Browse Source

Link to article about xmpp

Bob Mottram 8 years ago
parent
commit
c4c16b8d0d
2 changed files with 154 additions and 144 deletions
  1. 3
    1
      doc/EN/usage.org
  2. 151
    143
      website/EN/usage.html

+ 3
- 1
doc/EN/usage.org View File

386
 Select /Administrator controls/ then *IRC Menu* and then change the password. An empty password will allow anyone to log in, so you can have a globally accessible IRC system if you wish, although you might want to carefully consider whether that's wise.
386
 Select /Administrator controls/ then *IRC Menu* and then change the password. An empty password will allow anyone to log in, so you can have a globally accessible IRC system if you wish, although you might want to carefully consider whether that's wise.
387
 
387
 
388
 ** XMPP/Jabber
388
 ** XMPP/Jabber
389
+*** About XMPP
390
+A well written article on the state of XMPP and how it compares to other chat protocols [[https://gultsch.de/xmpp_2016.html][can be found here]].
389
 *** Using with Profanity
391
 *** Using with Profanity
390
 The [[http://profanity.im][Profanity]] shell based user interface and is perhaps the simplest way to use XMPP from a laptop. It's also a good way to ensure that your OTR keys are the same even when logging in from different laptops or devices, and it also means that if those devices later become compomised then there are no locally stored OTR keys to be found.
392
 The [[http://profanity.im][Profanity]] shell based user interface and is perhaps the simplest way to use XMPP from a laptop. It's also a good way to ensure that your OTR keys are the same even when logging in from different laptops or devices, and it also means that if those devices later become compomised then there are no locally stored OTR keys to be found.
391
 
393
 
462
 Click on *Advanced* and make sure that *Encryption required* and *Ignore SSL certificate errors* are checked.  Ignoring the certificate errors will allow you to use the self-signed certificate created earlier.  Then click *Done* and set your Jabber account and Empathy to *On*.
464
 Click on *Advanced* and make sure that *Encryption required* and *Ignore SSL certificate errors* are checked.  Ignoring the certificate errors will allow you to use the self-signed certificate created earlier.  Then click *Done* and set your Jabber account and Empathy to *On*.
463
 *** Using Tor Messenger
465
 *** Using Tor Messenger
464
 Tor Messenger is a messaging client which supports XMPP, and its onion routing enables you to protect the metadata of chat interactions to some extent by making it difficult for an adversary to know which server is talking to which. You can download Tor Messenger from [[https://torproject.org][torproject.org]] and the setup is pretty simple.
466
 Tor Messenger is a messaging client which supports XMPP, and its onion routing enables you to protect the metadata of chat interactions to some extent by making it difficult for an adversary to know which server is talking to which. You can download Tor Messenger from [[https://torproject.org][torproject.org]] and the setup is pretty simple.
465
-*** Using with Android
467
+*** Using with Android/Conversations
466
 Install [[https://f-droid.org/][F-Droid]]
468
 Install [[https://f-droid.org/][F-Droid]]
467
 
469
 
468
 Search for and install *Orbot* and *Conversations*.
470
 Search for and install *Orbot* and *Conversations*.

+ 151
- 143
website/EN/usage.html View File

3
 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
3
 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
4
 <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
4
 <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
5
 <head>
5
 <head>
6
-<!-- 2016-05-31 Tue 09:57 -->
6
+<!-- 2016-06-02 Thu 22:59 -->
7
 <meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
7
 <meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
8
 <meta name="viewport" content="width=device-width, initial-scale=1" />
8
 <meta name="viewport" content="width=device-width, initial-scale=1" />
9
 <title></title>
9
 <title></title>
253
 </colgroup>
253
 </colgroup>
254
 <tbody>
254
 <tbody>
255
 <tr>
255
 <tr>
256
-<td class="org-left"><a href="#orgd227ef1">Readme</a></td>
256
+<td class="org-left"><a href="#org0354421">Readme</a></td>
257
 </tr>
257
 </tr>
258
 
258
 
259
 <tr>
259
 <tr>
260
-<td class="org-left"><a href="#org4d41872">Improving ssh security</a></td>
260
+<td class="org-left"><a href="#org62a38b8">Improving ssh security</a></td>
261
 </tr>
261
 </tr>
262
 
262
 
263
 <tr>
263
 <tr>
264
-<td class="org-left"><a href="#org12befbb">Administrating the system via an onion address (Tor)</a></td>
264
+<td class="org-left"><a href="#orgd4d2732">Administrating the system via an onion address (Tor)</a></td>
265
 </tr>
265
 </tr>
266
 
266
 
267
 <tr>
267
 <tr>
273
 </tr>
273
 </tr>
274
 
274
 
275
 <tr>
275
 <tr>
276
-<td class="org-left"><a href="#orgbbef597">Syncing to the Cloud</a></td>
276
+<td class="org-left"><a href="#org45a063b">Syncing to the Cloud</a></td>
277
 </tr>
277
 </tr>
278
 
278
 
279
 <tr>
279
 <tr>
280
-<td class="org-left"><a href="#org2041e81">Play Music</a></td>
280
+<td class="org-left"><a href="#orgf6773cb">Play Music</a></td>
281
 </tr>
281
 </tr>
282
 
282
 
283
 <tr>
283
 <tr>
284
-<td class="org-left"><a href="#orge3622ef">Microblogging (GNU Social)</a></td>
284
+<td class="org-left"><a href="#orge4e772f">Microblogging (GNU Social)</a></td>
285
 </tr>
285
 </tr>
286
 
286
 
287
 <tr>
287
 <tr>
288
-<td class="org-left"><a href="#org8bb8ad1">Sharing things</a></td>
288
+<td class="org-left"><a href="#org1590af4">Sharing things</a></td>
289
 </tr>
289
 </tr>
290
 
290
 
291
 <tr>
291
 <tr>
292
-<td class="org-left"><a href="#orga4524b7">Social Network</a></td>
292
+<td class="org-left"><a href="#org6dab34b">Social Network</a></td>
293
 </tr>
293
 </tr>
294
 
