Coder Social home page Coder Social logo

riseup_help's Introduction

Riseup Help Pages

This is the repository for the riseup help pages at https://help.riseup.net.

It is entirely static, but relies on a bunch of apache tricks for things like language negotiation. Riseup help uses a static website generator called amber to render the source files into html files.

To submit changes, please fork this repo and issue pull requests on github. If you don't know how to use git, you can submit changes via the github website (see "Editing on github" below for instructions).

Simple method - editing on github

Learning to use git can be very difficult. As an alternative, it is possible to contribute to riseup_help by directly editing pages through the github website. This method does not let you preview how the page will render, but it does allow you to contribute edits without needing to install any software.

First, you need to register a github.com account. Then visit https://github.com/riseupnet/riseup_help

To edit files:

  • Existing Files: You can edit an existing file by clicking on the file name and then clicking the "Edit" button in the file's toolbar (it looks like pencil). To save, type a commit message and hit the "Propose file change" button.
  • New Files: You can add a new page by clicking the "+" button at the end of the path breadcrumbs (e.g. "riseup_help / pages / chat / [+]" near the top of the page). When you are done editing the content, hit the "Propose new file" button.

Boom, you are done. one of the riseup birds will review the change request and either merge it right away or add comments.

Advanced method - using git and amber

Installing amber

In order to preview your edits to the content in pages you will need a program called amber.

To install on Debian or Ubuntu (Wheezy or later):

sudo apt-get install ruby ruby-dev build-essential zlib1g-dev
sudo gem install amber

To install on Mac, see below. Check https://github.com/leapcode/amber for more information.

Previewing pages

After you have made changes, run this command in the riseup_help directory to completely re-render the entire site (takes a long time):

amber rebuild

When you are making changes, it is easiest to see a preview of these changes by running the amber server:

amber server

Then browse to http://localhost:8000. Any page you view this way gets re- rendered when it is loaded.

Putting it all together:

  1. Go to https://github.com/riseupnet/riseup_help and click the fork button.
  2. Clone your fork locally: git clone ssh://[email protected]/your-id/riseup_help
  3. Start the amber server: cd riseup_help; amber server
  4. Edit files in riseup_help/pages
  5. Preview changes in your browser using http://localhost:8000
  6. When satisfied, git commit, git push
  7. Go to https://github.com/your-id/riseup_help and issue a pull request

One way you can refresh your repo with upstream before pushing:

git remote add upstream https://github.com/riseupnet/riseup_help
git fetch upstream
git rebase upstream/master

You only need to run git remote add once. Alternately, you could set origin to be riseupnet/riseup_help and add your fork as a remote.

Directories

riseup_help/
  amber/     -- amber configuration, stylesheets, layouts, etc.
  disabled/  -- draft pages or pages that are disabled.
  notes/     -- notes and todos.
  pages/     -- the source text for the website pages.
  public/    -- the rendered output (not committed to git).

The static content files in riseup_help/public are rendered from the content in riseup_help/pages. You edit pages in the pages directory, but never edit anything in the public directory.

Amber file structure

There are two ways to create pages:

A page might be represented by files with different language suffixes:

email.en.text
email.pt.text

Alternately, a page might be represented by a folder. This method allows you to have sub-pages

email/
  en.text
  pt.text
  client/
    en.text

In general, it is preferred to use the folder method.

Modifying Navigation

If you need to add or remove a top or side nav menu, you'll need to edit

amber/menu.txt

Note that you will need to restart the amber server for changes to take effect.

Notes on markup

You can create pages in three different markup languages:

  • textile (suffix .text)
  • markdown (suffix .md)
  • haml (suffix .haml)

Most of the riseup help pages are written using textile. It is best to keep to textile for consistency.

Here is a brief overview of textile markup:

h1. heading 1
h2. heading 2

this is a paragraph

* this is a list
* another item in the list

"this is a link":http://to-this-url.org

here is some *bold text*

For a complete reference, see https://www.promptworks.com/textile

Amber adds an additional way to make links:

[[label -> page-name]]
or
[[page-name]]
or
[[chat/client]]

Whenever possible, you should use this double bracket notation for creating links.

