Community Updates: Difference between revisions

From TCU Wiki
No edit summary
No edit summary
 
(437 intermediate revisions by 5 users not shown)
Line 1: Line 1:
The following are community updates from the weekly Glitter Meetup. If you need to connect to anyone mentioned below, please reach out. We do practice "consensual introductions," meaning we have to check with the person before doing so. No names are associated with the summary notes. Please contact us if you have any questions related to these notes.  team@internetfreedomfestival.org
[[File:2022_Glitter_Meetup_EST.png|right|355x355px|caption]] 


== May 2 ==
<span style="font-size:larger">'''Glitter Meetup''' (GM) is the weekly town hall of the Internet Freedom community, attracting digital rights defenders from all corners of the world!! On this page you will find the notes or "minutes" from previous meetups, and information about upcoming ones. </span>


* One of our participants wrote an article in Russian talking about the Internet Freedom Festival: https://te-st.ru/2019/04/30/internet-freedom-festival-2019/
* '''Every Thursday''' at 9:00am EDT
* '''Where''' On the [[TCU Mattermost|TCU Mattermost?]] Secure an account [[TCU Mattermost|here]].
* '''Missed a Glitter Meetup?''' Don't worry the notes of each GM is listed below.


'''What can be done to help better support specific initiaitves that the community has going on'''
GMs are text-based chats, and provide digital rights defenders with space to share their work, personal, or regional updates, as well as ask questions; secure support or resources; share their expertise; and grow their human network! From time to time, we invite a featured guest who shares their expertise, and participants can ask questions to directly. Once a month, we also host a more social GM called '''The Social Networking Glitter Meetup''' where you can connect with others in a more organic, social way. 
View our [[Calendar of Events]] for a complete list of our virtual events


* Legal analysis and communication with local partners to push for needed changes.
We would love to have featured guests! If interested, email team@digitalrights.community
* Pro-active spirit
* Financial Support


NEWS
== '''Upcoming Meetups with Featured Guests''' ==


* China blocked the entire wikipedia site: https://chinadigitaltimes.net/
The following are upcoming Glitter Meetups with featured guests and/or topics every Thursday:
* In Russia, Putin signed the weird law on how to separate the Russian internet from the rest of the world
* Singapore urged to make changes to proposed bill against online falsehoods:
** https://www.zdnet.com/article/singapore-urged-to-make-changes-to-proposed-bill-against-online-falsehoods/
** https://www.engadget.com/2019/04/01/singapore-fake-news-law/
** https://www.mlaw.gov.sg/content/minlaw/en/news/press-releases/New-Bill-to-Protect-society-from-Online-Falsehoods-and-Malicious-Actors.html


== April 25 ==
'''[[September 12 2024 GM|September 12, 2024 Glitter Meetup]]'''. ''Featured Guest: Taiwo''


We keep talking about DNS:
'''Topic:''' The Digital Rights Monopoly: Discussing Gamification as a Tool for Digital Literacy


'''Who actually assigns a URL its IP address?'''
[[September 19 2024 GM|'''September 19, 2024 Glitter Meetup:''']]


When someone host their website to a server. The web server assigns an ip address for the domain but the web server does not produce IP address but the Internet Assigned Numbers Authority (IANA) does. Web hosting service provider get unused IP from them and distribute among the server users.
''The collaborative community discussion on what is Happening in Digital Rights around the world''


'''Let's learn about the Internet Assigned Numbers Authority (IANA):'''
'''[[October 10 2024 GM|October 10, 2024 Glitter Meetup:]]'''


* Here is a description of IANA: "We are responsible for coordinating some of the key elements that keep the Internet running smoothly. Whilst the Internet is renowned for being a worldwide network free from central coordination, there is a technical need for some key parts of the Internet to be globally coordinated, and this coordination role is undertaken by us."
''The monthly global Digital Rights community networking meetup''
* ICANN is the owner of IANA. As IANA owned by ICANN All the domain and IP addresses are controlled by the same organisation.


'''And what about the Public Technical Identifiers?'''
[[October 24 2024 GM|'''October 24, 2024 Glitter Meetup:''']]


* Public Technical Identifiers (PTI) was incorporated in August 2016 as an affiliate of ICANN, and, through contracts and subcontracts with ICANN, began performing the IANA functions on behalf of ICANN in October 2016.
''The collaborative community discussion on what is Happening in Digital Rights around the world''


* The PTI was founded in August 2016 as part of the implementation of the IANA Stewardship Transition. It's formation was designed to meet the ICG's recommendation to form a new legal entity to perform the IANA Functions, which was included in the proposal submitted to the NTIA on 10 March 2016. It began performing the IANA Functions on behalf of ICANN in October 2016, immediately after the IANA function contract with the NTIA expired.
{| class="wikitable" style="float:right; margin-left: 10px; width: 30%; background-color:#89dff7;"
|[https://www.digitaljustice.house/ '''Review our Digital Justice House Toolkit here'''], which proposes three transformations in the digital rights workplace to improve your team health:


LINKS
* Right to disconnect
* 4 day work week
* Unlimited vacations


* Why It Matters That Your ISP May Control Your DNS And What If I Use Encrypted DNS? https://www.privatetunnel.com/news/why-it-matters-that-your-isp-may-control-your-dns/
|}
* How DNS works: https://www.theguardian.com/technology/2010/dec/03/dns-ip-ddos-explained
* A Comic of how DNS works: https://howdns.works/
* Understanding DNS- https://www.networkworld.com/article/3268449/what-is-dns-and-how-does-it-work.html
* IANA: https://www.iana.org/about
* PTI: https://pti.icann.org/
* PTI board: https://pti.icann.org/pti-board-of-directors
* ICANN and the 7 Keys to the Internet: https://www.youtube.com/watch?v=LRAmeZCLBZE


== April 18 ==
=='''Notes from Past Glitter Meetups'''==


After the 2019 Internet Freedom Festival, we focused the Glitter Meetup on the feedback, experiences and feelings of the participants!
The following are community updates from the weekly Glitter Meetup. If you need to connect to anyone mentioned below, please reach out. We do practice "consensual introductions," meaning we have to check with the person before doing so. No names are associated with the summary notes. Please contact us if you have any questions related to these notes: team@digitalrights.community


