This commit is contained in:
Bob Mottram 2016-04-05 21:50:30 +01:00
parent a3e1c8b22c
commit 4bb01d598b
6 changed files with 76 additions and 52 deletions

View File

@ -3,7 +3,7 @@
The Freedombone system can be installed onto a Beaglebone Black, or any system capable of running Debian Jessie, and allows you to host your own email and web services. With Freedombone you can enjoy true freedom and independence in the cloud. It comes in a variety of flavours. The Freedombone system can be installed onto a Beaglebone Black, or any system capable of running Debian Jessie, and allows you to host your own email and web services. With Freedombone you can enjoy true freedom and independence in the cloud. It comes in a variety of flavours.
- **Full install**: Installs eveything - **Full install**: Installs eveything
- **Mailbox**: An email server with GPG encryption and mailing list - **Mailbox**: An email server with GPG encryption
- **Cloud**: Share files, maintain a calendar and collaborate on document editing - **Cloud**: Share files, maintain a calendar and collaborate on document editing
- **Social**: Social networking with Hubzilla and GNU Social - **Social**: Social networking with Hubzilla and GNU Social
- **Media**: Runs media services such as DLNA to play music or videos on your devices - **Media**: Runs media services such as DLNA to play music or videos on your devices

View File

@ -204,7 +204,7 @@ Select the *IRC Menu* and then change the password. An empty password will allow
** XMPP/Jabber ** XMPP/Jabber
*** Using with Profanity *** Using with Profanity
The [[http://profanity.im][Profanity]] shell based user interface and is perhaps the simplest way to use XMPP from a laptop. It's also a good way to ensure that your [[between different devices ][OTR keys]] are the same even when logging in from different laptops or devices, and it also means that if those devices later become compomised then there are no locally stored OTR keys to be found. The [[http://profanity.im][Profanity]] shell based user interface and is perhaps the simplest way to use XMPP from a laptop. It's also a good way to ensure that your OTR keys are the same even when logging in from different laptops or devices, and it also means that if those devices later become compomised then there are no locally stored OTR keys to be found.
#+BEGIN_SRC bash #+BEGIN_SRC bash
ssh username@domain -p 2222 ssh username@domain -p 2222

View File

@ -22,7 +22,7 @@ Freedombone may be installed either in its entirety or as different variants wit
<center> <center>
<table style="width:80%; border:0"> <table style="width:80%; border:0">
<tr> <tr>
<td><center><b>Mailbox</b><br>An email server with GPG encryption and mailing list</center></td> <td><center><b>Mailbox</b><br>An email server with GPG encryption</center></td>
<td><center><b>Cloud</b><br>Share files, maintain a calendar and collaborate on document editing</center></td> <td><center><b>Cloud</b><br>Share files, maintain a calendar and collaborate on document editing</center></td>
</tr> </tr>
<tr> <tr>

Binary file not shown.

