Re: local vs remote eternity servers (Re: (eternity) Traffic Analysis)

[Adam Back <aba@dcs.ex.ac.uk>]

Thomas Womack <thomas.womack@merton.oxford.ac.uk> writes:
> >Thomas Womack <thomas.womack@merton.oxford.ac.uk> writes:
> >> I can imagine *use* of
> >> the service becoming a felony; you're therefore committing a felony
> >> merely by connecting to http://www.eternity.to, and acquiring
> >> evidence for that is a trivial matter of logging connections from a
> >> given user.
> >
> >One solution is to run eternity on a web server with SSL turned on,
> >and which serves lots of other data too.
> 
> It's not completely clear that such an object would exist; in legal terms,
> it would seem to be the same as a large and well-respected department store
> which happens to possess and tolerate a fence for stolen property. That is,
> it's an object which handles stolen property and can be shouted at loudly,
> legally, and with very large sticks.

Yes, but merely being seen going into this department store is you
hope not grounds for prosecution.  

ie The flow of the discussion being that you said "you're therefore
committing a felony by connecting to www.eternity.to" .. my reply
being that if we can arrange that there are any number of reasons for
connecting to www.eternity.to, any of which are protected by an SSL
connection, that this lessens the risks of being seen connecting to
said server.  We can easily arrange this by offering interesting free
services.

Certainly turning on SSL does not protect the server operator.  There
server operator in your analogy was the department store owner.  But
we were discussing the client (the shopper)'s risks.

> >The general problem with the remote server approach is that you have
> >to trust the server.  You could alternatively use a local eternity
> >server, which is easy to do if you have a local unix machine.
> 
> The operating system is immaterial here!

Ah, not if you are talking about my eternity prototype, because it 
only works on the unix platform.  Same for Ryan at present I think.
The overloading of "eternity service" is not helping here.

My point was that talking about my eternity prototype using USENET as
a distribution medium, where the `eternity server' is just a
convenient way to present an apparently persistent view of transient
USENET articles, using a local eternity server reduces the risk of
traffic analysis attack.  Now all you are doing is reading news.  If
you already have a full USENET feed, you have no new externally
observable traffic.

This process would be better termed a `local eternity proxy', in that
it would effectively be acting as a local web proxy process, where the
eternity virtual web pages were being fetched from a local news spool
by the local web proxy.

> >Ideally you would like a local news feed also, so that your local
> >eternity servers NNTP traffic or file system accesses to read news are
> >not available to the attacker.
> 
> That nearly makes sense - but 'running a news feed including the eternal.*
> groups' can be phrased such that any sane jury takes it as 'using/running an
> eternity server'.

Cross-post, and / or post to random newsgroups, threshold secret split
your posts so that only N of M are required to reconstruct.  If you
get shouted at for SPAM, steganographically encode the eternity
traffic.  Pornographic images in alt.binaries.* would be suitable
because there are lots of those already.  Because this is a publically
readable message an attacker (such as Ryan's system admin he mentioned
at MIT) might recognize the message based on successful stego
decoding, and purge it from the news feed.  We can counter this move
by encrypting the original posting, and posting the decryption key a
day or two later to ensure we get the full feed before anti-eternity
crusaders get to work purging the eternity traffic masquerading as
images.

USENET carries all sorts of materials which could potentially get you
in trouble.  I don't know what your news feed is like, but the one at
Exeter last time I looked had a healthy selection of dodgy gifs in
alt.binaries.*

> >Depending on your available resources, you can either operate from a
> >local news feed (people are less likely to be prosecuted for the
> >contents of a normal full newsfeed IMO), or have SSL access to a
> >remote ISPs NNTP server.
> 
> I suspect that, had anyone the least intention of arresting certain of my
> acquaintances on a trumped-up charge, they could persuade a jury that a
> 'normal' full newsfeed is sanitised, and that a newsfeed containing *warez*
> or *erotica* is clearly an Evil Perversion of the Natural Law.

We can't do much about the idiotic juries, and corrupt judicial
systems ... `they'd indict a ham sandwich if I told them to' -- some
US judge.  You're probably right too.  But I think we need to keep a
sense of proportion about opening ourselves to having technical
actions misconstrued to a clueless jury: there are easier ways to
frame someone once they have decided they don't like you.

To truly retain plausible deniability you need to maintain excellent
plausible deniability, you have to be squeaky clean: you need to
appear to be a model citizen, to not post politically incorrect
opinions to non-government approved fora, etc.  You must be below the
radar belt, you must be essentially invisible to the government, the
spooks dossier on you must read Mr Average and be entirely wholesome.
Then you must have one or more alter-egos, for your real interests.

> >> How can you defend against the felonisation of 'operating an Eternity
> >> Server'?
> >
> >Operate closed eternity servers for small group only, or a local
> >server for yourself or local users only.
> 
> But wasn't the point of the eternity service that it was massively
> distributed; if you're running a server for a small group consisting of
> forty-nine hackers and the deputy director of the NSA going incognito,
> you'll suddenly discover that all your servers have been seized, and that
> men with intimidating glasses want to ask you a number of searching
> questions.

The surest way is to run the eternity server for yourself only.  The
distribution medium is massively distributed, as the distribution
medium is USENET.  USENET is a broadcast medium.  Possibly the most
secure way to create one way anonymous communications is to broadcast
the messages.  Tim May's BlackNet uses this approach.  Eternity is
doing the same thing.

Adam