294
 
295
 <tr>
295
 <tr>
296
-<td class="org-left"><a href="#org60367f7">Chat Services</a></td>
296
+<td class="org-left"><a href="#orgd6e5fe0">Chat Services</a></td>
297
 </tr>
297
 </tr>
298
 
298
 
299
 <tr>
299
 <tr>
300
-<td class="org-left"><a href="#org8ce4d68">RSS Reader</a></td>
300
+<td class="org-left"><a href="#org6900b88">RSS Reader</a></td>
301
 </tr>
301
 </tr>
302
 
302
 
303
 <tr>
303
 <tr>
304
-<td class="org-left"><a href="#org85ca1e1">Git Projects</a></td>
304
+<td class="org-left"><a href="#org83b4f81">Git Projects</a></td>
305
 </tr>
305
 </tr>
306
 
306
 
307
 <tr>
307
 <tr>
308
-<td class="org-left"><a href="#orge977acc">Adding or removing users</a></td>
308
+<td class="org-left"><a href="#org18a42fd">Adding or removing users</a></td>
309
 </tr>
309
 </tr>
310
 </tbody>
310
 </tbody>
311
 </table>
311
 </table>
312
 
312
 
313
-<div id="outline-container-orgd227ef1" class="outline-2">
314
-<h2 id="orgd227ef1">Readme</h2>
315
-<div class="outline-text-2" id="text-orgd227ef1">
313
+<div id="outline-container-org0354421" class="outline-2">
314
+<h2 id="org0354421">Readme</h2>
315
+<div class="outline-text-2" id="text-org0354421">
316
 <p>
316
 <p>
317
 After the system has installed a README file will be generated which contains passwords and some brief advice on using the installed systems. You can read this with the following commands:
317
 After the system has installed a README file will be generated which contains passwords and some brief advice on using the installed systems. You can read this with the following commands:
318
 </p>
318
 </p>
333
 </p>
333
 </p>
334
 </div>
334
 </div>
335
 </div>
335
 </div>
336
-<div id="outline-container-org4d41872" class="outline-2">
337
-<h2 id="org4d41872">Improving ssh security</h2>
338
-<div class="outline-text-2" id="text-org4d41872">
336
+<div id="outline-container-org62a38b8" class="outline-2">
337
+<h2 id="org62a38b8">Improving ssh security</h2>
338
+<div class="outline-text-2" id="text-org62a38b8">
339
 <p>
339
 <p>
340
 To improve ssh security you can generate an ssh key pair on your system and then upload the public key to the Freedombone.
340
 To improve ssh security you can generate an ssh key pair on your system and then upload the public key to the Freedombone.
341
 </p>
341
 </p>
388
 </div>
388
 </div>
389
 </div>
389
 </div>
390
 
390
 
391
-<div id="outline-container-org12befbb" class="outline-2">
392
-<h2 id="org12befbb">Administrating the system via an onion address (Tor)</h2>
393
-<div class="outline-text-2" id="text-org12befbb">
391
+<div id="outline-container-orgd4d2732" class="outline-2">
392
+<h2 id="orgd4d2732">Administrating the system via an onion address (Tor)</h2>
393
+<div class="outline-text-2" id="text-orgd4d2732">
394
 <p>
394
 <p>
395
 You can also access your system via the Tor system using an onion address. To find out what the onion address for ssh access is you can do the following:
395
 You can also access your system via the Tor system using an onion address. To find out what the onion address for ssh access is you can do the following:
396
 </p>
396
 </p>
436
 </p>
436
 </p>
437
 </div>
437
 </div>
438
 </div>
438
 </div>
439
-<div id="outline-container-orgbbef597" class="outline-2">
440
-<h2 id="orgbbef597">Syncing to the Cloud</h2>
441
-<div class="outline-text-2" id="text-orgbbef597">
439
+<div id="outline-container-org45a063b" class="outline-2">
440
+<h2 id="org45a063b">Syncing to the Cloud</h2>
441
+<div class="outline-text-2" id="text-org45a063b">
442
 <p>
442
 <p>
443
 <a href="https://syncthing.net/">Syncthing</a> provides a similar capability to proprietary systems such as <a href="http://www.drop-dropbox.com/">Dropbox</a>, and also is well suited for use with low power single board computers. You can have one or more directories which are synchronized across your various laptops/desktops/devices, and this makes it hard for you to ever lose important files. The manner in which the synchronization is done is pretty secure, such that it would be difficult for passive adversaries (mass surveillance, "<i>men in the middle</i>", etc) to know what files you're sharing. Of course, you don't necessarily need to be running a server in order to use Syncthing, but if you do have a server which is always running then there's always at least one place to synchronize your files to or from.
443
 <a href="https://syncthing.net/">Syncthing</a> provides a similar capability to proprietary systems such as <a href="http://www.drop-dropbox.com/">Dropbox</a>, and also is well suited for use with low power single board computers. You can have one or more directories which are synchronized across your various laptops/desktops/devices, and this makes it hard for you to ever lose important files. The manner in which the synchronization is done is pretty secure, such that it would be difficult for passive adversaries (mass surveillance, "<i>men in the middle</i>", etc) to know what files you're sharing. Of course, you don't necessarily need to be running a server in order to use Syncthing, but if you do have a server which is always running then there's always at least one place to synchronize your files to or from.
444
 </p>
444
 </p>
448
 </p>
448
 </p>
449
 </div>
449
 </div>
450
 