By using this double bracket link notation will automatically find the right path for the page with the specified name. Also, it will warn you if the page name is missing and it will ensure that the link is created with the correct language prefix. In haml, you can get the same effect using link 'label' => 'page'

The standard textile method of linking does not work well with non-latin languages, so it is recommended that you always use the amber method of forming links.

Setting page properties

Every file can have a "properties header". It looks like this:

@title = "A fine page"
@toc = false

continue on here with body text.

The properties start with '@' and are stripped out of the source file before it is rendered. Property header lines are evaluated as ruby. All properties are optional and they are inherited, including @title. To make a property not get inherited, use @this.propertyname = 'value' instead.

Available properties:

  • @title -- The title for the page, appearing as in an H1 on the top of the page and as the HTML title. Also used for navigation title if @nav_title is not set.
  • @nav_title -- The title for the navigation to this page, as well as the HTML title if @title is not set.
  • @summary -- Displayed under the title.
  • @toc -- If set to false, don't include a table of contents when rendering the file. This only applies to .text and .md files.
  • @layout -- Manually set the layout template to use for rendering this page.
  • @this.alias -- An alternate url path (or paths if the value is an array) where this page should be available.

Translating

For the most part, to create a new translation for a given page, copy en.text file to xx.text and edit the document (where xx is the language code of language you are translating into).

The language codes are as follows:

  • zh: Simplified Chinese
  • es: Spanish
  • en: English
  • pt: Portuguese
  • ru: Russian
  • de: German
  • fr: French
  • it: Italian
  • el: Greek
  • ca: Catalan

Only those languages are currently enabled. We are happy to add additional languages if there is sufficient interest.

In addition to the text of a particular page, the navigation items and footer text can be found in amber/locales/xx.yml.

When translating the text of a page you should only modify the label of the links but not the page names that the links point to. For example:

[[Security => security]]

Should be translated to:

[[Seguridad => security]]

But a simple:

[[security]]

Should NOT be translated.

The locale will be automatically added to the link, so there is no need to ever include it (e.g. the link [[Seguridad => security]] will link to https://help.riseup.net/es/security). The link [[Security => security]] could have also been written simply [[security]].

To identify translated pages that need to be updated, run ./what_needs_an_update.sh [language-code].

Or you can use this python program to do the job.

Installing on Mac

(I haven't tried this myself)

Ruby 1.9 or greater is required to run amber.

Mac OS 10.9 (Mavericks) or later is running ruby 2.0 and can work with amber out of the box. For earlier Mac OS releases, you need to upgrade the ruby that comes with the computer. The easiest way to do this is with homebrew. To install, open a terminal and type:

ruby -e "$(curl -fsSL https://raw.github.com/Homebrew/homebrew/go/install)"
brew install ruby

After ruby is at 1.9 or newer, then just run:

sudo gem install amber

Alternately, if you want different versions of ruby installed, consider:

Installing on Windows

Windows is not yet supported.

riseup_help's People

Contributors

anarcat avatar baldurmen avatar chris-barry avatar colinmahns avatar disturbio avatar divoka avatar dogsleg avatar dtto avatar elijh avatar flo4 avatar immikel avatar julianwap avatar just1602 avatar kradan avatar lefherz avatar makechangesmakechanges avatar massyc avatar micah avatar mossadhq avatar neustradamus avatar rainerbielefeld avatar rosetree avatar simonasd avatar taggart avatar tilllt avatar wxl avatar xinxinxinxinxin avatar xphnx avatar yyyyyyyan avatar zhiwei-xu avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

riseup_help's Issues

No instructions for verifying keyserver pool certificate

Hi,

The instructions at https://help.riseup.net/en/security/message-security/openpgp/best-practices/#use-the-sks-keyserver-pool-instead-of-one-specific-server-with-secure-connections indicate to verify the fingerprint of the sks-keyservers.net CA certificate.

However, there the indication of how to do this is missing. The instructions to verify link to https://sks-keyservers.net/verify_tls.php which gives the fingerprints, but does not say how to verify them.

It would also be good to include these things in the page itself, in case the link dies.

Modification at K-9 Mail

I don't know if this is the precise place to left this matter. Forgive me if it's not...
The link to the place is: [(https://riseup.net/es/email/clients/k9)], point 6.