'''Side Events'''
[[September 5 2024 GM|'''September 5, 2024 Glitter Meetup''']]. ''Featured Guest: Chirayu Desai''


* the expo table worked for us, we could direct people to it and had visitors all the time, the jojo's were a success as well
'''Topic:''' Is There HOPE for Phone Privacy? CalyxOS and Privacy-Focused FLOSS Phone Solutions
* IMO the expo table needs to be a little organized. as well as the mentor and digisec table
* One participant said that they really, really loved the birthday party. even though they missed the majority of it -- the cakes, the photos, the photobooth [because they was busy helping some folks ] but by the time they arrived, there was so much love pulsing through. it was great to see old-timers and new folks celebrating the iff love
* it was great that you scheduled the dev meetup at the very start of the week as it meant we knew people for the rest of the week
* the Rapid Response Meeting was very useful
* it was nice doing the tool showcase in the library, it was warm and quiet!
* Dev meetup worked great


'''New People'''
'''[[July 25 2024 GM|July 25, 2024 Glitter Meetup]]'''. ''Featured Guests: Fabiola Maurice and Tiffany Robertson''


* One participant pointed that all the people they met were very friendly and helpful. They feel like they were with their friends
'''Topic:''' ''Butter Box - Life Without Internet Made Smoother''


'''Diverstity'''
[[July 18 2024 GM|'''July 18, 2024 Glitter Meetup''':]]


* Once participant said that they really loved this year's edition, specifically because of the number of African countries represented & African centred sessions led by africans.
''The collaborative community discussion on what is Happening in Digital Rights around the world''
* for the vietnamese crew, it was a chance to bring newer communities into this space. they always love the IFF experience


'''Social'''
'''[[July 11 2024 GM|July 11, 2024 Glitter Meetup]]'''. ''Featured Guest: Hiure''
* They also love the themed music nights danced to alot of new music
* One participant said that they really didn't see alot of Academics in the space or maybe their presence was just low key
met some really good people. seemed to be a nice mix of new and existing people
* They also loved just the sub theme of gratitude, they took time to really hang out with people they first met at the IFF since it began and did an evaluation on the progress we have done over the years too. Some folks they also posted selfies with
* the Greenhost drinks were great too


'''Sessions'''
'''Topic:''' ''Community Networks Guide''


* it felt the focus of the program moved away from tools this year and (despite being a dev) that was actually nice
'''[[July 4 2024 GM|July 4, 2024 Glitter Meetup]]''':
* people didn't really pay attention to the roles in the sessions, some sessions got a bit derailed
* two session was ruined. the speaker didn't come.
* please make a better schedule page. or maybe an Android app.
* For future schedule: subscribe to session/mark as interested so that the participants get notifications before the sessions
* There were some sessions which they really left would have been nicer if merged but the thing is there were from different themes hence maybe making it hard to merge?
* it will be great for people to have trainings on specific things of interest in half a day too


'''Code of Conduct'''
''The monthly global Digital Rights community networking meetup''


* the code of conduct stuff was nice this year (last year it was kind of scary)
'''[[June 27 2024 GM|June 27, 2024 Glitter Meetup]]'''. ''Featured Guest: Karolin''


'''Venue'''
'''Topic:''' ''Rosenpass – Securing Cryptographic Applications Against Quantum Computer Attacks''


* wifi didn't work very well & it would have been simpler if the password was the same across all access points
[[June 20 2024 GM|'''June 20, 2024 Glitter Meetup''':]]
* why were there limited refreshments and coffee areas?
* the internet connection was terrible
* They wish any telco sponsor all participants a sim card with data


== March 21 ==
''The collaborative community discussion on what is Happening in Digital Rights around the world''


'''What do people understand "UX" means? What are the challenges to making tools more accesible?'''
'''[[June 13 2024 GM|June 13, 2024 Glitter Meetup.]]''' ''Featured Guests: Lebo & Leonora''


UX is an acronym for user experience. When we are talking about UX, we're talking about anywhere where users (of any type) are interacting with technology or tools.
'''Topic:''' Kwanele's Journey Navigating Ethical Tech for GBV Justice


Tools:
[[June 6 2024 GM|'''June 6, 2024 Glitter Meetup''']]:
* MailChimp: https://styleguide.mailchimp.com/
* Atlassian Style: https://atlassian.design/guidelines/voiceAndTone/language-grammar
* Simple Secure guidelines: https://simplysecure.org/tags/how-to-user-research/
* Meedan guide: https://meedan-ui-guide.meedan.com/
* Presentator: https://presentator.io/
* Microsoft Manual of Style: http://gen.lib.rus.ec/book/index.php?md5=881E9F18F9EA3665771923A2DF8EB061
* The Federal Plain Language Guidelines: https://www.plainlanguage.gov/


== March 7 ==
''The monthly global Digital Rights community networking meetup''


* Let's Encrypt is a big infrastucture project that helps people to get HTTPS on their websites. It is a Certificate Authority, which is part of HTTPS. HTTPS encrypts the communication between your browser and your web server, so the government can't see it. They also can't modify it!
'''[[May 30 2024 GM|May 30, 2024 Glitter Meetup]].'''


'''How does Let's Encrypt work?'''  
'''Topic:''' Conversations Around Funding


*if you visit a site that has https:// in front of it, it's quite difficult for governments (or ISPs) to inject JavaScript, or redirect to a malicious site.
[[May 23 2024 GM|'''May 23, 2024 Glitter Meetup''']]:
* For instance, the site we are on now, Mattermost, uses HTTPS.
* That means your ISP can't see what you're typing, because it's sent over HTTPS to Mattermost, so it's encrypted.
* In addition, they can't change what you are typing or the other is typing.
* The tricky thing with HTTPS, like all encryption, is how your computer gets the encryption keys it needs in order to talk to the web site.
* Your computer needs to get those keys from someone it trusts. Operating systems pick a group of Certificate Authorities to be trusted.
* So Let's Encrypt can tell you "the keys for community.internetfreedomfestival.org are XYZ"
* And because your computer trusts Let's Encrypt, it will accept those keys and use them for communication.