View File

@ -3,7 +3,7 @@
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"> <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
<head> <head>
<!-- 2016-04-02 Sat 16:53 --> <!-- 2016-04-05 Tue 21:49 -->
<meta http-equiv="Content-Type" content="text/html;charset=utf-8" /> <meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1" /> <meta name="viewport" content="width=device-width, initial-scale=1" />
<title></title> <title></title>
@ -565,21 +565,45 @@ Check <b>use SSL</b> and <b>accept invalid SSL certificate</b>.
Enter <b>#freedombone</b> as the channel name. Enter <b>#freedombone</b> as the channel name.
</p> </p>
<p>
Enter the password which can be found from the IRC menu of the <b>control panel</b>.
</p>
<p> <p>
Click <b>close</b> and then <b>connect</b>. Click <b>close</b> and then <b>connect</b>.
</p> </p>
</div> </div>
</div> </div>
<div id="outline-container-orgheadline21" class="outline-4">
<h4 id="orgheadline21">Changing or removing the IRC password</h4>
<div class="outline-text-4" id="text-orgheadline21">
<p>
By default the IRC server is set up to require a password for users to log in. The password is the same for all users. If you want to change or remove the password:
</p>
<div class="org-src-container">
<pre class="src src-bash">ssh myusername@mydomain -p 2222
sudo control
</pre>
</div>
<p>
Select the <b>IRC Menu</b> and then change the password. An empty password will allow anyone to log in, so you can have a globally accessible IRC system if you wish, although you might want to carefully consider whether that's wise.
</p>
</div>
</div>
</div> </div>
<div id="outline-container-orgheadline26" class="outline-3"> <div id="outline-container-orgheadline27" class="outline-3">
<h3 id="orgheadline26">XMPP/Jabber</h3> <h3 id="orgheadline27">XMPP/Jabber</h3>
<div class="outline-text-3" id="text-orgheadline26"> <div class="outline-text-3" id="text-orgheadline27">
</div><div id="outline-container-orgheadline21" class="outline-4"> </div><div id="outline-container-orgheadline22" class="outline-4">
<h4 id="orgheadline21">Using with Profanity</h4> <h4 id="orgheadline22">Using with Profanity</h4>
<div class="outline-text-4" id="text-orgheadline21"> <div class="outline-text-4" id="text-orgheadline22">
<p> <p>
The <a href="http://profanity.im/">Profanity</a> shell based user interface and is perhaps the simplest way to use XMPP from a laptop. The <a href="http://profanity.im/">Profanity</a> shell based user interface and is perhaps the simplest way to use XMPP from a laptop. It's also a good way to ensure that your OTR keys are the same even when logging in from different laptops or devices, and it also means that if those devices later become compomised then there are no locally stored OTR keys to be found.
</p> </p>
<div class="org-src-container"> <div class="org-src-container">
@ -667,9 +691,9 @@ When accessed via the user control panel the client is automatically routed thro
</p> </p>
</div> </div>
</div> </div>
<div id="outline-container-orgheadline22" class="outline-4"> <div id="outline-container-orgheadline23" class="outline-4">
<h4 id="orgheadline22">Using with Jitsi</h4> <h4 id="orgheadline23">Using with Jitsi</h4>
<div class="outline-text-4" id="text-orgheadline22"> <div class="outline-text-4" id="text-orgheadline23">
<p> <p>
Jitsi is the recommended communications client for desktop or laptop systems, since it includes the <i>off the record</i> (OTR) feature which provides some additional security beyond the usual SSL certificates. Jitsi is the recommended communications client for desktop or laptop systems, since it includes the <i>off the record</i> (OTR) feature which provides some additional security beyond the usual SSL certificates.
</p> </p>
@ -699,9 +723,9 @@ You can also <a href="https://www.youtube.com/watch?v=vgx7VSrDGjk">see this vide
</p> </p>
</div> </div>
</div> </div>
<div id="outline-container-orgheadline23" class="outline-4"> <div id="outline-container-orgheadline24" class="outline-4">
<h4 id="orgheadline23">Using with Ubuntu</h4> <h4 id="orgheadline24">Using with Ubuntu</h4>
<div class="outline-text-4" id="text-orgheadline23"> <div class="outline-text-4" id="text-orgheadline24">
<p> <p>
The default XMPP client in Ubuntu is Empathy. Using Empathy isn't as secure as using Jitsi, since it doesn't include the <i>off the record</i> feature, but since it's the default it's what many users will have easy access to. The default XMPP client in Ubuntu is Empathy. Using Empathy isn't as secure as using Jitsi, since it doesn't include the <i>off the record</i> feature, but since it's the default it's what many users will have easy access to.
</p> </p>
@ -719,17 +743,17 @@ Click on <b>Advanced</b> and make sure that <b>Encryption required</b> and <b>Ig
</p> </p>
</div> </div>
</div> </div>
<div id="outline-container-orgheadline24" class="outline-4"> <div id="outline-container-orgheadline25" class="outline-4">