At the help page for K-9 Mail settings -for Android- there is a detail that needs to be changed.
At the second page, where you configure the IMAP settings, it's mandatory to insert your complete email address ([email protected]), not only your user name. It's needed at this point and at the next page, the SMTP one.
I would corrected myself If make a correction was easier, but it looks difficult to me, I'm sorry.

Rewrite the IRC section of the contact page

We should rewrite the IRC section of the contact page to make it as clear as possible and higlight informations like server adress, port, channel and not only the warning in bold that highlight that we have to use the port 6697.

If you want, you can assign it to me. I'll do it when I'll have some free time. :)

BetterPrivacy extension gone

It appears that the BetterPrivacy extension (linked on browser privacy scorecard and in "not recommended" on the better web browsing page) is gone from the Firefox addons store. Should these links be left there anyways to show that it was at some point recommended or completely removed?

mention elliptic curve algorithms in best practices guide

The best practices guide could suggest considering ECC subkeys since they are now supported in 2.1. They are faster, which is very useful for security tokens. Note that if there's a RSA and ECC key on a key, GnuPG 1.4 will do the right thing and choose the one that works (e.g. use RSA if it doesn't support ECC)...

R.I.P Riseup.net Canary

You failed to feed(update) your canary. Therefore, ALL RISEUP USERS MUST STAY AWAY FROM THIS
PROVIDER BECAUSE this service is compromised.

Device Security page needs a phones section

The Device Security page desperately needs a section on phones! I've started such a section in my repository. It's just brainstorming at the moment, but at least it's progress. I'd appreciate any help that can be offered, even if it's just further brainstorming or expanding on what's already listed. Please fork my repository and make a pull request with any contributions.

review default algorithms recommendations for GPG 2.1

Since GPG 2.1, a bunch of non-default algo recommendations we have in the best practices guide may not be relevant anymore, either because they are the default now, or because they are superseded by better algorithms.

A thorough review of those should be performed to make sure we're up to date.

Problem is: I am not sure how to actually tell what the current defaults are...

Switch recommended extension uBlock for uBlock Origin

Well, in a bad timing thing there was some issues and drama related to uBlock. It seems uBlock was developed by several people but some weeks ago one of the main developers decided to take over the extension and put some donate buttons and saying it was made from him.

Now there are two uBlock extensions, one made by gorhill (uBlock Origin) and one made by Chris AlJoudi (uBlock). None of them is the original one or a fork by one, but the take over by Chris seems to be a bad move thinking about ethics and the future of the project (as it looks for monetization).

gorhill's uBlock Origin keeps the manifesto of "Free. Open source. For users by users. No donations sought." as for the developers seems the only way to make this kind of extension good (compared with the history of adblock).

So, for probably only ethical reasons I think it's a good idea to promote gorhill's addon instead of Chris one. As none is a fork or the main one, i guess it's totally doable.

You can read a more of the drama here:
https://www.reddit.com/r/linux/comments/39quzj/chris_aljoudis_ublock_not_gorhills_ublock_origin/
https://en.wikipedia.org/w/index.php?title=UBlock&type=revision&diff=662527440&oldid=662107368
https://www.reddit.com/r/chrome/comments/32ory7/ublock_is_back_under_a_new_name/cqd5ayy

gorhill's ublock or "uBlock Origin": https://github.com/gorhill/uBlock

navbar commit makes amber unhappy

the navbar commit (676392a) results in malfunctions with amber, at least with ruby 2.3. if i checkout previous commits (such as 349eb5c), there is no such issue.

the particular error (which repeats itself) from amber is:

ERROR: undefined method `link_to' for #<Amber::Render::View:0xf5bb187c>
Did you mean?  link
ERROR: /home/wxl/git/riseup_help/amber/layouts/_riseup_bar.html.haml:4:in `block in singleton class'
       /home/wxl/git/riseup_help/amber/layouts/_riseup_bar.html.haml:131062:in `instance_eval'
       /home/wxl/git/riseup_help/amber/layouts/_riseup_bar.html.haml:131062:in `singleton class'
       /home/wxl/git/riseup_help/amber/layouts/_riseup_bar.html.haml:131060:in `__tilt_739184650'
       /home/wxl/.rbenv/versions/2.3.0/lib/ruby/gems/2.3.0/gems/tilt-2.0.7/lib/tilt/template.rb:170:in `call'
       /home/wxl/.rbenv/versions/2.3.0/lib/ruby/gems/2.3.0/gems/tilt-2.0.7/lib/tilt/template.rb:170:in `evaluate'
       /home/wxl/.rbenv/versions/2.3.0/lib/ruby/gems/2.3.0/gems/tilt-2.0.7/lib/tilt/haml.rb:19:in `evaluate'
       /home/wxl/.rbenv/versions/2.3.0/lib/ruby/gems/2.3.0/gems/tilt-2.0.7/lib/tilt/template.rb:109:in `render'
       /home/wxl/.rbenv/versions/2.3.0/lib/ruby/gems/2.3.0/gems/amber-0.3.11/lib/amber/render/template.rb:128:in `render_haml'
       /home/wxl/.rbenv/versions/2.3.0/lib/ruby/gems/2.3.0/gems/amber-0.3.11/lib/amber/render/template.rb:73:in `render_html'
       /home/wxl/.rbenv/versions/2.3.0/lib/ruby/gems/2.3.0/gems/amber-0.3.11/lib/amber/render/template.rb:55:in `render'
       /home/wxl/.rbenv/versions/2.3.0/lib/ruby/gems/2.3.0/gems/amber-0.3.11/lib/amber/render/view.rb:70:in `render'
       /home/wxl/git/riseup_help/amber/layouts/home.html.haml:15:in `block in singleton class'
       /home/wxl/git/riseup_help/amber/layouts/home.html.haml:131063:in `instance_eval'
       /home/wxl/git/riseup_help/amber/layouts/home.html.haml:131063:in `singleton class'
       /home/wxl/git/riseup_help/amber/layouts/home.html.haml:131061:in `__tilt_739184650'
       /home/wxl/.rbenv/versions/2.3.0/lib/ruby/gems/2.3.0/gems/tilt-2.0.7/lib/tilt/template.rb:170:in `call'
       /home/wxl/.rbenv/versions/2.3.0/lib/ruby/gems/2.3.0/gems/tilt-2.0.7/lib/tilt/template.rb:170:in `evaluate'
       /home/wxl/.rbenv/versions/2.3.0/lib/ruby/gems/2.3.0/gems/tilt-2.0.7/lib/tilt/haml.rb:19:in `evaluate'
       /home/wxl/.rbenv/versions/2.3.0/lib/ruby/gems/2.3.0/gems/tilt-2.0.7/lib/tilt/template.rb:109:in `render'
       /home/wxl/.rbenv/versions/2.3.0/lib/ruby/gems/2.3.0/gems/amber-0.3.11/lib/amber/render/layout.rb:46:in `render'
       /home/wxl/.rbenv/versions/2.3.0/lib/ruby/gems/2.3.0/gems/amber-0.3.11/lib/amber/render/view.rb:66:in `render'
       /home/wxl/.rbenv/versions/2.3.0/lib/ruby/gems/2.3.0/gems/amber-0.3.11/lib/amber/static_page/render.rb:131:in `block (2 levels) in render_content_files'
       /home/wxl/.rbenv/versions/2.3.0/lib/ruby/gems/2.3.0/gems/amber-0.3.11/lib/amber/static_page/render.rb:129:in `open'
       /home/wxl/.rbenv/versions/2.3.0/lib/ruby/gems/2.3.0/gems/amber-0.3.11/lib/amber/static_page/render.rb:129:in `block in render_content_files'
       /home/wxl/.rbenv/versions/2.3.0/lib/ruby/gems/2.3.0/gems/amber-0.3.11/lib/amber/static_page/render.rb:121:in `each'
       /home/wxl/.rbenv/versions/2.3.0/lib/ruby/gems/2.3.0/gems/amber-0.3.11/lib/amber/static_page/render.rb:121:in `render_content_files'
       /home/wxl/.rbenv/versions/2.3.0/lib/ruby/gems/2.3.0/gems/amber-0.3.11/lib/amber/static_page/render.rb:35:in `render_to_file'
       /home/wxl/.rbenv/versions/2.3.0/lib/ruby/gems/2.3.0/gems/amber-0.3.11/lib/amber/server.rb:139:in `render_page'
       /home/wxl/.rbenv/versions/2.3.0/lib/ruby/gems/2.3.0/gems/amber-0.3.11/lib/amber/server.rb:64:in `do_GET'
       /home/wxl/.rbenv/versions/2.3.0/lib/ruby/2.3.0/webrick/httpservlet/abstract.rb:107:in `service'
       /home/wxl/.rbenv/versions/2.3.0/lib/ruby/2.3.0/webrick/httpservlet/filehandler.rb:214:in `service'
       /home/wxl/.rbenv/versions/2.3.0/lib/ruby/2.3.0/webrick/httpserver.rb:140:in `service'
       /home/wxl/.rbenv/versions/2.3.0/lib/ruby/2.3.0/webrick/httpserver.rb:96:in `run'
       /home/wxl/.rbenv/versions/2.3.0/lib/ruby/2.3.0/webrick/server.rb:296:in `block in start_thread'