Is it easy to set up?
The collaborative community discussion on w''hat is Happening in Digital Rights around the world''


* It is very easy
[[May 16 2024 GM|'''May 16, 2024 Glitter Meetup''']]. ''Featured Guest: Selamawit Tezera''
* If you use whm/cpanel for web server then it'll come by default now. just need to activate it with some clicks.


'''Differences between DNSSEC and Let's Encrypt'''
'''Topic:''' sheEsecures - a Platform for an Inclusive and Feminist Internet


* '''Let's Encrypt''' is an authority that helps you be sure that community.internetfreedomfestival.org has XYZ encryption keys
[[May 9 2024 GM|'''May 9, 2024 Glitter Meetup:''']] ''Featured Guest: Nathaly Espitia Diaz''
* '''DNSSEC''' allows the owner of community.internetfreedomfestival.org to publish statements that anyone can verify. So they can publish the address for community.internetfreedomfestival.org as 1.2.3.4, and we can verify that statement really came from them.
* DNSSEC doesn't do any encryption. It just ensures you have the right IP address. But your DNS lookup and the DNS response are still spyable.
* DNSSEC can't encrypt websites, since it only affects the DNS lookup.


'''If an isp poisons DNS records and also those of dnssec to include fake signatures our devices will notice?'''
'''Topic:''' "Convite"- the Security and Self-care Communication Program for Indigenous, Black and Rural Communities in Colombia


*  The answer is it depends~ TLS currently depends on trusting authorities like Let's Encrypt. DNSSEC depends on trusting owners of the DNS namespace, in a way!
[[May 2 2024 GM|'''May 2, 2024 Glitter Meetup''']]:


LINKS
''The monthly global Digital Rights community networking meetup''


* Report of DNS hijacking: https://krebsonsecurity.com/2019/02/a-deep-dive-on-the-recent-widespread-dns-hijacking-attacks/
[[April 25 2024 GM|'''April 25, 2024 Glitter Meetup.''']] ''Featured Guest: Holmes Wilson''
* Dashboard tool built as part of standardization work at IETF where you can test DNS-over-HTTPS: https://netblocks.org/tmp/doh/


== February 28 ==
'''Topic:''' Quiet: A Secure Slack Alternative for Groups that Outgrow Signal


'''News & Updates'''
'''[[April 18 2024 GM|April 18, 2024 Glitter Meetup]]:'''  


* Tor Global South Online Meetup March 1st
''The monthly global Digital Rights community networking meetup''


https://lists.torproject.org/pipermail/global-south/2019-February/000223.html
[[April 11 2024 GM|'''April 11, 2024 Glitter Meetup''']]


* Information about the Localization Lab Summit happening right before the Internet Freedom Festival
'''Featured Guests:''' Elizabeth Sutterlin and Maddie Masinsin


The Summit is a chance to  identify challenges and opportunities in tool adoption and localization.  It's an event for anyone invested in making digital security and  circumvention tools accessible for a global audience, promoting local content creation, and supporting more linguistic diversity in the digital sphere is welcome to apply. We are looking for folks working on  Internet Freedom technologies or content for a diverse, global audience, like journalists, funders, human rights defenders, digital security trainers, community organizers, UX experts, and developers. We  especially welcome communities that use or or are in need of digital security and circumvention resources that are translated, adapted, or created for their unique linguistic, cultural, and technical needs.
'''Topic:''' Learn More About the Election Watch for the Digital Age Project


If you will be in town early and would like to join, you can send us an RSVP using this link: https://www.localizationlab.org/blog/2019/1/22/invitation-to-apply-2019-localization-lab-summit-amp-sprint
'''[[April 4 2024 GM|April 4, 2024 Glitter Meetup]]'''


*India:
What is Happening in Digital Rights Around the World?


Anyone who doesn't sign up for the national ID scheme by March 31 will have their tax ID cancelled. Aadhaar is a national biometric-based identity scheme in India with over 1 billion enrollments. You submit your fingerprints and iris scans to enroll, and get a 12 digit random number for life. The government insists this is as invasive as applying for a visa to America or Europe, so if it's fine in the rest of the world, it should be fine in India.
'''[[March 28 2024 GM|March 28, 2024 Glitter Meetup]]'''


From 2009 to 2016, Aadhaar operated without a law, by executive order. The bill was repeatedly rejected until 2016 when the government forced it through the lower house of parliament as a money bill, meaning that Aadhaar did nothing more than control spending from the consolidated fund of India.
''The monthly global Digital Rights community networking meetup''


This of course prompted even more petitions in the Supreme Court, which finally found time to hear the matter. In 2017, the attorney general informed the court that Indians had no fundamental right to property. The court responded with 9 judge bench judgement asserting that the Constitution of India did indeed have a fundamental right to privacy. Nine judges is pretty epic. The only way the government can overturn that is if a 10+ judge bench agrees, and that's not going to happen.
'''[[March 21 2024 GM|March 21, 2024 Glitter Meetup]]'''


In 2018, the court turned its attention to Aadhaar itself. They opened with a statement that they will not accept a fait accompli argument, meaning no "too big to fail". If Aadhaar violates the constitution, it should go. The hearings ran from January and the judgement came out in September in which they accepted that the government's powerpoint presentation that the data was secured behind 13 foot walls with commandos guarding it (not kidding) was good enough, so Aadhaar could stay. 4 of five judges in favour, 1 in scathing dissent, and the only one treating it as a constitutional matter.
'''Featured Guests:''' Icaldua and Flo


Of course they can't take away the tax id. Not in law, and not one month before national elections. India has a government that keeps trying to get away with strong arm tactics. They've clearly bent the court. So their threat will be eventually overturned, but life will be hell for those who resist.
'''Topic:''' "Localizing Security in a Box" in Indonesian


You can find more information here:  https://medium.com/karana
'''[[March 14 2024 GM|March 14, 2024 Glitter Meetup]]'''


* Venezuela
'''Featured Guest:''' Martín Szyszlican


Venezuela has been experiencing social media censorship. The phishing campaign happened on the 22nd of Feb during the live aid concert. At the end of the concert Richard Branson mentioned the social media blockages during his closing speech and invited people to shout 'libertad' which was very powerful  https://twitter.com/NoticiasRCN/status/1099086785555152896
'''Topic:''' Open Data and Civic Tech to Circumvent Government Censorship and Disinformation in Latin America


Now Maduro's goverment has a habit of blocking social media platforms whenever Juan Guaidó appears on TV. Yesterday for the first time they blocked Twitter. We are %100 sure of the reason, related to his tweet which includes an audio file uploaded on Soundcloud. https://netblocks.org/reports/twitter-blocked-in-venezuela-noy9d4B3
'''[[March 7 2024 GM|March 7, 2024 Glitter Meetup]]'''


What is Happening in Digital Rights Around the World?