450
 
451
-<div id="outline-container-org2017748" class="outline-3">
452
-<h3 id="org2017748">On a laptop</h3>
453
-<div class="outline-text-3" id="text-org2017748">
451
+<div id="outline-container-org48189f6" class="outline-3">
452
+<h3 id="org48189f6">On a laptop</h3>
453
+<div class="outline-text-3" id="text-org48189f6">
454
 <p>
454
 <p>
455
 Install syncthing:
455
 Install syncthing:
456
 </p>
456
 </p>
505
 </p>
505
 </p>
506
 </div>
506
 </div>
507
 </div>
507
 </div>
508
-<div id="outline-container-orgdc7d76f" class="outline-3">
509
-<h3 id="orgdc7d76f">On Android</h3>
510
-<div class="outline-text-3" id="text-orgdc7d76f">
508
+<div id="outline-container-org5cde70e" class="outline-3">
509
+<h3 id="org5cde70e">On Android</h3>
510
+<div class="outline-text-3" id="text-org5cde70e">
511
 <p>
511
 <p>
512
 Install Syncthing and Connectbot from F-droid.
512
 Install Syncthing and Connectbot from F-droid.
513
 </p>
513
 </p>
538
 </div>
538
 </div>
539
 </div>
539
 </div>
540
 </div>
540
 </div>
541
-<div id="outline-container-org2041e81" class="outline-2">
542
-<h2 id="org2041e81">Play Music</h2>
543
-<div class="outline-text-2" id="text-org2041e81">
544
-</div><div id="outline-container-org0e10332" class="outline-3">
545
-<h3 id="org0e10332">With the DLNA service</h3>
546
-<div class="outline-text-3" id="text-org0e10332">
541
+<div id="outline-container-orgf6773cb" class="outline-2">
542
+<h2 id="orgf6773cb">Play Music</h2>
543
+<div class="outline-text-2" id="text-orgf6773cb">
544
+</div><div id="outline-container-org812b15f" class="outline-3">
545
+<h3 id="org812b15f">With the DLNA service</h3>
546
+<div class="outline-text-3" id="text-org812b15f">
547
 <p>
547
 <p>
548
 An easy way to play music on any mobile device in your home is to use the DLNA service. Copy your music into a directory called "<i>Music</i>" on a USB thumb drive and then insert it into from socket on the Beaglebone.
548
 An easy way to play music on any mobile device in your home is to use the DLNA service. Copy your music into a directory called "<i>Music</i>" on a USB thumb drive and then insert it into from socket on the Beaglebone.
549
 </p>
549
 </p>
584
 </div>
584
 </div>
585
 </div>
585
 </div>
586
 
586
 
587
-<div id="outline-container-orge3622ef" class="outline-2">
588
-<h2 id="orge3622ef">Microblogging (GNU Social)</h2>
589
-<div class="outline-text-2" id="text-orge3622ef">
587
+<div id="outline-container-orge4e772f" class="outline-2">
588
+<h2 id="orge4e772f">Microblogging (GNU Social)</h2>
589
+<div class="outline-text-2" id="text-orge4e772f">
590
 <p>
590
 <p>
591
 To log into your GNU Social site first obtain your username and password from the "microblogging" section of the readme file.
591
 To log into your GNU Social site first obtain your username and password from the "microblogging" section of the readme file.
592
 </p>
592
 </p>
615
 </div>
615
 </div>
616
 </div>
616
 </div>
617
 
617
 
618
-<div id="outline-container-org8bb8ad1" class="outline-2">
619
-<h2 id="org8bb8ad1">Sharing things</h2>
620
-<div class="outline-text-2" id="text-org8bb8ad1">
618
+<div id="outline-container-org1590af4" class="outline-2">
619
+<h2 id="org1590af4">Sharing things</h2>
620
+<div class="outline-text-2" id="text-org1590af4">
621
 <p>
621
 <p>
622
 If you have the GNU Social microblogging system installed then it's also possible to share things or services between groups or with particular users. This can be useful for sharing items within a family, club or in a local sharing economy. Sharing things freely, without money, reveals the social basis at the root of all economics which money normally conceals or obscures.
622
 If you have the GNU Social microblogging system installed then it's also possible to share things or services between groups or with particular users. This can be useful for sharing items within a family, club or in a local sharing economy. Sharing things freely, without money, reveals the social basis at the root of all economics which money normally conceals or obscures.
623
 </p>
623
 </p>
644
 </div>
644
 </div>
645
 </div>
645
 </div>
646
 
646
 
647
-<div id="outline-container-orga4524b7" class="outline-2">
648
-<h2 id="orga4524b7">Social Network</h2>
649
-<div class="outline-text-2" id="text-orga4524b7">
650
-</div><div id="outline-container-orgb69ddfa" class="outline-3">
651
-<h3 id="orgb69ddfa">Domains</h3>
652
-<div class="outline-text-3" id="text-orgb69ddfa">
647
+<div id="outline-container-org6dab34b" class="outline-2">
648
+<h2 id="org6dab34b">Social Network</h2>
649
+<div class="outline-text-2" id="text-org6dab34b">
650
+</div><div id="outline-container-org8fa1350" class="outline-3">
651
+<h3 id="org8fa1350">Domains</h3>
652
+<div class="outline-text-3" id="text-org8fa1350">
653
 <p>
653
 <p>
654
 Both Hubzilla and GNU Social try to obtain certificates automatically at the time of installation via Let's Encrypt. This will likely mean that in order for this to work you'll need to have obtained at least one "official" domain via a domain selling service, since Let's Encrypt mostly doesn't seem to work with free subdomains from sites such as freeDNS.
654
 Both Hubzilla and GNU Social try to obtain certificates automatically at the time of installation via Let's Encrypt. This will likely mean that in order for this to work you'll need to have obtained at least one "official" domain via a domain selling service, since Let's Encrypt mostly doesn't seem to work with free subdomains from sites such as freeDNS.
655
 </p>
655
 </p>
656
 </div>
656
 </div>
657
 </div>
657
 </div>
658
-<div id="outline-container-org9695337" class="outline-3">
659
-<h3 id="org9695337">Initial install</h3>
660
-<div class="outline-text-3" id="text-org9695337">
658
+<div id="outline-container-orgffa28d3" class="outline-3">
659
+<h3 id="orgffa28d3">Initial install</h3>
660
+<div class="outline-text-3" id="text-orgffa28d3">
661
 <p>
661
 <p>
662
 On first visiting your Hubzilla site you'll see the login screen. The first thing you need to do is <b>register</b> a new user. The first user on the system then becomes its administrator.
662
 On first visiting your Hubzilla site you'll see the login screen. The first thing you need to do is <b>register</b> a new user. The first user on the system then becomes its administrator.
663
 </p>
663
 </p>
671
 </div>
671
 </div>
672
 </div>
672
 </div>
673
 