Add a French lexicon

Often I found myself translating terms that existed in English but did not in French, or worse, existed but was so obscure that nobody ever used it.

PR #309 makes it clear we need a French lexicon to have consistent translation.

Training feature for the statistical spam filter should be documented

From this support thread it looks like the training feature for the statistical filter is not documented in the help pages.

It was mentioned in a newsletter in 2014 ("If any legitimate mail gets put in your Spam folder, drag it over to your INBOX so our system can learn from its mistakes!"), but did not find its way into any of these help pages:

Design refactoring ideas

I have some questions / ideas about the help.r.n design and I'd like to discuss them with you before jump into the code and waste time to code things that may be rejected. :P

General

  • Change bootstrap link color to be the same has the header color or the U color in the logo

Status updates

Do you think is there a way to hide a part of the status updates and than keep the page a decent length or move them back to status.r.n?

Email and list links

It could be nice to find a way to make links (Get help on mail.; Login to webmail.; Request an account.; Reset lost password.; Change my settings.) easier to read and give them a better disposition.

Footer

  • Rearrange content
  • Remove system status
  • make a shorter and more simple link to invite people to contribute to the pages
  • Add link to the social medias accounts, irc and a link to the contact page for email key informations

What do you think about that, have you other ideas, comments, etc !?? :)

better browser extension & add-ons recommendations

The list on https://help.riseup.net/en/security/network-security/better-web-browsing is pretty out of date.

What browser extensions would we now recommend? My proposal:

Firefox

Recommended:

Additional protection (but likely to cause compatibility problems on many websites):

Not recommended:

  • TrackMeNot: an interesting idea to generate bogus search data, but better to just use DuckDuckGo.
  • Better Privacy: This is only needed if you have Flash installed or enabled. It is used to clean up LSO or the so called "flash cookie".
  • AdBlockPlus: uBlock is much better.
  • Privacy Badger: uBlock already blocks tracking, as well as ads. Privacy Badger does do social media widget replacement, which could be a reason to recommend installing it. Privacy Badger might be useful if there is a new tracking network that uBlock is not yet configured for, but this happens rarely.
  • Disconnect: No benefit over other free software alternatives. It is unclear where the Disconnect company is headed, since if you go to their website there is no link to install the Firefox extension anymore, they just want you to install their VPN.
  • Ghostery: Closed source, and no benefit over the free software alternatives.

Chrome

Recommended

  • uBlock

Black VPN Login Error

Hello, im unable to login (i actually have a acc) / register on https://black.riseup.net/

The login give me that message:

Ouch!
We ran into a server error.
The problem has been logged and we will look into it.

And on the register:

The server failed to process your request. We'll look into it (ActiveResource::ServerError).

And from Bitmask App on Linux im unable to login too, return me with invalid credentials.

VPN public address

I'm working on improving the German translations and stumbled on this page vpn/why-is-needed/en.text. It says:

When you connect to the RiseupVPN, your computer will get its own public internet IP address, even if your computer normally only has a non-public IP address like 198.162.0.1. Every time you connect, you will get a different randomly assigned public IP (if we temporarily run out of available public IPs, then you will get a shared IP instead). This makes running certain applications much easier or faster.

First of all, this doesn't seem to work as I've been getting the same IP every time I connect.
Secondly: How/with what does it help exactly? If the IPs are randomly assigned, hosting something behind the VPN is still difficult (if possible at all). Or this just about P2P stuff?