'''[[February 29 2024 GM|February 29, 2024 Glitter Meetup]]'''


== February 21 ==
''The monthly global Digital Rights community networking meetup''


'''How would we define DNS and DNS spoofing?'''
'''[[February 22 2024 GM|February 22, 2024 Glitter Meetup]]'''


DNS Spoofing is a technique use to confused users, with the outcome usually trying to trick users into going to a malicious website. Basically DNS turns domain names into IP addresses. If you can interfere in that process you can redirect people and their information to malicious IP addresses. Is used for blocking websites, lying, or stealing data.
'''Featured Guest:''' Kwaku Antwi


* One participant pointed that DNS is a network of servers ran by different companies and governments. Usually when you connect to the Internet your ISP will provide you with a DNS server, but you can have others. That means that you can choose your own DNS and you dont depend on the one the company gives you.
'''Topic:''' Online Monitoring in Ghana


* Other participant also added that, apart of what others said, a DNS could be the technology that help us reach places on the internet with just a name (domains)
'''[[February 15 2024 GM|February 15, 2024 GM]]'''


* It is made easier by the fact that the DNS queries are mostly unencrypted and unsafe, that is why there are a lot of projects trying to make DNS better
'''Topic:''' Digital Security Challenges of Journalists in Myanmar


[[February 8 2024 GM|'''February 8, 2024 Glitter Meetup''']]


'''DNS Spoofing Cases'''
''The monthly global Digital Rights community networking meetup''


* Article explanning in simple words and draws what is DNS and how the attacks work: https://www.derechosdigitales.org/12841/venezuela-cuando-el-atacante-es-el-gobierno/
[[February 1 2024 GM|'''February 1, 2024 Glitter Meetup''']]


*  A case where entire DNS services are blocked, to encourage using state-run ones: https://turkeyblocks.org/2018/04/02/new-cloudflare-dns-service-filtered-turkey/
''What is happening in Digital Rights around the world?''


* When Wikipedia first started being blocked in Turkey, DNS poisoning was used first, then the SNI filters kicked in for full cover: https://turkeyblocks.org/2017/04/29/wikipedia-blocked-turkey/
[[January 25 2024 GM|'''January 25, 2024 Glitter Meetup''']]


* IIRC, Turkey in 2016 also filtered 8888: https://labs.ripe.net/Members/emileaben/internet-access-disruption-in-turkey
'''Featured Guest:''' Feras Bezanti


* during the catalan referendum they were also messing with DNS  https://www.independent.co.uk/news/world/europe/catalan-independence-referendum-spain-websites-blocked-spanish-constitution-votes-a7971751.html https://www.theguardian.com/world/2017/sep/27/catalans-compare-spain-to-north-korea-after-referendum-sites-blocked
'''Topic:''' Digital Safety in Libya: A Helpdesk Overview


* situation in Thailand during IETF103 Bangkok. A lot of work happened there to strengthen secure DNS (DoH and DoT), you can see our public interest hackathon: https://netblocks.org/news/rights-and-privacy-next-generation-internet-protocol-stack-ietf103-WRAeVWBg
[[January 18 2024 GM|'''January 18, 2024 Glitter Meetup''']]


'''Featured Guest:''' Sapni GK


'''DNS spoofing in Venezuela and why we should be worried about it from a technical perspective'''
'''Topic:''' Platform Cooperativism in India


The biggest (public) ISP used DNS spoofing to redirect people looking for an oposition volunteer registry to a fake cloned site. The worst part is that even DNS requests to other trusted DNS servers where intercepted and also altered. And the people running the fake site captured some data and published it maybe to persecute those people registered in the fake site targeted as oposition activists.
[[January 11 2024 GM|'''January 11, 2024 Glitter Meetup''']]


'''The Glitterest Glitter Meetup:''' Welcome back!
----
'''[[Glitter Meetup Notes 2023]]'''


'''DNS spoofing prevention'''
'''[[Glitter Meetup Notes 2022]]'''


* Use Tor!
'''[[Glitter Meetup Notes 2021]]'''


* The community has to act fast
'''[[Glitter Meetup Notes 2020]]'''


* Advocacy and a public outcry is useful when the attack is done
  '''[[Glitter Meetup Notes Before March 26, 2020]]'''
 
* Use VPN with Firefox with DNS-over-HTTPS enabled, so you make sure you're not using misconfigured VPNs with DNS Leaks (VPNs are sometimes non-trivial to set up and some setups may have bugs that send DNS queries to ISPs without VPN)
 
* Push technical community to use DNSSEC
 
Since all participants agree that the best way to solve DNS spoofing is through '''outcrying''', we start to talk about the outcry strategy:
 
* the noise make other people in this community to share experiences and to vpn companies for example to research more and help us to access in an easier way to their service
 
* part of the problem of creating outcry is difficulty explaining DNS and the attack, without confusing folks. Lack of coordination to reach journalists, and lack of coordination to reach users.
 
* using networks of your communities in other countries
 
* In Venezuela helped a lot to create a network of internet research activist group to agree on actions and to share responsability reaching certain actors:
 
** report fake websites
** monitor social media and report trolls
** talk with affected site admins
** make basic security assessments to websites
** find contacts in providers (hosting, browsers, etc.) to enable comm channels
** a long etc
 
After advocacy and outcrying, we founded that the best practices is '''using DNSEEC''':
 
* For consumers, DNS-over-HTTPS and DNS-over-TLS may be more practical options than DNSSEC.
 
* It's like https for DNS severs(!): it helps to guarantee authenticity to those who verify it.
 
