1 99:59:59,999 --> 99:59:59,999 ... wanted to be able to use 2 99:59:59,999 --> 99:59:59,999 Thunderbird and GnuPG together with Tor, 3 99:59:59,999 --> 99:59:59,999 and so we thought: 4 99:59:59,999 --> 99:59:59,999 oh, it would be really easy, I bet, 5 99:59:59,999 --> 99:59:59,999 to configure Thunderbird to work with Tor 6 99:59:59,999 --> 99:59:59,999 - hah - so a new Free software project was born. 7 99:59:59,999 --> 99:59:59,999 It's a really simple thing, but basically 8 99:59:59,999 --> 99:59:59,999 it's just a package that hooks it all together. 9 99:59:59,999 --> 99:59:59,999 So a lot of people were using Thunderbird 10 99:59:59,999 --> 99:59:59,999 and TorBirdy, and GnuPG, and Tor, 11 99:59:59,999 --> 99:59:59,999 and Debian, together for email, 12 99:59:59,999 --> 99:59:59,999 combined with Riseup as an email service. 13 99:59:59,999 --> 99:59:59,999 So it's a literally a real peer to peer, Free software driven set of things, 14 99:59:59,999 --> 99:59:59,999 actually, that made it possible. 15 99:59:59,999 --> 99:59:59,999 [question]: So one thing I never understood about this 16 99:59:59,999 --> 99:59:59,999 process was exactly how the documents were handled, and maybe that's because nobody 17 99:59:59,999 --> 99:59:59,999 wants to say, but, you know, did you leave them on a server somewhere and download 18 99:59:59,999 --> 99:59:59,999 them, hand them over to people, and who took what where, and how do you... 19 99:59:59,999 --> 99:59:59,999 in case I need to do something really dangerous with a load of documents, 20 99:59:59,999 --> 99:59:59,999 what's the best way of doing it? 21 99:59:59,999 --> 99:59:59,999 [laughter] 22 99:59:59,999 --> 99:59:59,999 [Jacob]: Hmm! 23 99:59:59,999 --> 99:59:59,999 [audience member]: It's a good thing this isn't being streamed. 24 99:59:59,999 --> 99:59:59,999 I'm sorry, what? 25 99:59:59,999 --> 99:59:59,999 There was a voice from god, what did she say? 26 99:59:59,999 --> 99:59:59,999 [audience]: I said good we aren't streaming tonight. 27 99:59:59,999 --> 99:59:59,999 Oh yeah, so hello to all of our friends 28 99:59:59,999 --> 99:59:59,999 in domestic and international surveillance services. 29 99:59:59,999 --> 99:59:59,999 Well, so I won't answer your question, 30 99:59:59,999 --> 99:59:59,999 but since you asked the question, it's my turn to talk. 31 99:59:59,999 --> 99:59:59,999 So what I would say is that... 32 99:59:59,999 --> 99:59:59,999 if you want to do clandestine activities 33 99:59:59,999 --> 99:59:59,999 that you fear for your life for, 34 99:59:59,999 --> 99:59:59,999 you need to really think about the situation that you're in 35 99:59:59,999 --> 99:59:59,999 very carefully. 36 99:59:59,999 --> 99:59:59,999 And so a big part of this is operational security 37 99:59:59,999 --> 99:59:59,999 and a big part of that is compartmentalization. 38 99:59:59,999 --> 99:59:59,999 So certain people had access to certain things, 39 99:59:59,999 --> 99:59:59,999 but maybe they couldn't decrypt them, 40 99:59:59,999 --> 99:59:59,999 and certain things were moved around, 41 99:59:59,999 --> 99:59:59,999 and that's on a need to know basis, 42 99:59:59,999 --> 99:59:59,999 and those people who knew, 43 99:59:59,999 --> 99:59:59,999 which is not me - I don't know anything, I don't know what you're talking about. 44 99:59:59,999 --> 99:59:59,999 Those people knew, and then you know, 45 99:59:59,999 --> 99:59:59,999 it'll go with them to their grave. 46 99:59:59,999 --> 99:59:59,999 So if you're interested in being the next Edward Snowden, 47 99:59:59,999 --> 99:59:59,999 you need to do your homework 48 99:59:59,999 --> 99:59:59,999 in finding people that will be able to do the other part of it, let's say. 49 99:59:59,999 --> 99:59:59,999 But just in general, I mean 50 99:59:59,999 --> 99:59:59,999 compartmentalization is key, right. 51 99:59:59,999 --> 99:59:59,999 So it's not just for AppArmor profiles. 52 99:59:59,999 --> 99:59:59,999 So you need to think about what you want to do. 53 99:59:59,999 --> 99:59:59,999 And I mean a big part of this is to consider that the network itself 54 99:59:59,999 --> 99:59:59,999 is the enemy, even though it is useful for communicating. 