673
 
674
-<div id="outline-container-org60367f7" class="outline-2">
675
-<h2 id="org60367f7">Chat Services</h2>
676
-<div class="outline-text-2" id="text-org60367f7">
677
-</div><div id="outline-container-orgba28c46" class="outline-3">
678
-<h3 id="orgba28c46">IRC</h3>
679
-<div class="outline-text-3" id="text-orgba28c46">
674
+<div id="outline-container-orgd6e5fe0" class="outline-2">
675
+<h2 id="orgd6e5fe0">Chat Services</h2>
676
+<div class="outline-text-2" id="text-orgd6e5fe0">
677
+</div><div id="outline-container-orgb13bb9a" class="outline-3">
678
+<h3 id="orgb13bb9a">IRC</h3>
679
+<div class="outline-text-3" id="text-orgb13bb9a">
680
 <p>
680
 <p>
681
 IRC is useful for multi-user chat. The classic use case is for software development where many engineers might need to coordinate their activities, but it's also useful for meetings, parties and general socialising.
681
 IRC is useful for multi-user chat. The classic use case is for software development where many engineers might need to coordinate their activities, but it's also useful for meetings, parties and general socialising.
682
 </p>
682
 </p>
683
 </div>
683
 </div>
684
-<div id="outline-container-orgddc9e41" class="outline-4">
685
-<h4 id="orgddc9e41">Irssi</h4>
686
-<div class="outline-text-4" id="text-orgddc9e41">
684
+<div id="outline-container-org5e99691" class="outline-4">
685
+<h4 id="org5e99691">Irssi</h4>
686
+<div class="outline-text-4" id="text-org5e99691">
687
 <p>
687
 <p>
688
 The easiest way to use irssi is to connect to your system, like this:
688
 The easiest way to use irssi is to connect to your system, like this:
689
 </p>
689
 </p>
699
 </p>
699
 </p>
700
 </div>
700
 </div>
701
 </div>
701
 </div>
702
-<div id="outline-container-org4090ef2" class="outline-4">
703
-<h4 id="org4090ef2">HexChat</h4>
704
-<div class="outline-text-4" id="text-org4090ef2">
702
+<div id="outline-container-org71fad07" class="outline-4">
703
+<h4 id="org71fad07">HexChat</h4>
704
+<div class="outline-text-4" id="text-org71fad07">
705
 <p>
705
 <p>
706
 HexChat (formerly XChat) is compatible with proxying via Tor and so provides the best security when connecting to your IRC server. It will allow you to connect to your IRC server's onion address.
706
 HexChat (formerly XChat) is compatible with proxying via Tor and so provides the best security when connecting to your IRC server. It will allow you to connect to your IRC server's onion address.
707
 </p>
707
 </p>
733
 <span class="org-string"># HexChat should not use the same circuit/exit server as other Tor applications.</span>
733
 <span class="org-string"># HexChat should not use the same circuit/exit server as other Tor applications.</span>
734
 <span class="org-string"># Otherwise activity in different applications could be correlated to the same</span>
734
 <span class="org-string"># Otherwise activity in different applications could be correlated to the same</span>
735
 <span class="org-string"># pseudonym. There is a way to prevent that.</span>
735
 <span class="org-string"># pseudonym. There is a way to prevent that.</span>
736
-<span class="org-string"># It is called stream isolation. We use IsolateSOCKSAuth, </span>
736
+<span class="org-string"># It is called stream isolation. We use IsolateSOCKSAuth,</span>
737
 <span class="org-string"># see https://www.torproject.org/docs/tor-manual-dev.html.en</span>
737
 <span class="org-string"># see https://www.torproject.org/docs/tor-manual-dev.html.en</span>
738
 <span class="org-string"># The password is actually not required, but it does not hurt either.</span>
738
 <span class="org-string"># The password is actually not required, but it does not hurt either.</span>
739
 <span class="org-string"># Will probable not hurt on Tor 0.2.2 and below.</span>
739
 <span class="org-string"># Will probable not hurt on Tor 0.2.2 and below.</span>
758
 <span class="org-string"># /set irc_hide_version ON</span>
758
 <span class="org-string"># /set irc_hide_version ON</span>
759
 <span class="org-string"># /set identd OFF &lt;-- NOT working on all HexChat-based IRC software.</span>
759
 <span class="org-string"># /set identd OFF &lt;-- NOT working on all HexChat-based IRC software.</span>
760
 <span class="org-string"># But still highly suggested to include &amp; use it.</span>
760
 <span class="org-string"># But still highly suggested to include &amp; use it.</span>
761
-<span class="org-string"># Probable not needed on UNIX, source: http://xchat.org/faq/#q21 </span>
761
+<span class="org-string"># Probable not needed on UNIX, source: http://xchat.org/faq/#q21</span>
762
 <span class="org-string">dcc_auto_chat = 0</span>
762
 <span class="org-string">dcc_auto_chat = 0</span>
763
 <span class="org-string">dcc_auto_resume = 0</span>
763
 <span class="org-string">dcc_auto_resume = 0</span>
764
 <span class="org-string">dcc_auto_send = 0</span>
764
 <span class="org-string">dcc_auto_send = 0</span>
774
 <span class="org-string"># -&gt; Quit: &lt;Deleted everything!&gt;</span>
774
 <span class="org-string"># -&gt; Quit: &lt;Deleted everything!&gt;</span>
775
 <span class="org-string"># -&gt; Leave channel: &lt;Deleted everything!&gt;</span>
775
 <span class="org-string"># -&gt; Leave channel: &lt;Deleted everything!&gt;</span>
776
 <span class="org-string"># -&gt; Away: &lt;Deleted everything!&gt;</span>
776
 <span class="org-string"># -&gt; Away: &lt;Deleted everything!&gt;</span>
777
-<span class="org-string">away_reason = </span>
778
-<span class="org-string">irc_part_reason = </span>
779
-<span class="org-string">irc_quit_reason = </span>
777
+<span class="org-string">away_reason =</span>
778
+<span class="org-string">irc_part_reason =</span>
779
+<span class="org-string">irc_quit_reason =</span>
780
 