 
'''NEWS'''
 
* Queens successfully kicked out Amazon - the largest corporation in the world! It was a beautiful campaign win led by women of color activists. Learn more here: http://gothamist.com/2019/02/15/who_killed_amazon_deal.php
 
 
 
== February 14 ==
 
'''Venezuela context:''' The latest presidential elections were widely regarded as illegitimate, in Venezuela and the rest of the world. The date of the new term came, and the opposition-led National Assembly (Congress) declared Maduro to be illegitimate and per our constitution the president of the Assembly, Juan Guaidó, was declared interim president of Venezuela. Maduro didn't recognize that, so Venezuela, in a manner of speaking, currently has 2 presidents. Guaidó has been recognized by most of the international community and controls several international accounts and assets, but Maduro controls the assets inside Venezuela including the military
 
'''Connecting with the technical issue:''' One of the first things the Guaido-led government did was to accept international humanitarian aid (the Maduro government has been refusing that for years). They also released a website, voluntariosxvenezuela.com, to gather volunteers for the process of receiving and distributing that humanitarian aid
 
There's a lot of confusion to what is happening in Venezuela, and some of the lastest updates are:
 
* Since some time ago we are seeing selective blocks to sites of social media and other interesting critic sites
* A couple of days ago there was a big concentration about "youth day" and Juan Guaido announced that the humanitarian aid will enter the country on feb 23
* There is a website of registration of volunteers, this site wass cloned by people related to the regulatory organism (Maduro administration), and apparently tousands of volunteers where redirected there and they gave their data to the Nicolas Maduro regime. They also have a structure in place that would allow them to do phishing on a lot of other websites, including google and social media. They have a lot of .ve domain names that are very similar.
 
QUESTIONS
 
'''Has there been any attempt to block VPNs and/or use of DNS over TLS / HTTPS?  (this is actually an interesting use case for Google's Intra app)'''
 
Historically, they blocked Tunnelbear. But there're not signs of other common vpns blocked currently. VSF has pcaps proving DNS injections and responses from the servers.
 
'''Do we know anything about the technical people doing the blocking? Have you seen the techniques become more sophisticated?'''
 
The techniques are becoming way more sophisticated. Years ago, there were only basic DNS blocks and since last year, we have seen blocks on Tor and now this. They started SNI filtering last year. This year, they started presionly-timed short SNI blocks in a very tactical way. And started blocking some ooni servers to try to stop croudsourced ooni measurements campaings we ran.
 
'''It would be interesting to know if the people doing this are home grown talent, or imported.'''
 
At the moment everything points to local staff but we don't know yet for sure. They do use foreing companies like DigitalOcean and GoDaddy for this.
 
'''In regards to communication, how is the new president (Guaido) communicating with the people curerntly?'''
 
Social media is definitely the way. Youtube/Instagram/Twitter have been blocked when Guaido livestreams or has big announcements.
 
'''Do you people there in Venezuela have sort of any "national" or "local" social network which is mostly popular in the country (or the area)?'''
 
Not really. Facebook, Twitter and Instagram are the most used. And A LOT of Whatsapp
 
'''What is the connectivity/internet penetration rate like?'''
 
It used to be good, through cellphones, but it's getting progressively worse because of the economic situation. Internet infrastructure is terribly, and by many metrics Venezuela has one of the worst internet services in the region and the world.
 
It's a bit worrying that most people still get news from TV and radio, which is mostly controlled directly or indirectly by the Maduro government. People often don't know if the errors are just faillues or censorship. That's why for years we have been documenting this, so that the poeple actually realize the level of censorship they live under.
 
'''And - apart from blocking of websites - are there any negative legal consequences in Venezuela for speaking in public (online) against the Maduro's regime? For example, these activists who run the website on humanitarian aid / volunteers - do they face any legal threats specifically for their online activity?'''
 
Yes. VSF is currently in record territory regarding political prisoners. Is random but historically people got arrested (since 2 years ago at least for tweeting things). The courts, the police and the military are still controlled by Maduro. Until that changes, things actually get worse because they feel cornered and need to crack down on dissent
 
There is a case of a person who just tweet publicly availabel information form flightradar.com (or similar) and was held incommunciated, tortured and charged with treason beacuse he included publicly available information on the flight path of the presidential plane.
 
'''What do you think is going to happen in the next year?'''
 
A big difference, and a good one, is that there is hope now. Up until recently there was only resignation. This gives people a light at the end of the tunnel. There are may scenarios of what might happen, it's a very difficult and sensitive situation
 
LINKS
 
* Report on the phishing incident in Venezuela
 
(English): https://vesinfiltro.com/noticias/Phishing_by_Venezuelan_government_targets_activists/
 
(Spanish) http://vesinfiltro.com/noticias/alerta-phishing_voluntariado/
 
* Report on the phishing incident for folks following along in English: https://securelist.com/dns-manipulation-in-venezuela/89592/
 
* Detailed evidence of SNI filtering was published http://vesinfiltro.com/noticias/wikipedia_2019-01/
 
* 989 political prisoners right now https://twitter.com/ForoPenal/status/1095670524703854592
 
* What is going on in Venezuela: https://www.youtube.com/watch?v=bEvHwiJWgAY
 
== February 7 ==
 
* Today, we have a special guest: Xeenarh, she has been one of the most impactful digital security trainers in our space. Last year, she recently got hired as ED of Nigeria's The Initiative for Equal Rights (TIERs) wwww.theinitiativeforequalrights.org which protects and supports sexual minorities in Nigeria and surrounding areas.
 
* TIERs are open 7 days of the week till 8pm and run a clinic with 2 doctors and a nurse so that even folks who have long working hours can stop by to see a physician that is emphatic and they can be open and honest with. They provide free legal services for protection of rights (against state or non state actors) and they do a lot of work in the media (books, movies, series, documentaries) so that they can change hearts and minds while changing the law. Now they have a Safety and Security department to run that here at TIERs.
 
* One of the greatest shifts they have seen within the region and in the movement is the embrace of new technologies, and the acceptance that it comes with certain risks that people should take precautions on. Where in 2013 organisations were reluctant to adopt some changes, its a lot different now. People are less surprised about capabilities of states, corporations and technologies, and are always open to learning what they can do to minimise harm.
 
