="outline-text-2" id="text-org85ca1e1">
1458
+<div id="outline-container-org83b4f81" class="outline-2">
1459
+<h2 id="org83b4f81">Git Projects</h2>
1460
+<div class="outline-text-2" id="text-org83b4f81">
1453 1461
 <p>
1454 1462
 Github is ok, but it's proprietary and funded by venture capital. If you been around on the internet for long enough then you know how this story eventually works itself out - i.e. badly for the users. It's really only a question of time. If you're a software developer or do things which involve the Git version control system then it's a good idea to become accustomed to hosting your own repositories, before the inevitable Github shitstorm happens.
1455 1463
 </p>
@@ -1487,9 +1495,9 @@ This will stop any spam accounts being created by random strangers or bots. You
1487 1495
 </p>
1488 1496
 </div>
1489 1497
 </div>
1490
-<div id="outline-container-orge977acc" class="outline-2">
1491
-<h2 id="orge977acc">Adding or removing users</h2>
1492
-<div class="outline-text-2" id="text-orge977acc">
1498
+<div id="outline-container-org18a42fd" class="outline-2">
1499
+<h2 id="org18a42fd">Adding or removing users</h2>
1500
+<div class="outline-text-2" id="text-org18a42fd">
1493 1501
 <p>
1494 1502
 Log into the system with:
1495 1503
 </p>