780
 
781
 <span class="org-string"># By default, HexChat based IRC software uses your platform OS(Operating System)s</span>
781
 <span class="org-string"># By default, HexChat based IRC software uses your platform OS(Operating System)s</span>
782
 <span class="org-string"># login user name as your nickname, user name, real name.  To prevent leaking</span>
782
 <span class="org-string"># login user name as your nickname, user name, real name.  To prevent leaking</span>
879
 </div>
879
 </div>
880
 </div>
880
 </div>
881
 
881
 
882
-<div id="outline-container-org9484fef" class="outline-4">
883
-<h4 id="org9484fef">Emacs</h4>
884
-<div class="outline-text-4" id="text-org9484fef">
882
+<div id="outline-container-org27b5dc8" class="outline-4">
883
+<h4 id="org27b5dc8">Emacs</h4>
884
+<div class="outline-text-4" id="text-org27b5dc8">
885
 <p>
885
 <p>
886
 If you are an Emacs user then you can also connect to your IRC server via Emacs.
886
 If you are an Emacs user then you can also connect to your IRC server via Emacs.
887
 </p>
887
 </p>
914
 </div>
914
 </div>
915
 </div>
915
 </div>
916
 </div>
916
 </div>
917
-<div id="outline-container-org9b8b601" class="outline-4">
918
-<h4 id="org9b8b601">Changing or removing the IRC password</h4>
919
-<div class="outline-text-4" id="text-org9b8b601">
917
+<div id="outline-container-org5a97002" class="outline-4">
918
+<h4 id="org5a97002">Changing or removing the IRC password</h4>
919
+<div class="outline-text-4" id="text-org5a97002">
920
 <p>
920
 <p>
921
 By default the IRC server is set up to require a password for users to log in. The password is the same for all users. If you want to change or remove the password:
921
 By default the IRC server is set up to require a password for users to log in. The password is the same for all users. If you want to change or remove the password:
922
 </p>
922
 </p>
934
 </div>
934
 </div>
935
 </div>
935
 </div>
936
 
936
 
937
-<div id="outline-container-org177547a" class="outline-3">
938
-<h3 id="org177547a">XMPP/Jabber</h3>
939
-<div class="outline-text-3" id="text-org177547a">
940
-</div><div id="outline-container-org42a6bf4" class="outline-4">
941
-<h4 id="org42a6bf4">Using with Profanity</h4>
942
-<div class="outline-text-4" id="text-org42a6bf4">
937
+<div id="outline-container-org7291dac" class="outline-3">
938
+<h3 id="org7291dac">XMPP/Jabber</h3>
939
+<div class="outline-text-3" id="text-org7291dac">
940
+</div><div id="outline-container-orge2f4227" class="outline-4">
941
+<h4 id="orge2f4227">About XMPP</h4>
942
+<div class="outline-text-4" id="text-orge2f4227">
943
+<p>
944
+A well written article on the state of XMPP and how it compares to other chat protocols <a href="https://gultsch.de/xmpp_2016.html">can be found here</a>.
945
+</p>
946
+</div>
947
+</div>
948
+<div id="outline-container-orgc4a599b" class="outline-4">
949
+<h4 id="orgc4a599b">Using with Profanity</h4>
950
+<div class="outline-text-4" id="text-orgc4a599b">
943
 <p>
951
 <p>
944
 The <a href="http://profanity.im/">Profanity</a> shell based user interface and is perhaps the simplest way to use XMPP from a laptop. It's also a good way to ensure that your OTR keys are the same even when logging in from different laptops or devices, and it also means that if those devices later become compomised then there are no locally stored OTR keys to be found.
952
 The <a href="http://profanity.im/">Profanity</a> shell based user interface and is perhaps the simplest way to use XMPP from a laptop. It's also a good way to ensure that your OTR keys are the same even when logging in from different laptops or devices, and it also means that if those devices later become compomised then there are no locally stored OTR keys to be found.
945
 </p>
953
 </p>
1029
 </p>
1037
 </p>
1030
 </div>
1038
 </div>
1031
 </div>
1039
 </div>
1032
-<div id="outline-container-orga19db7e" class="outline-4">
1033
-<h4 id="orga19db7e">Using with Jitsi</h4>
1034
-<div class="outline-text-4" id="text-orga19db7e">
1040
+<div id="outline-container-org242aa31" class="outline-4">
1041
+<h4 id="org242aa31">Using with Jitsi</h4>
1042
+<div class="outline-text-4" id="text-org242aa31">
1035
 <p>
1043
 <p>
1036
 Jitsi is the recommended communications client for desktop or laptop systems, since it includes the <i>off the record</i> (OTR) feature which provides some additional security beyond the usual SSL certificates.
1044
 Jitsi is the recommended communications client for desktop or laptop systems, since it includes the <i>off the record</i> (OTR) feature which provides some additional security beyond the usual SSL certificates.
1037
 </p>
1045
 </p>
1061
 </p>
1069
 </p>
1062
 </div>
1070
 </div>
1063
 </div>
1071
 </div>
1064
-<div id="outline-container-org73d82a5" class="outline-4">
1065
-<h4 id="org73d82a5">Using with Ubuntu</h4>
1066
-<div class="outline-text-4" id="text-org73d82a5">
1072
+<div id="outline-container-org2648b57" class="outline-4">
1073
+<h4 id="org2648b57">Using with Ubuntu</h4>
1074
+<div class="outline-text-4" id="text-org2648b57">
1067
 <p>
1075
 <p>
1068
 The default XMPP client in Ubuntu is Empathy.  Using Empathy isn't as secure as using Jitsi, since it doesn't include the <i>off the record</i> feature, but since it's the default it's what many users will have easy access to.
1076
 The default XMPP client in Ubuntu is Empathy.  Using Empathy isn't as secure as using Jitsi, since it doesn't include the <i>off the record</i> feature, but since it's the default it's what many users will have easy access to.
1069
 </p>
1077
 </p>
1081
 </p>
1089
 </p>
1082
 </div>
1090
 </div>
1083
 </div>
1091
 </div>
1084
-<div id="outline-container-orgcb2c024" class="outline-4">
1085
-<h4 id="orgcb2c024">Using Tor Messenger</h4>
1086
-<div class="outline-text-4" id="text-orgcb2c024">
1092
+<div id="outline-container-org62cb3d2" class="outline-4">
1093
+<h4 id="org62cb3d2">Using Tor Messenger</h4>
1094
+<div class="outline-text-4" id="text-org62cb3d2">
1087
 <p>
1095
 <p>
1088
 Tor Messenger is a messaging client which supports XMPP, and its onion routing enables you to protect the metadata of chat interactions to some extent by making it difficult for an adversary to know which server is talking to which. You can download Tor Messenger from <a href="https://torproject.org/">torproject.org</a> and the setup is pretty simple.
1096
 Tor Messenger is a messaging client which supports XMPP, and its onion routing enables you to protect the metadata of chat interactions to some extent by making it difficult for an adversary to know which server is talking to which. You can download Tor Messenger from <a href="https://torproject.org/">torproject.org</a> and the setup is pretty simple.
1089
 </p>
1097
 </p>
1090
 </div>
1098
 </div>
1091
 </div>
1099
 </div>
1092
-<div id="outline-container-orga138d20" class="outline-4">
1093
-<h4 id="orga138d20">Using with Android</h4>
1094
-<div class="outline-text-4" id="text-orga138d20">
1100
+<div id="outline-container-org5e9c5d3" class="outline-4">
1101
+<h4 id="org5e9c5d3">Using with Android/Conversations</h4>
1102
+<div class="outline-text-4" id="text-org5e9c5d3">
1095
 <p>
1103
 <p>
1096
 Install <a href="https://f-droid.org/">F-Droid</a>
1104
 Install <a href="https://f-droid.org/">F-Droid</a>
1097
 </p>
1105
 </p>
1105
 </p>
1113
 </p>
1106
 