'''Questions & Answers'''
 
*  '''What do you think is the biggest challenge orgs like yous have in regards to digitsec?'''
*  I think the biggest challenge for holistic security for orgs is taking time out to implement existing policies. Things move so fast and is usually life and death (or a stint in jail) for folks we respond to that people will push back so they can do 'more important' stuff. But some organisations are better than others and the biggest difference is size. The smaller the team, the faster they adapt and the longer the change in attitude lasts.
 
 
* '''With the upcoming elex and the world watching is there an opportunity to shed light on underrepresented issues? Will potential conflict and partisanship put the LGBTIQ+ community at particular risk? What can we do to help?'''
* Elections are always a good time to shed light on marginalised communities (disability, homelessness, LGBT folks). LGBT people were front and centre a couple of months ago when presidential aspirants were asked their position on criminalisation on same sex love and they all had to find moderate positions as opposed to the antagonisms of the past. And although the rhetoric of homosexuality being a western import and being 'unafrican' has been reducing greatly in the past 4 years (the decriminalisation in Angola and the pro lgbti judgements in Kenya have really helped) we are still nervous a public partisan position would be the excuse evangelicals need to rehash that line. As for what can help, giving tools and tactics to groups and frontline activists on how to deal with issues. Fake news is really big here (I curse the day whatsapp groups became a thing, sigh) and there is a likelihood that there might be violence if the sitting president loses. Keep talking and writing about Nigeria and marginalised groups as our country often bows to international pressure and embarrassment. There's also a teeny tiny possibility that the internet could be shut down (as with other elections on the continent) so talking ahead of time to ensure that doesn't happen would be helpful (I should send the handles to tag soon). We are also working on what to do IF that happens...
 
 
* '''what responses have you seen around the group running a project called Una Hakika(https://www.unahakika.org/) which was an attempt to evaluate rumours within Nigeria, in terms of tools, approaches or groups working on pushing back on propaganda?'''
* So there are tons of people who started working on this in 2018, like verify, dubawa, election fact check, Africa check.
 
 
'''LINKS:'''
 
* TIERs award winning book She Called Me Woman: https://www.amazon.com/She-Called-Me-Woman-Nigerias-ebook/dp/B07BH96DQL
* Season 1 of their show Everything In Between: https://www.youtube.com/watch?v=4NBbxEP4pOs
* Documentary Veil Of Silence: https://www.youtube.com/watch?v=wR5dOIUOUjs
* Repeal162: https://www.repeal162.org/
 
== January 31 ==
 
* 1984 is a web hosting company in Iceland that hosts a lot of activist sites, and is linked to security trainers, the Icelandic Pirate Party, and lots of people at IFF
 
* What can we do in particular instances to help strengthen solidarity,maybe using the Glitter Meetups as a tool in that?
 
* On of the first things we have to think of is what do these local communities expect as international support and what are their particular needs. We always have to keep in mind that each community is different and they'll need their own specific help or resources.
 
* One participant pointed that crowfunding specific resources or networks could work.
 
 
== January 17 ==
 
https://motherboard.vice.com/en_us/article/43bemg/canadian-company-netsweeper-blocking-lgbtq-content-abroad
 
* A Canadian internet company called Netsweeper is censoring LGBTQ web content and other content protected under international conventions on behalf of numerous regimes with atrocious human rights records.
 
*  Citizen Lab’s latest report used a suite of detection tools to uncover Netsweeper installations in 30 different countries, including 10 that have “raised systemic human rights concerns”: Afghanistan, Bahrain, India, Kuwait, Pakistan, Qatar, Somalia, Sudan, the United Arab Emirates, and Yemen.
 
* According to Citizen Lab’s findings, Netsweeper filtering solutions blocked media sites in Yemen, political campaigns in the UAE, and religious content in Bahrain. But particularly troubling is Netsweeper’s “alternative lifestyles” blocking category, “which appears to have as one of its principal purposes the blocking of non-pornographic LGBTQ content, including that offered by civil rights and advocacy organizations, HIV/AIDS prevention organizations, and LGBTQ media and cultural groups,” the report states.
 
Questions for next speaker:
 
* Can you introduce yourself and your organization?
 
Pablo is part of the team at R3D. Red en Defensa de los Derechos Digitales or The Network in Defense of Digital Rights (R3D, is a Mexican organisation dedicated to the defence of human rights in the digital environment . R3D focuses on defending and promoting human rights in the digital realm through a combination of applied research, advocacy, and litigation strategies. Its work cuts across the themes of privacy, surveillance, freedom of expression, access to the internet, and access to knowledge.
 
Adam is the Operations Manager at the Citizen Lab at the University of Toronto and Miles is the Communications Specialist at the Citizen Lab. Citizen Lab is an interdisciplinary laboratory based at the Munk School of Global Affairs and Public Policy, University of Toronto, focusing on research, development, and high-level strategic policy and legal engagement at the intersection of information and communication technologies, human rights, and global security.
 
* What is Netsweeper? What does it do and how does it work? 
 
Netsweeper is an Internet filtering product developed by Netsweeper, Inc., who are based in Waterloo, Ontario, Canada. It's used by network administrators and ISPs to control access to content on their networks. It inspects the traffic of users on the network, and if a user requests content that belongs to a prohibited category, it will block it. One of the key features of the product is a web categorization database, where the company assigns websites to a set of content categories. The company posts 'live stats' on the number of web pages here: https://www.netsweeper.com/live-stats/
 
* What are the Citizen Lab findings that were so troubling?
 
Citizen Lab published a number of reports on the use of Netsweeper to block protected speech, and in countries which raise human rights concerns. You can read all of our research on this topic here: https://citizenlab.ca/tag/netsweeper/
 
They found that this technology was being used to filter a range of content, including critical political websites, independent media, and religious content. In five of those countries, we found instances of LGBTQ-related content being blocked.
 
In some cases, custom block lists were created that prevented access to LGBTQ news websites, critical health information on HIV/AIDS and advocacy organizations like the International Lesbian, Gay, Bisexual, Trans and Intersex Association (ILGA). In other instances, non-pornographic LGBTQ content was miscategorized as pornographic by Netsweeper.
 
Maybe most troubling, they found that in UAE LGBT content was blocked because it was categorized as belonging to the ‘Alternative Lifestyles” category. Netsweeper describes that category as: “This includes sites that reference topics on habits or behaviors related to social relations, dress, expressions, or recreation that are important enough to significantly influence the lives of a sector of the population. It can include the full range of non-traditional sexual practices, interests and orientations. Some sites may contain graphic images or sexual material with no pornographic intent.”
 
