Hi, I’ve been self-censoring what I write by email for years. But over the past year, with ever more details of surveillance being proven as fact and not just conspiracy theory, that became more serious: I no longer see email as safe, and with that, email is lost for me as a medium for personal communication. If I want to talk privately, I don’t use email. You might have noticed that since then I’ve been writing fewer and fewer non-public emails. This started impeding my life, when the critical law reporter at groklaw stopped publishing, because the owner did not consider sending information via email as safe anymore. Now I self-censor what I write, to whom I write, and when I write. There is now no shield from forced exposure.[fn:1] But I have one haven left: Instead of writing private stuff by email, I’m communicating more and more via Freenet, especially with darknet contacts: People I know personally. And I’d like to do that with you, too. The reason is that Freenet Darknet messages hide even the information that we have a conversation at all: I can finally send completely invisible messages. This gives me the confidentiality back which allows talking freely. Talking without self-censoring every word I write. And I would like to have that freedom when talking to you online. So I would be very happy if you’d install Freenet and connect to me over Darknet. * Install Freenet To install Freenet, just go to https://freenetproject.org and click the green install-button Then click through the installer as usual. After that your browser should open and show the Freenet Setup Wizard. * The Wizard In the wizard, choose "Connect only to friends: (high security)". For the following questions, just use the default or the option called "normal". You can always revisit the wizard at http://127.0.0.1:8888/wizard/ * Connect with me Now go to the page “connect to a friend”: http://127.0.0.1:8888/addfriend/ There simply paste the following into the empty text field below the blurp of explanation: identity=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX lastGoodVersion==XXXXXXXXXXXXXXXXXXXXXXX location==XXXXXXXXXXXXXXXXXXXXXXXX myName=XXXXXXX opennet=XXXXX sig=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX sigP256=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX version==XXXXXXXXXXXXXXXXXXXXXXX ark.number=XXXX ark.pubURI=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX auth.negTypes==XXXXXX dsaGroup.g=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX dsaGroup.p=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX dsaGroup.q=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX dsaPubKey.y=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX ecdsa.P256.pub=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX physical.udp==XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX End Put my name in the description just above the “Add” button and leave everything else at default. Then send me an email[fn:2] with the text you find at the URL http://127.0.0.1:8888/friends/myref.txt Once I copy that text into my own addfriends page, our computers will connect over Freenet. (no need to babysit Freenet for this: Just let it run when you’re online and as soon as I add you, our Computers will connect over Freenet. Please give me a few days: With the PhD and the two little ones I’m often no longer able to answer email daily, but I see them) And that’s it. We’re connected. In the rest of this mail, I’ll describe what you can do with Freenet. Welcome to Freenet, where no one can watch you read! I hope we will connect soon! Best wishes, Arne [fn:1]: Groklaw: Forced exposure: http://www.groklaw.net/article.php?story=20130818120421175 [fn:2]: Naturally it would be better to send the freenet addfriend text via encrypted emails with a full chain of trusted signatures. But for the basic goal of confidential communication that is not necessary. We can check sometime later, whether the text we exchanged was changed, so if someone wants to eavesdrop, we can detect that. And we would have proof, which would make for the next great story for political magazines like Panorama - which would help a lot at fighting surveillance on the long term (so it’s unlikely that people who want surveillance will dare to do that). Example: http://daserste.ndr.de/panorama/aktuell/NSA-targets-the-privacy-conscious,nsa230.html * Using Freenet ** Talk with me over Freenet Once we are connected, you can send me confidential messages by going on the Friends page and clicking my name. Friends-page: http://127.0.0.1:8888/friends/ That page lists all the people you are connected to. You can also tick the checkbox for multiple people and then use the drop down list “-- Select Action --” and select “Send N2NTM to selected peers”. A N2NTM is a “node to node text message”. You can see all messages you received on the messages page: Messages-page: http://127.0.0.1:8888/alerts/ These messages are invisible to the outside. ** Send me files over Freenet If you want