1114
 
1107
 <p>
1115
 <p>
1108
-From the menu select <b>Settings</b> then <b>Expert Settings</b>. Select <b>Connect via Tor</b> and depending on your situation you might also want to select <b>Don't save encrypted messages</b>.
1116
+From the menu select <b>Settings</b> then <b>Expert Settings</b>. Select <b>Connect via Tor</b> and depending on your situation you might also want to select <b>Don't save encrypted messages</b>. Also within expert settings select <b>Keep in foreground</b>. This will enable you to still receive notifications when your device is in standby mode with the screen turned off.
1109
 </p>
1117
 </p>
1110
 
1118
 
1111
 <p>
1119
 <p>
1122
 </div>
1130
 </div>
1123
 
1131
 
1124
 <p>
1132
 <p>
1125
-Then select <b>Next</b>. When chatting you can use the lock icon to encrypt your conversation. It's also going through Tor, so passive surveillance of the metadata should not be easy for an adversary.
1133
+Then select <b>Next</b>. When chatting you can use the lock icon to encrypt your conversation. OMEMO is the recommended type of encryption. It's also going through Tor, so passive surveillance of the metadata should not be easy for an adversary.
1126
 </p>
1134
 </p>
1127
 </div>
1135
 </div>
1128
 </div>
1136
 </div>
1129
 </div>
1137
 </div>
1130
-<div id="outline-container-orgcec97b0" class="outline-3">
1131
-<h3 id="orgcec97b0">Tox</h3>
1132
-<div class="outline-text-3" id="text-orgcec97b0">
1138
+<div id="outline-container-orgb955168" class="outline-3">
1139
+<h3 id="orgb955168">Tox</h3>
1140
+<div class="outline-text-3" id="text-orgb955168">
1133
 <p>
1141
 <p>
1134
 Tox is an encrypted peer-to-peer messaging system and so should work without Freedombone. It uses a system of nodes which act as a sort of directory service allowing users to find and connect to each other. The Tox node ID on the Freedombone can be found within the README within your home directory. If you have other users connect to your node then you will be able to continue chatting even when no other nodes are available.
1142
 Tox is an encrypted peer-to-peer messaging system and so should work without Freedombone. It uses a system of nodes which act as a sort of directory service allowing users to find and connect to each other. The Tox node ID on the Freedombone can be found within the README within your home directory. If you have other users connect to your node then you will be able to continue chatting even when no other nodes are available.
1135
 </p>
1143
 </p>
1136
 </div>
1144
 </div>
1137
-<div id="outline-container-orgdb3fd38" class="outline-4">
1138
-<h4 id="orgdb3fd38">Using the Toxic client</h4>
1139
-<div class="outline-text-4" id="text-orgdb3fd38">
1145
+<div id="outline-container-org13de011" class="outline-4">
1146
+<h4 id="org13de011">Using the Toxic client</h4>
1147
+<div class="outline-text-4" id="text-org13de011">
1140
 <p>
1148
 <p>
1141
 Log into your system with:
1149
 Log into your system with:
1142
 </p>
1150
 </p>
1160
 </div>
1168
 </div>
1161
 </div>
1169
 </div>
1162
 