Donate Bitcoin link doesn't work

When I click on the donate button Grab a bitcoin address it says:

Not Found

The requested URL /new-bitcoin-address was not found on this server.

what's up with privacy badger?

why is privacy badger necessary, on top of ublock? the docs say:

Privacy Badger dynamically detects attempts to track your browsing behavior and blocks content from these trackers. Privacy Badger is not designed to stop ads, so it is not a replacement for uBlock, but it includes some security features that uBlock does not have.

What are those security features exactly?

Use dirmngr in OpenPGP best practices

Some of the options used in the OpenPGP best practices are deprecated, for example:

gpg: keyserver option 'ca-cert-file' is obsolete; please use 'hkp-cacert' in dirmngr.conf

It seems like the page needs to be updated to use dirmngr for some configuration.

Amber rebuild error

When I run amber rebuild I got this error:

/usr/local/lib64/ruby/gems/2.1.0/gems/i18n-0.7.0/lib/i18n.rb:284:in `enforce_available_locales!': :en is not a valid locale (I18n::InvalidLocale)
    from /usr/local/lib64/ruby/gems/2.1.0/gems/i18n-0.7.0/lib/i18n/config.rb:34:in `default_locale='
    from /usr/local/lib64/ruby/gems/2.1.0/gems/i18n-0.7.0/lib/i18n.rb:35:in `default_locale='
    from /usr/local/lib64/ruby/gems/2.1.0/gems/amber-0.3.3/lib/amber/site_configuration.rb:96:in `cleanup'
    from /usr/local/lib64/ruby/gems/2.1.0/gems/amber-0.3.3/lib/amber/site_configuration.rb:79:in `initialize'
    from /usr/local/lib64/ruby/gems/2.1.0/gems/amber-0.3.3/lib/amber/site_configuration.rb:46:in `new'
    from /usr/local/lib64/ruby/gems/2.1.0/gems/amber-0.3.3/lib/amber/site_configuration.rb:46:in `load'
    from /usr/local/lib64/ruby/gems/2.1.0/gems/amber-0.3.3/lib/amber/site.rb:17:in `initialize'
    from /usr/local/lib64/ruby/gems/2.1.0/gems/amber-0.3.3/lib/amber/cli.rb:40:in `new'
    from /usr/local/lib64/ruby/gems/2.1.0/gems/amber-0.3.3/lib/amber/cli.rb:40:in `rebuild'
    from /usr/local/lib64/ruby/gems/2.1.0/gems/amber-0.3.3/bin/amber:79:in `main'
    from /usr/local/lib64/ruby/gems/2.1.0/gems/amber-0.3.3/bin/amber:82:in `<top (required)>'
    from /usr/local/bin/amber:23:in `load'
    from /usr/local/bin/amber:23:in `<main>'

I run ruby 2.1.5 and amber 0.3.3.

GnuPG 2.1 best practices review

This is a meta-issue to regroup issues surrounding a formal review of the GnuPG best practices after the publication of the GnuPG 2.1 release, which includes some of the recommendations from the document.

  • #294 ca-cert-file option deprecated in GnuPG 2.1
  • #449 Use dirmngr in OpenPGP best practices
  • #450 GPG 2.1 use hkps by default
  • #447 Note hopenpgp-tools broken with GnuPG >= 2.1
  • #452 newer GnuPG releases generate revocation cert
  • #453 update key splitting procedure for GnuPG 2.1
  • #454 mention elliptic curve algorithms in best practices guide
  • #455 review default algorithms recommendations for GPG 2.1
  • #456 clarify that GPG doesn't store keys in pubring.kbx
  • #457 link to the 2.1 review issue

zine.riseup.net links are dead

zine.riseup.net links are dead. IMHO there are two long term options:

1 - you put it back up
2- you remove all the links

In the mean time I plan to replace the links by archive.org ones.

Document IMAP-IDLE client settings

The IMAP standard supports an extension named "IDLE" where a client can keep a connection open to the server and when new mail arrives at the server it "pushes" a notification to the client that mail is waiting and it is automatically retrieved. This can speed up mail delivery quite a bit and also has the benefits of clients not needing to check mail as often and reduced resource usage on the server. Riseup's IMAP server already supports it and it works well and several clients support it. It would be nice to document on our help pages so users enable it. I think this means the following:

riseup.net uses an invalid security certificate

since today the riseup.net SSL-certificate is outdated.