to send me bigger files, you can upload them from the upload page: Upload-page: http://127.0.0.1:8888/insertfile/ When they finish uploading, just go to the list of Uploads, select the files you want to share with me and click the button “Recommend files to friends”. Then select my name and click the “Recommend” button at the bottom. List of Uploads: http://127.0.0.1:8888/uploads/ You can also do the same for downloads, so it’s easy to pass on files. The files you upload are stored encrypted in Freenet and can only be found by people who have the Link to the file. Like a filehoster, but it is encrypted and completely decentralized. ** Advanced Freenet Usage What I show here aren’t all the features of Freenet. Not by a long shot. But it’s enough to provide confidential communication between friends: I can talk to you without self-censoring every single thought. If you want to explore further features of Freenet, there are three central features: - Bookmarks to have hidden websites which inform you when they are updated. - Your own website in Freenet. - Anonymous Discussions with a Web of Trust to prevent spam. *** Bookmarks Bookmarks are easy. Just go to the main freenet page and click the [Edit] link above the bookmarks. It gets you to the bookmarks editor for changing and sharing bookmarks. Bookmark-editor: http://127.0.0.1:8888/bookmarkEditor/ *** Websites in Freenet Websites in Freenet are also simple. To get a basic website, just install the ShareWiki plugin, enter text, click publish and once the upload finished, send the URL to your friends by clicking “share” in the list of uploads. With this you can publish in Freenet: Your friends will know that it’s your site, but no one else. Configure Plugins: http://127.0.0.1:8888/plugins/ The key for sharewiki to add as “Plugin from Freenet”: CHK@aCQTjPQI3uGsahMiTuddwJ51UJypA5Mqg4y0tf1VqXQ,eEkO3uge6IJ1QcrT5KGlJ1R6kEcMhQV4rXfv6NzoL5o,AAMC--8/ShareWiki-b17.jar (note: ignore the search box on the main page. It’s broken) *** Anonymous Discussions Anonymous Discussions are somewhat different from the other features, because they require the Web of Trust, and that is very heavyweight. If you want to keep the resource consumption of Freenet low, avoid the anonymous discussion platforms. You will see people recommend it - even me. It is cool, but you should only enable it, if you have a computer which always runs and for which it does not matter when it runs at high load. If you only want confidential communication with Friends, just avoid the Web of Trust for now. If you stick to the basic features (darknet messages, uploads, downloads bookmarks), Freenet will require few resources and little bandwidth. For a low-spec computer or a laptop, avoid the Web of Trust and anonymous discussions: They are really cool, but require lots of resources. If you value truly anonymous discussions higher than keeping the load on your computer low, or if you have a computer which is always running, have a look at the Freenet Social Networking guide. It shows you how to setup and use the social features of Freenet. Freenet Social Networking Guide: http://freesocial.draketo.de Have fun in Freenet! * Troubleshooting ** High resource usage If Freenet makes your fans run at full speed and your disk cackle, you can fix that with three steps: - Check whether you use the *Web of Trust* - and *disable it*. See the plugins page: http://127.0.0.1:8888/plugins/ - Run *pure Darknet* (disable Opennet) or *reduce your bandwidth limits*. See the security levels ( http://127.0.0.1:8888/seclevels/ ) and the upload and download bandwidth limit in the core settings ( http://127.0.0.1:8888/config/node - note that the unit is Bytes per second: give at least 10000, otherwise Freenet will not work). - Use a *smaller store*. Reduce Freenet datastore size in the core settings. One GiB is enough (http://127.0.0.1:8888/config/node ). * Technical details - My noderef should always allow you to connect with me, even when my IP changes, because I added a dynamic DNS address as IP address override in the advanced node configuration: http://127.0.0.1:8888/config/node?fproxyAdvancedMode=2 Naturally you can do the same. You can get a dynamic DNS address from http://freedns.afraid.org [fn:1]: Groklaw: Forced exposure: http://www.groklaw.net/article.php?story=20130818120421175 [fn:2]: Naturally it would be better to send the freenet addfriend text via encrypted emails with a full chain of trusted signatures. But for the basic goal of confidential communication that is not necessary. We can check sometime later, whether the text we exchanged was changed, so if someone wants to eavesdrop, we can detect that. And we would have proof, which would make for the next great story for political magazines like Panorama - which would help a lot at fighting surveillance on the long term (so it’s unlikely that people who want surveillance will dare to do that). Example: http://daserste.ndr.de/panorama/aktuell/NSA-targets-the-privacy-conscious,nsa230.html