1170
 
1163
-<div id="outline-container-org501d819" class="outline-3">
1164
-<h3 id="org501d819">VoIP (Voice and text chat)</h3>
1165
-<div class="outline-text-3" id="text-org501d819">
1166
-</div><div id="outline-container-orgdc57626" class="outline-4">
1167
-<h4 id="orgdc57626">Text chat</h4>
1168
-<div class="outline-text-4" id="text-orgdc57626">
1171
+<div id="outline-container-org9f26f68" class="outline-3">
1172
+<h3 id="org9f26f68">VoIP (Voice and text chat)</h3>
1173
+<div class="outline-text-3" id="text-org9f26f68">
1174
+</div><div id="outline-container-org7802763" class="outline-4">
1175
+<h4 id="org7802763">Text chat</h4>
1176
+<div class="outline-text-4" id="text-org7802763">
1169
 <p>
1177
 <p>
1170
 In addition to voice it is also possible to do text chat via mumble. The security of this is pretty good provided that you do it via Plumble and Orbot on mobile, but compared to other options such as XMPP/Conversations or Tox the security is not as good, since the mumble server currently doesn't support forward secrecy.
1178
 In addition to voice it is also possible to do text chat via mumble. The security of this is pretty good provided that you do it via Plumble and Orbot on mobile, but compared to other options such as XMPP/Conversations or Tox the security is not as good, since the mumble server currently doesn't support forward secrecy.
1171
 </p>
1179
 </p>
1172
 </div>
1180
 </div>
1173
 </div>
1181
 </div>
1174
-<div id="outline-container-org04ad172" class="outline-4">
1175
-<h4 id="org04ad172">Using with Ubuntu</h4>
1176
-<div class="outline-text-4" id="text-org04ad172">
1182
+<div id="outline-container-org3b2c825" class="outline-4">
1183
+<h4 id="org3b2c825">Using with Ubuntu</h4>
1184
+<div class="outline-text-4" id="text-org3b2c825">
1177
 <p>
1185
 <p>
1178
 Within the software center search for "mumble" and install the client then run it. Skip through the audio setup wizard.
1186
 Within the software center search for "mumble" and install the client then run it. Skip through the audio setup wizard.
1179
 </p>
1187
 </p>
1183
 </p>
1191
 </p>
1184
 </div>
1192
 </div>
1185
 </div>
1193
 </div>
1186
-<div id="outline-container-orgb4b2c69" class="outline-4">
1187
-<h4 id="orgb4b2c69">Using with Android</h4>
1188
-<div class="outline-text-4" id="text-orgb4b2c69">
1194
+<div id="outline-container-orga909223" class="outline-4">
1195
+<h4 id="orga909223">Using with Android</h4>
1196
+<div class="outline-text-4" id="text-orga909223">
1189
 <p>
1197
 <p>
1190
 Install <a href="https://f-droid.org/">F-Droid</a>
1198
 Install <a href="https://f-droid.org/">F-Droid</a>
1191
 </p>
1199
 </p>
1220
 </div>
1228
 </div>
1221
 </div>
1229
 </div>
1222
 </div>
1230
 </div>
1223
-<div id="outline-container-org1be673f" class="outline-3">
1224
-<h3 id="org1be673f">SIP phones</h3>
1225
-<div class="outline-text-3" id="text-org1be673f">
1231
+<div id="outline-container-org3b7d05d" class="outline-3">
1232
+<h3 id="org3b7d05d">SIP phones</h3>
1233
+<div class="outline-text-3" id="text-org3b7d05d">
1226
 <p>
1234
 <p>
1227
 Freedombone also supports SIP phones The username and domain is the same as for your email address, and the SIP password and extension number will appear within the README file in your home directory. Various SIP client options are available, such as CSipSimple on Android and Jitsi on desktop or laptop machines. Ideally use clients which support ZRTP, which will provide the best level of security.
1235
 Freedombone also supports SIP phones The username and domain is the same as for your email address, and the SIP password and extension number will appear within the README file in your home directory. Various SIP client options are available, such as CSipSimple on Android and Jitsi on desktop or laptop machines. Ideally use clients which support ZRTP, which will provide the best level of security.
1228
 </p>
1236
 </p>
1229
 </div>
1237
 </div>
1230
-<div id="outline-container-orgab3e4be" class="outline-4">
1231
-<h4 id="orgab3e4be">About ZRTP</h4>
1232
-<div class="outline-text-4" id="text-orgab3e4be">
1238
+<div id="outline-container-orga03b428" class="outline-4">
1239
+<h4 id="orga03b428">About ZRTP</h4>
1240
+<div class="outline-text-4" id="text-orga03b428">
1233
 <p>
1241
 <p>
1234
 <a href="https://jitsi.org/Documentation/ZrtpFAQ">ZRTP</a> appears to be the current best standard to end-to-end encrypted voice calls, combining good security with simplicity of use. When the initial cryptographic negotiation between phones is done at the start of a call a short authentication string (SAS) is calculated and displayed at both ends. To check that there isn't anyone intercepting the call and acting as a <i>man in the middle</i> - as <a href="https://en.wikipedia.org/wiki/Stingray_phone_tracker">stingray type devices</a> try to do - the short authentication string can be read out and verbally confirmed between the callers. If it's the same then you can be pretty confident that the call is secure.
1242
 <a href="https://jitsi.org/Documentation/ZrtpFAQ">ZRTP</a> appears to be the current best standard to end-to-end encrypted voice calls, combining good security with simplicity of use. When the initial cryptographic negotiation between phones is done at the start of a call a short authentication string (SAS) is calculated and displayed at both ends. To check that there isn't anyone intercepting the call and acting as a <i>man in the middle</i> - as <a href="https://en.wikipedia.org/wiki/Stingray_phone_tracker">stingray type devices</a> try to do - the short authentication string can be read out and verbally confirmed between the callers. If it's the same then you can be pretty confident that the call is secure.
1235
 </p>
1243
 </p>
1236
 </div>
1244
 </div>
1237
 </div>
1245
 </div>
1238
-<div id="outline-container-org73123dc" class="outline-4">
1239
-<h4 id="org73123dc">Using with CSIPSimple</h4>
1240
-<div class="outline-text-4" id="text-org73123dc">
1246
+<div id="outline-container-orge39d408" class="outline-4">
1247
+<h4 id="orge39d408">Using with CSIPSimple</h4>
1248
+<div class="outline-text-4" id="text-orge39d408">
1241
 <p>
1249
 <p>
1242
 Add an account. Under <b>General Wizards</b> choose <b>Expert</b> and enter the following details:
1250
 Add an account. Under <b>General Wizards</b> choose <b>Expert</b> and enter the following details:
1243
 </p>
1251
 </p>
1293
 </p>
1301
 </p>
1294
 </div>
1302
 </div>
1295
 </div>
1303
 </div>
1296
-<div id="outline-container-org75089a5" class="outline-4">
1297
-<h4 id="org75089a5">Using with Ring</h4>
1298
-<div class="outline-text-4" id="text-org75089a5">
1304
+<div id="outline-container-org6930b9a" class="outline-4">
1305
+<h4 id="org6930b9a">Using with Ring</h4>
1306
+<div class="outline-text-4" id="text-org6930b9a">
1299
 <p>
1307
 <p>
1300
 From the menu select <b>Manage accounts</b>.
1308
 From the menu select <b>Manage accounts</b>.
1301
 </p>
1309
 </p>
1348
 </div>
1356
 </div>
1349
 </div>
1357
 </div>
1350
 