Tor Browser

riseup.net uses an invalid security certificate.
The certificate expired on 27.05.2016 23:59. The current time is 28.05.2016 10:08.
(Error code: sec_error_expired_certificate)

Mozilla Firefox

help.riseup.net uses an invalid security certificate.
The certificate expired on 28.05.2016 01:59. The current time is 28.05.2016 11:24.
Error code: SEC_ERROR_EXPIRED_CERTIFICATE

It is still possible to load the page with for example elinks as the expiration date is neither checked nor shown (press '=').

Link to "installing Ubuntu tutorial are dead"

On this page and its translation, there is a dead link on how to install Ubuntu.

Should we even recommend Ubuntu as a Windows replacement? Ubuntu is terrible and since the whole "We are selling your data to Amazon thing" I do not recommend it to anyone.

Linux Mint is nice and easy to install though and if the goal was to have something friendlier than Debian, I think we should go with it.

Add documentation for mutt

Hi, I hope that I can help to add documents for mutt email client to use with riseup and tor. Can I create a pull request?

WebRTC Blocking

I wonder why the WebRTC IP leak problem is not mentioned on the Better Web Browsing
Help page, as it is on this manual (which is really interesting, btw) : https://gist.github.com/atcuno/3425484ac5cce5298932

WebRTC has a major privacy issue in that it can be abused to leak the internal IP address of users. This is very useful for advertisers who wish to develop very unique identifiers for users. It can also be abused to deanonymize users that whom utilized VPNs and/or Tor (1, 2, 3) in order to hide their true identity.

To block WebRTC in Chrome you must install this plugin.
https://github.com/rentamob/WebRTC-Leak-Prevent
https://chrome.google.com/webstore/detail/webrtc-leak-prevent/eiadekoaikejlgdbkbdfeijglgfdalml

To disable WebRTC in Firefox:
Enter "about:config" in the URL bar
Find the key of "media.peerconnection.enabled"
Set the value to "false"

To test if the plugin is operating correctly, visit this website and make sure that your local IP address does not appear.
https://diafygi.github.io/webrtc-ips/

ca-cert-file option deprecated in GnuPG 2.1

Hello,

The OpenPGP Best Practices guide https://help.riseup.net/en/gpg-best-practices instructs users to add the following to ~/.gnupg/gpg.conf:

keyserver-options ca-cert-file=/path/to/CA/sks-keyservers.netCA.pem

However, for users running GnuPG 2.1, this will result in the following warning:

gpg: keyserver option 'ca-cert-file' is obsolete; please use 'hkp-cacert' in dirmngr.conf

Further, it will be ignored according to https://www.gnupg.org/documentation/manuals/gnupg/GPG-Configuration-Options.html

I think the guide should be updated accordingly, though I'm not sure whether the more recent option is supported on older versions that people may still be using.

Links in translations

The recent update to the es pages has left some broken links. I think that's because translators are translating both the [Link Name=> and the =>Link target], i.e. both the parts before and after the =>.

Should we add something in the README about this, e.g. suggesting that people not translate the part after the => ?

onion service best practices

There are some concerns I'd raise with the best practices recommended on this page: https://help.riseup.net/en/security/network-security/tor/onionservices-best-practices

First of all, the localhost exposure is almost unique to apache (nginx has a status page and I saw some time ago a lighttpd which provided such an interface but they'd need to be explicitly enabled, there are few default configs like debians apache which enabled mod_status on /server_status). (p.s. I twice had to tell you to disable this "quirk" ;)

Second of all binding to a public IP is a bad method to follow to stop this kind of problem, this makes your server and vhost potentially reachable to an external entity. There has been a growing number of attempts to discover the true location of sites behind cloudflare that are badly configured because they still expose their true httpd on a public IP address. People regularly use masscan and zmap to scan the entire ipv4 address space and I have also seen attempts to connect to a publicly exposed httpd and request "high-value" onion addresses from the httpd to see if they send a Host header and make the site serve their probed vhosts content.