<h4 id="orgheadline24">Using Tor Messenger</h4> <h4 id="orgheadline25">Using Tor Messenger</h4>
<div class="outline-text-4" id="text-orgheadline24"> <div class="outline-text-4" id="text-orgheadline25">
<p> <p>
Tor Messenger is a messaging client which supports XMPP, and its onion routing enables you to protect the metadata of chat interactions to some extent by making it difficult for an adversary to know which server is talking to which. You can download Tor Messenger from <a href="https://torproject.org/">torproject.org</a> and the setup is pretty simple. Tor Messenger is a messaging client which supports XMPP, and its onion routing enables you to protect the metadata of chat interactions to some extent by making it difficult for an adversary to know which server is talking to which. You can download Tor Messenger from <a href="https://torproject.org/">torproject.org</a> and the setup is pretty simple.
</p> </p>
</div> </div>
</div> </div>
<div id="outline-container-orgheadline25" class="outline-4"> <div id="outline-container-orgheadline26" class="outline-4">
<h4 id="orgheadline25">Using with Android</h4> <h4 id="orgheadline26">Using with Android</h4>
<div class="outline-text-4" id="text-orgheadline25"> <div class="outline-text-4" id="text-orgheadline26">
<p> <p>
Install <a href="https://f-droid.org/">F-Droid</a> Install <a href="https://f-droid.org/">F-Droid</a>
</p> </p>
@ -765,16 +789,16 @@ Then select <b>Next</b>. When chatting you can use the lock icon to encrypt your
</div> </div>
</div> </div>
</div> </div>
<div id="outline-container-orgheadline27" class="outline-3"> <div id="outline-container-orgheadline28" class="outline-3">
<h3 id="orgheadline27">Tox</h3> <h3 id="orgheadline28">Tox</h3>
<div class="outline-text-3" id="text-orgheadline27"> <div class="outline-text-3" id="text-orgheadline28">
<p> <p>
Tox is an encrypted peer-to-peer messaging system and so should work without Freedombone. It uses a system of nodes which act as a sort of directory service allowing users to find and connect to each other. The Tox node ID on the Freedombone can be found within the README within your home directory. If you have other users connect to your node then you will be able to continue chatting even when no other nodes are available. Tox is an encrypted peer-to-peer messaging system and so should work without Freedombone. It uses a system of nodes which act as a sort of directory service allowing users to find and connect to each other. The Tox node ID on the Freedombone can be found within the README within your home directory. If you have other users connect to your node then you will be able to continue chatting even when no other nodes are available.
</p> </p>
</div> </div>
<div id="outline-container-orgheadline28" class="outline-4"> <div id="outline-container-orgheadline29" class="outline-4">
<h4 id="orgheadline28">Using the Toxic client</h4> <h4 id="orgheadline29">Using the Toxic client</h4>
<div class="outline-text-4" id="text-orgheadline28"> <div class="outline-text-4" id="text-orgheadline29">
<p> <p>
Log into your system with: Log into your system with:
</p> </p>
@ -798,12 +822,12 @@ Then from the menu select <b>Tox Chat</b>. Tox is encrypted by default and also
</div> </div>
</div> </div>
<div id="outline-container-orgheadline31" class="outline-3"> <div id="outline-container-orgheadline32" class="outline-3">
<h3 id="orgheadline31">VoIP (Voice chat)</h3> <h3 id="orgheadline32">VoIP (Voice chat)</h3>
<div class="outline-text-3" id="text-orgheadline31"> <div class="outline-text-3" id="text-orgheadline32">
</div><div id="outline-container-orgheadline29" class="outline-4"> </div><div id="outline-container-orgheadline30" class="outline-4">
<h4 id="orgheadline29">Using with Ubuntu</h4> <h4 id="orgheadline30">Using with Ubuntu</h4>
<div class="outline-text-4" id="text-orgheadline29"> <div class="outline-text-4" id="text-orgheadline30">
<p> <p>
Within the software center search for "mumble" and install the client then run it. Skip through the audio setup wizard. Within the software center search for "mumble" and install the client then run it. Skip through the audio setup wizard.
</p> </p>
@ -817,9 +841,9 @@ Click on "add new" to add a new server and enter the default domain name for the
</p> </p>
</div> </div>
</div> </div>
<div id="outline-container-orgheadline30" class="outline-4"> <div id="outline-container-orgheadline31" class="outline-4">
<h4 id="orgheadline30">Using with Android</h4> <h4 id="orgheadline31">Using with Android</h4>
<div class="outline-text-4" id="text-orgheadline30"> <div class="outline-text-4" id="text-orgheadline31">
<p> <p>
Install <a href="https://f-droid.org/">F-Droid</a> Install <a href="https://f-droid.org/">F-Droid</a>
</p> </p>
@ -846,24 +870,24 @@ Selecting the server by pressing on it then connects you to the server so that y
</div> </div>
</div> </div>
</div> </div>
<div id="outline-container-orgheadline32" class="outline-3"> <div id="outline-container-orgheadline33" class="outline-3">