1358
 
1351
-<div id="outline-container-org8ce4d68" class="outline-2">
1352
-<h2 id="org8ce4d68">RSS Reader</h2>
1353
-<div class="outline-text-2" id="text-org8ce4d68">
1359
+<div id="outline-container-org6900b88" class="outline-2">
1360
+<h2 id="org6900b88">RSS Reader</h2>
1361
+<div class="outline-text-2" id="text-org6900b88">
1354
 <p>
1362
 <p>
1355
 The way that RSS reading is set up on Freedombone gives you strong reading privacy. Not only is there onion routing between you and the server but also between the server and the source of the RSS feed. The only down side is that many RSS feeds are still http only, and so could be vulnerable to injection attacks, but it's expected that more of this will go to https in the foreseeable future due to a combination of growing recognition of security issues and systems like Let's Encrypt which make obtaining certificates much easier.
1363
 The way that RSS reading is set up on Freedombone gives you strong reading privacy. Not only is there onion routing between you and the server but also between the server and the source of the RSS feed. The only down side is that many RSS feeds are still http only, and so could be vulnerable to injection attacks, but it's expected that more of this will go to https in the foreseeable future due to a combination of growing recognition of security issues and systems like Let's Encrypt which make obtaining certificates much easier.
1356
 </p>
1364
 </p>
1362
 </div>
1370
 </div>
1363
 </div>
1371
 </div>
1364
 
1372
 
1365
-<div id="outline-container-orgdfd5ab2" class="outline-3">
1366
-<h3 id="orgdfd5ab2">Finding the onion address</h3>
1367
-<div class="outline-text-3" id="text-orgdfd5ab2">
1373
+<div id="outline-container-orgd6f9dd5" class="outline-3">
1374
+<h3 id="orgd6f9dd5">Finding the onion address</h3>
1375
+<div class="outline-text-3" id="text-orgd6f9dd5">
1368
 <p>
1376
 <p>
1369
 See the control panel for the RSS reader onion address.
1377
 See the control panel for the RSS reader onion address.
1370
 </p>
1378
 </p>
1389
 </div>
1397
 </div>
1390
 </div>
1398
 </div>
1391
 
1399
 
1392
-<div id="outline-container-org6ce5e98" class="outline-3">
1393
-<h3 id="org6ce5e98">On mobile</h3>
1394
-<div class="outline-text-3" id="text-org6ce5e98">
1400
+<div id="outline-container-orgf644c96" class="outline-3">
1401
+<h3 id="orgf644c96">On mobile</h3>
1402
+<div class="outline-text-3" id="text-orgf644c96">
1395
 <p>
1403
 <p>
1396
 To access the RSS reader from a mobile device you can install a Tor compatible browser such as OrFox. It will try to automatically change to the mobile version of the user interface. Remember to add the site to the NoScript whitelist, and you may also need to turn HTTPS Everywhere off.
1404
 To access the RSS reader from a mobile device you can install a Tor compatible browser such as OrFox. It will try to automatically change to the mobile version of the user interface. Remember to add the site to the NoScript whitelist, and you may also need to turn HTTPS Everywhere off.
1397
 </p>
1405
 </p>
1403
 </blockquote>
1411
 </blockquote>
1404
 </div>
1412
 </div>
1405
 </div>
1413
 </div>
1406
-<div id="outline-container-org24f9b8e" class="outline-3">
1407
-<h3 id="org24f9b8e">With Emacs</h3>
1408
-<div class="outline-text-3" id="text-org24f9b8e">
1414
+<div id="outline-container-orgbbffda2" class="outline-3">
1415
+<h3 id="orgbbffda2">With Emacs</h3>
1416
+<div class="outline-text-3" id="text-orgbbffda2">
1409
 <p>
1417
 <p>
1410
 If you are an Emacs user then you can also read your RSS feeds via the <a href="https://github.com/dk87/avandu">Avandu</a> mode.
1418
 If you are an Emacs user then you can also read your RSS feeds via the <a href="https://github.com/dk87/avandu">Avandu</a> mode.
1411
 </p>
1419
 </p>
1447
 </div>
1455
 </div>
1448
 </div>
1456
 </div>
1449
 </div>
1457
 </div>
1450
-<div id="outline-container-org85ca1e1" class="outline-2">
1451
-<h2 id="org85ca1e1">Git Projects</h2>
1452
-<div class="outline-text-2" id="text-org85ca1e1">
1458
+<div id="outline-container-org83b4f81" class="outline-2">
1459
+<h2 id="org83b4f81">Git Projects</h2>
1460
+<div class="outline-text-2" id="text-org83b4f81">
1453
 <p>
1461
 <p>
1454
 Github is ok, but it's proprietary and funded by venture capital. If you been around on the internet for long enough then you know how this story eventually works itself out - i.e. badly for the users. It's really only a question of time. If you're a software developer or do things which involve the Git version control system then it's a good idea to become accustomed to hosting your own repositories, before the inevitable Github shitstorm happens.
1462
 Github is ok, but it's proprietary and funded by venture capital. If you been around on the internet for long enough then you know how this story eventually works itself out - i.e. badly for the users. It's really only a question of time. If you're a software developer or do things which involve the Git version control system then it's a good idea to become accustomed to hosting your own repositories, before the inevitable Github shitstorm happens.
1455
 </p>
1463
 </p>
1487
 </p>
1495
 </p>
1488
 </div>
1496
 </div>
1489
 </div>
1497
 </div>
1490
-<div id="outline-container-orge977acc" class="outline-2">
1491
-<h2 id="orge977acc">Adding or removing users</h2>
1492
-<div class="outline-text-2" id="text-orge977acc">
1498
+<div id="outline-container-org18a42fd" class="outline-2">
1499
+<h2 id="org18a42fd">Adding or removing users</h2>
1500
+<div class="outline-text-2" id="text-org18a42fd">
1493
 <p>
1501
 <p>
1494
 Log into the system with:
1502
 Log into the system with:
1495
 </p>
1503
 </p>