Their testing in UAE found a variety of websites blocked because they were categorized as ‘Alternative Lifestyles” - GLAAD, the Human Rights Campaign, ILGA, the Gay Men’s Health Centre, and Queerty, just as examples. There are likely many, many more examples which could be included here.  It’s obviously quite problematic that they’re using the term ‘alternative lifestyles’ to describe LGBTQ identities, and that they’ve facilitated the easy blocking of LGBT content by allowing administrators to simply click a single box.
 
Censorship cuts deep many Human Rights that are crucial to guarantee the wellbeing of every human being, but even more of those communities that remain underserved, especially in authoritarian regimes.
 
In the case of Netsweeper, it’s especially alarming because in many of the countries in the MENA region LGBTQI+ populations are criminalized; not having access to life saving information or to communicate to organizations that can support LGBTQI+ folks in case of emergency.
 
Citizen Lab has identified Netsweeper in 30 countries. In their "Planet Netsweeper" report, thei focused on 10 case studies of concern. You can see them here: https://citizenlab.ca/2018/04/planet-netsweeper-section-2-country-case-studies/
 
* Your org R3D has launched a campaign with All Out. Can you explain what are the demands?
 
R3D found that if they wanted to highlight issues from the LGBTQI+ communities they required to work together with LGBT-led organizations. They also collaborated with Citizen Lab in the past, so bringing the campaigning experience from All Out was that extra push R3D required.
 
They see that it is time to bring Digital Rights to other movements, to support each other and top working in sylos.
 
R3D has a Github repository that helps them to collect contributions, and outline the participation process, as well as needs from the group. It's still in development process. https://github.com/TecnoQueers/OutintheOpen/blob/master/README.md
 
What was really upsetting to R3D and All Out is that Netsweeper has received investements in mutiple occasions from Canadian governement; that they are seen as a good company to invest, and that the Canadian government is not really that interested in holding their accountable for providing this kind of services.
 
So once more R3D is seeing a case on which governments promote companies that develop software and provide services that are not aligned with the international Human Rights legal framework.
 
R3D and Citizen Lab know that the Canadian government has offered a variety of different types of support - funding grants, support on trade missions, etc., to Netsweeper.
 
Both have tried to highlight the contradiction between the Trudeau government's foreign policy which supports LGBT rights globally, and their support of a Canadian company which is selling a tool that facilitates the easy blocking of LGBT websites.
 
In August, Canada and Chile co-hosted the Equal Rights Coalition (a group of states and civil society organizations that addresses issues related to LGBTQ2+ equality). In the lead-up to this, Citizen Lab sent the ERC and relevant Canadian politicians-- including the Prime Minister and his LGBTQ2+ advisor-- a letter urging them to: condemn LGBTQ2+ censorship; commit to taking specific and measurable action to prevent and address the censorship of LGBTQ2+ content; and affirm that Internet filtering technology providers have a responsibility to respect the human rights of LGBTQ2+ persons by ensuring their products and services do not facilitate censorship of LGBTQ2+ content, and to provide a remedy when such censorship occurs.
 
The letter can be found here: https://citizenlab.ca/wp-content/uploads/2018/07/citizen_lab_open_letter_erc_sm.pdf
 
As a part of the UN Guiding Principles on Business and Human Rights, all governments, including Canada, have an obligation to protect against human rights abuse by the private sector, including to “set out clearly the expectation that all businesses enterprises domiciled in their territory and/or jurisdiction respect human rights throughout their operations”, including extraterritorially.
 
Citizen Lab described all the different types of support the Canadian government provided in section 3.4 of this: https://citizenlab.ca/2018/04/planet-netsweeper-section-3-discussion-conclusions/
 
 
* How can other organizations and individuals working on digital rights get involved?
 
Out in the Open emerged from the need of creating local partnerships to share knowldge, campaign together, and build the capacity of LGBTQI+ orgs on digital related matters. It is a partnership to share knowledge, campaign togeteher and build capacity.
 
Out in the Open is now in an early stage, making needs assesments and understanding how much work there is on LGBT and Digital Rights.
 
* If someone use VPN, what will happen? Netsweeper blocks it as well?
 
Netsweeper does have a content category for "Web Proxies", but to our knowledge in most cases if you already have a VPN configured it will let you circumvent the blocking.
 
* How can individuals communicate why bringing light to technologies like Netsweeper is important, particularly for LGBTQI communities?
 
The first step is helping the general public understand that human rights and digital freedoms go hand-in-hand. We are seeing a growing understanding of this as people develop more robust digital lives and as media sheds light on how technologies used can be abused.
 
The next step is highlighting the inequalities when it comes to HOW these technologies are abused and WHO are most likely to be impacted.
 
A good rule of thumb is: people don't care about reports; people care about people. So putting a human face on these technical issues is paramount to galvanizing support.
 
* Is there anything folks in the IFF community do to help improve this research, help collect data, or anything at all to help?
 
Citizen Lab used a variety of data sources in their Netsweeper reports, and one of the most important is OONI. So run OONI if you can! That might be an obvious suggestion to the people in this meetup, but that data is exceptionally important for informing reports, and Citizan Lab thinks advocacy work is strengthened when it can point to empirical research and data.
 
* Digital Resources and Recommendations on LGBTQI communities:
 
DIY Feminist Cybersecurity kit: https://hackblossom.org/cybersecurity/
 
VPN released an online safety manual for LGBTQI communities: https://www.vpnmentor.com/blog/lgbtq-guide-online-safety/
 
NYC Anti Violence Project released a Safety Tips for Dating apps here: https://avp.org/resources/safety-tips/
 
 
== January 10 ==
 
* New report and findings by one of the participants & Aspiration Tech: https://aspirationtech.org/humanrights/reports/practitionersustainabilitysurvey#findings
 
* How apple is censoring the app store in 150 markets around the world - https://applecensorship.com/
 
* In Privacy LX they are starting having cryptoparties and Privacy events every month:  https://privacylx.org
 
* Just Associates built this feminist glossary: https://justassociates.org/sites/justassociates.org/files/feminist-movement-builders-dictionary-jass.pdf
 
== Community Updates 2018==
 
You will find here all the ideas, discussions and topics that the community created during the 2018 on our weekly Glitter Meetups:
 
https://internetfreedomfestival.org/wiki/index.php/Community_Updates_2018

Latest revision as of 14:32, 10 September 2024

caption

Glitter Meetup (GM) is the weekly town hall of the Internet Freedom community, attracting digital rights defenders from all corners of the world!! On this page you will find the notes or "minutes" from previous meetups, and information about upcoming ones.