Thirdly binding to a port that is different from the "true" port is a source of a potential leak on apache (lol apache again). If there is a directory, e.g. foo.onion/css/ then a request to foo.onion/css will cause apache to emit a 301 redirect, but when it does issue it, it will include the port that it thinks the service is listening on: instead of sending a 301 to foo.onion/css/ it would send a 301 for foo.onion:81/css/ this both breaks the website and reveals the port the httpd is really running on.

May also be worth mentioning using some kind of tails-like tor-or-fail packet filter if they don't opt to use a network namespace to isolate? unix sockets++ though

I was going to submit a pull request but what the heck is that formatting scheme? Sorry :( just raising an issue instead

Add a documentation for contributing

I wanted to contribute to the help but I doesn't know it at first, until I read each page. I hope that the help show ways to contribute to the help page.

verify fingerprint after recv-key

Currently, the openpgp best practices state:

Do not blindly trust keys from keyservers.

Anyone can upload keys to keyservers and there is no reason that you should trust that any key you download actually belongs to the individual listed in the key. You should therefore verify with the individual owner the full key fingerprint of their key. You should do this verification in real life or over the phone. Once you have verified the key fingerprint that you need, you may download the key from the keyserver pool:

gpg --recv-key 'fingerprint'

I thought that --recv-key is never enough, because the keyserver is not bound to return, necessarily, a key that matches the fingerprint and gpg does not actually confirm the fingerprint before importing.

Shouldn't this be like so?

gpg --recv-key '<fingerprint>'
gpg --fingerprint '<fingerprint>'

broken vpn troubleshooting links

Someone on twitter reported a missing vpn/troubleshooting page. I couldn't find how they had got there exactly, but there are some old references to it:

pages/vpn/vpn-red/pt.text:* [[vpn-howto/troubleshooting]].
pages/vpn/how-to/linux/de.md:Schau auf die [[Problemlösungsseite -> vpn/troubleshooting]].
pages/vpn/how-to/linux/en.md:Please check the [[Troubleshooting section -> vpn/troubleshooting]].
pages/vpn/de.text:* Etwas funktioniert nicht? [[Troubleshooting -> /vpn/troubleshooting]]
ages/vpn/how-to/linux/de.md:Bitmask muss sicherstellen, dass die Verbindung zu riseup.net sicher ist. Danach drücke *next*. Wenn bei diesem Schritt Probleme entstehen, siehe [[troubleshooting]].
pages/vpn/how-to/linux/fr.md:Allez dans la [[section Dépannages -> troubleshooting]].
ages/vpn/how-to/linux/en.md:Bitmask has to make sure that it can connect securily with riseup.net. After that press *next* to continue. If there is any issues in this step, please check the [[troubleshooting]].
pages/vpn/how-to/linux/pt.md:O Bitmask precisa se certificar que pode se conectar com seguraça a riseup.net. Depois, aperte *Next* para continuar. Se houver algum problema neste passo, consulte a página de [[troubleshooting]].
pages/vpn/how-to/linux/pt.md:Consulte a [[seção de _Resolução de problemas_ -> troubleshooting]].
pages/vpn/es.text:* ¿Algo no funciona? comprueba [[Resolución de problemas -> troubleshooting]]

and some old references to the how-to pages

pages/vpn/de.text:* Linux Benutzer? [[Installationsanleitung -> /vpn/how-to/linux]]
pages/vpn/de.text:* Android Benutzer? [[Installationsanleitung -> /vpn/how-to/android]]
pages/vpn/de.text:Um *Bitmask* auszuprobieren, lies die [[Installationsanleitung->vpn/how-to]]. Keine Angst!
pages/vpn/de.text:Die Bitmask-Anwendung läuft auf [[GNU/Linux->how-to/linux]] (als Debian/Ubuntu-Paket und als eigenständiges Paket für andere Distributionen), Mac OSX und [[Android->how-to/android]]. Bitte lies [[Installationsanleitung->how-to]].
pages/vpn/pt.text:Quer experimentar? Leia as [[instruções de instalação->vpn/how-to]]. Não tenha medo!
pages/vpn/pt.text:O aplicativo Bitmask funciona no [[GNU/Linux->how-to/linux]] (como pacote no Debian e no Ubuntu e como conjunto de pacotes em outras distribuições), Mac OSX e [[Android->how-to/android]]. Consulte as [[instruções de configuração->how-to]] para esses sistemas.

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.