<h3 id="orgheadline32">SIP phones</h3> <h3 id="orgheadline33">SIP phones</h3>
<div class="outline-text-3" id="text-orgheadline32"> <div class="outline-text-3" id="text-orgheadline33">
<p> <p>
Freedombone also supports SIP phones The username and domain is the same as for your email address, and the SIP password and extension number will appear within the README file in your home directory. Various SIP client options are available, such as CSipSimple on Android and Jitsi on desktop or laptop machines. Ideally use clients which support ZRTP, which will provide the best level of security. Freedombone also supports SIP phones The username and domain is the same as for your email address, and the SIP password and extension number will appear within the README file in your home directory. Various SIP client options are available, such as CSipSimple on Android and Jitsi on desktop or laptop machines. Ideally use clients which support ZRTP, which will provide the best level of security.
</p> </p>
</div> </div>
<div id="outline-container-orgheadline33" class="outline-4"> <div id="outline-container-orgheadline34" class="outline-4">
<h4 id="orgheadline33">About ZRTP</h4> <h4 id="orgheadline34">About ZRTP</h4>
<div class="outline-text-4" id="text-orgheadline33"> <div class="outline-text-4" id="text-orgheadline34">
<p> <p>
<a href="https://jitsi.org/Documentation/ZrtpFAQ">ZRTP</a> appears to be the current best standard to end-to-end encrypted voice calls, combining good security with simplicity of use. When the initial cryptographic negotiation between phones is done at the start of a call a short authentication string (SAS) is calculated and displayed at both ends. To check that there isn't anyone intercepting the call and acting as a <i>man in the middle</i> - as <a href="https://en.wikipedia.org/wiki/Stingray_phone_tracker">stingray type devices</a> try to do - the short authentication string can be read out and verbally confirmed between the callers. If it's the same then you can be pretty confident that the call is secure. <a href="https://jitsi.org/Documentation/ZrtpFAQ">ZRTP</a> appears to be the current best standard to end-to-end encrypted voice calls, combining good security with simplicity of use. When the initial cryptographic negotiation between phones is done at the start of a call a short authentication string (SAS) is calculated and displayed at both ends. To check that there isn't anyone intercepting the call and acting as a <i>man in the middle</i> - as <a href="https://en.wikipedia.org/wiki/Stingray_phone_tracker">stingray type devices</a> try to do - the short authentication string can be read out and verbally confirmed between the callers. If it's the same then you can be pretty confident that the call is secure.
</p> </p>
</div> </div>
</div> </div>
<div id="outline-container-orgheadline34" class="outline-4"> <div id="outline-container-orgheadline35" class="outline-4">
<h4 id="orgheadline34">Using with CSIPSimple</h4> <h4 id="orgheadline35">Using with CSIPSimple</h4>
<div class="outline-text-4" id="text-orgheadline34"> <div class="outline-text-4" id="text-orgheadline35">
<p> <p>
Add an account. Under <b>General Wizards</b> choose <b>Expert</b> and enter the following details: Add an account. Under <b>General Wizards</b> choose <b>Expert</b> and enter the following details:
</p> </p>
@ -919,9 +943,9 @@ If everything is working the account should appear in green with a status of <b>
</p> </p>
</div> </div>
</div> </div>
<div id="outline-container-orgheadline35" class="outline-4"> <div id="outline-container-orgheadline36" class="outline-4">
<h4 id="orgheadline35">Using with Ring</h4> <h4 id="orgheadline36">Using with Ring</h4>
<div class="outline-text-4" id="text-orgheadline35"> <div class="outline-text-4" id="text-orgheadline36">
<p> <p>
From the menu select <b>Manage accounts</b>. From the menu select <b>Manage accounts</b>.
</p> </p>

View File

@ -3,7 +3,7 @@
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"> <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
<head> <head>
<!-- 2016-02-27 Sat 22:12 --> <!-- 2016-04-05 Tue 21:44 -->
<meta http-equiv="Content-Type" content="text/html;charset=utf-8" /> <meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1" /> <meta name="viewport" content="width=device-width, initial-scale=1" />
<title></title> <title></title>
@ -169,7 +169,7 @@ Freedombone may be installed either in its entirety or as different variants wit
<center> <center>
<table style="width:80%; border:0"> <table style="width:80%; border:0">
<tr> <tr>
<td><center><b>Mailbox</b><br>An email server with GPG encryption and mailing list</center></td> <td><center><b>Mailbox</b><br>An email server with GPG encryption</center></td>
<td><center><b>Cloud</b><br>Share files, maintain a calendar and collaborate on document editing</center></td> <td><center><b>Cloud</b><br>Share files, maintain a calendar and collaborate on document editing</center></td>
</tr> </tr>
<tr> <tr>