  • Every Thursday at 9:00am EDT
  • Where On the TCU Mattermost? Secure an account here.
  • Missed a Glitter Meetup? Don't worry the notes of each GM is listed below.

GMs are text-based chats, and provide digital rights defenders with space to share their work, personal, or regional updates, as well as ask questions; secure support or resources; share their expertise; and grow their human network! From time to time, we invite a featured guest who shares their expertise, and participants can ask questions to directly. Once a month, we also host a more social GM called The Social Networking Glitter Meetup where you can connect with others in a more organic, social way.

View our Calendar of Events for a complete list of our virtual events
We would love to have featured guests! If interested, email team@digitalrights.community

Upcoming Meetups with Featured Guests

The following are upcoming Glitter Meetups with featured guests and/or topics every Thursday:

September 12, 2024 Glitter Meetup. Featured Guest: Taiwo

Topic: The Digital Rights Monopoly: Discussing Gamification as a Tool for Digital Literacy

September 19, 2024 Glitter Meetup:

The collaborative community discussion on what is Happening in Digital Rights around the world

October 10, 2024 Glitter Meetup:

The monthly global Digital Rights community networking meetup

October 24, 2024 Glitter Meetup:

The collaborative community discussion on what is Happening in Digital Rights around the world

Review our Digital Justice House Toolkit here, which proposes three transformations in the digital rights workplace to improve your team health:
  • Right to disconnect
  • 4 day work week
  • Unlimited vacations

Notes from Past Glitter Meetups

The following are community updates from the weekly Glitter Meetup. If you need to connect to anyone mentioned below, please reach out. We do practice "consensual introductions," meaning we have to check with the person before doing so. No names are associated with the summary notes. Please contact us if you have any questions related to these notes: team@digitalrights.community

September 5, 2024 Glitter Meetup. Featured Guest: Chirayu Desai

Topic: Is There HOPE for Phone Privacy? CalyxOS and Privacy-Focused FLOSS Phone Solutions

July 25, 2024 Glitter Meetup. Featured Guests: Fabiola Maurice and Tiffany Robertson

Topic: Butter Box - Life Without Internet Made Smoother

July 18, 2024 Glitter Meetup:

The collaborative community discussion on what is Happening in Digital Rights around the world

July 11, 2024 Glitter Meetup. Featured Guest: Hiure

Topic: Community Networks Guide

July 4, 2024 Glitter Meetup:

The monthly global Digital Rights community networking meetup

June 27, 2024 Glitter Meetup. Featured Guest: Karolin

Topic: Rosenpass – Securing Cryptographic Applications Against Quantum Computer Attacks

June 20, 2024 Glitter Meetup:

The collaborative community discussion on what is Happening in Digital Rights around the world

June 13, 2024 Glitter Meetup. Featured Guests: Lebo & Leonora

Topic: Kwanele's Journey Navigating Ethical Tech for GBV Justice

June 6, 2024 Glitter Meetup:

The monthly global Digital Rights community networking meetup

May 30, 2024 Glitter Meetup.

Topic: Conversations Around Funding

May 23, 2024 Glitter Meetup:

The collaborative community discussion on what is Happening in Digital Rights around the world

May 16, 2024 Glitter Meetup. Featured Guest: Selamawit Tezera

Topic: sheEsecures - a Platform for an Inclusive and Feminist Internet

May 9, 2024 Glitter Meetup: Featured Guest: Nathaly Espitia Diaz

Topic: "Convite"- the Security and Self-care Communication Program for Indigenous, Black and Rural Communities in Colombia

May 2, 2024 Glitter Meetup:

The monthly global Digital Rights community networking meetup

April 25, 2024 Glitter Meetup. Featured Guest: Holmes Wilson

Topic: Quiet: A Secure Slack Alternative for Groups that Outgrow Signal

April 18, 2024 Glitter Meetup:

The monthly global Digital Rights community networking meetup

April 11, 2024 Glitter Meetup

Featured Guests: Elizabeth Sutterlin and Maddie Masinsin

Topic: Learn More About the Election Watch for the Digital Age Project

April 4, 2024 Glitter Meetup

What is Happening in Digital Rights Around the World?

March 28, 2024 Glitter Meetup

The monthly global Digital Rights community networking meetup

March 21, 2024 Glitter Meetup

Featured Guests: Icaldua and Flo

Topic: "Localizing Security in a Box" in Indonesian

March 14, 2024 Glitter Meetup

Featured Guest: Martín Szyszlican

Topic: Open Data and Civic Tech to Circumvent Government Censorship and Disinformation in Latin America

March 7, 2024 Glitter Meetup

What is Happening in Digital Rights Around the World?

February 29, 2024 Glitter Meetup

The monthly global Digital Rights community networking meetup

February 22, 2024 Glitter Meetup

Featured Guest: Kwaku Antwi

Topic: Online Monitoring in Ghana

February 15, 2024 GM

Topic: Digital Security Challenges of Journalists in Myanmar

February 8, 2024 Glitter Meetup

The monthly global Digital Rights community networking meetup

February 1, 2024 Glitter Meetup

What is happening in Digital Rights around the world?

January 25, 2024 Glitter Meetup

Featured Guest: Feras Bezanti

Topic: Digital Safety in Libya: A Helpdesk Overview

January 18, 2024 Glitter Meetup

Featured Guest: Sapni GK

Topic: Platform Cooperativism in India

January 11, 2024 Glitter Meetup

The Glitterest Glitter Meetup: Welcome back!


Glitter Meetup Notes 2023
Glitter Meetup Notes 2022
Glitter Meetup Notes 2021
Glitter Meetup Notes 2020
Glitter Meetup Notes Before March 26, 2020