55 99:59:59,999 --> 99:59:59,999 So all the metadata that exists on the network 56 99:59:59,999 --> 99:59:59,999 could have tipped people off, could have caused 57 99:59:59,999 --> 99:59:59,999 this whole thing to fall apart. 58 99:59:59,999 --> 99:59:59,999 It really is amazing, I feel like you know 59 99:59:59,999 --> 99:59:59,999 two and half, three years ago, 60 99:59:59,999 --> 99:59:59,999 when you talk about Free software, 61 99:59:59,999 --> 99:59:59,999 and you talk about the idea of Free software, 62 99:59:59,999 --> 99:59:59,999 and you talk about issues relating to autonomy and privacy, and security 63 99:59:59,999 --> 99:59:59,999 you have a really different reception now than you did then, 64 99:59:59,999 --> 99:59:59,999 and that's really what it took 65 99:59:59,999 --> 99:59:59,999 to turn the world half a degree, or something, 66 99:59:59,999 --> 99:59:59,999 or a quarter of a degree or something. 67 99:59:59,999 --> 99:59:59,999 So I'm not going to tell you about detailed plans for conspiracy, 68 99:59:59,999 --> 99:59:59,999 but I highly encourage you to read about South African history, 69 99:59:59,999 --> 99:59:59,999 in particular the history of Umkhonto we Sizwe. 70 99:59:59,999 --> 99:59:59,999 They are the clandestine communications group for MK, 71 99:59:59,999 --> 99:59:59,999 or rather the operation who lay inside of MK, 72 99:59:59,999 --> 99:59:59,999 which is Umkhonto we Sizwe, 73 99:59:59,999 --> 99:59:59,999 and they are sort of with the African National Congress, 74 99:59:59,999 --> 99:59:59,999 and those people have published so many books about the revolutionary activities 75 99:59:59,999 --> 99:59:59,999 to overthrow the apartheid state. 76 99:59:59,999 --> 99:59:59,999 If you read these books, especially the book "Operation Vula" 77 99:59:59,999 --> 99:59:59,999 and "Armed and Dangerous" by Ronnie Kasrils 78 99:59:59,999 --> 99:59:59,999 they give you some idea about what you need to do 79 99:59:59,999 --> 99:59:59,999 which is to compartmentalize, 80 99:59:59,999 --> 99:59:59,999 how to find people to do various tasks, specific tasks, 81 99:59:59,999 --> 99:59:59,999 how to work on building trust with each other, what that looks like, 82 99:59:59,999 --> 99:59:59,999 how to identify political targets, 83 99:59:59,999 --> 99:59:59,999 how you might use things like communications technology 84 99:59:59,999 --> 99:59:59,999 to change the political topic on, 85 99:59:59,999 --> 99:59:59,999 and the discussion in general. 86 99:59:59,999 --> 99:59:59,999 And I think the best way to learn about these things is to study previous people 87 99:59:59,999 --> 99:59:59,999 who have tried to do that kind of stuff. 88 99:59:59,999 --> 99:59:59,999 And the NSA is not the apartheid regime of South Africa, 89 99:59:59,999 --> 99:59:59,999 but there are still lessons to be learned there, 90 99:59:59,999 --> 99:59:59,999 so if you really want to know the answer to that, also Che Guevara's manual 91 99:59:59,999 --> 99:59:59,999 on guerilla warfare is very interesting, 92 99:59:59,999 --> 99:59:59,999 and there's a lot of other books like that. 93 99:59:59,999 --> 99:59:59,999 I'd be happy to talk about it with you later. 94 99:59:59,999 --> 99:59:59,999 And I have nothing to do with anything that we may or may not have done. 95 99:59:59,999 --> 99:59:59,999 [laughter] 96 99:59:59,999 --> 99:59:59,999 [question]: Do you think there is a chance that things may get better 97 99:59:59,999 --> 99:59:59,999 for example I know that publicly, some programs were not extended 98 99:59:59,999 --> 99:59:59,999 but I don't know what is happening in the background 99 99:59:59,999 --> 99:59:59,999 so maybe it's the same thing but they are pretending that it's not 100 99:59:59,999 --> 99:59:59,999 How do you see this? 101 99:59:59,999 --> 99:59:59,999 [Jacob]: Well I think a couple of things. 102 99:59:59,999 --> 99:59:59,999 In general I think what happened, not just with this movie but with all of these things 103 99:59:59,999 --> 99:59:59,999 is that in inspired hope, 104 99:59:59,999 --> 99:59:59,999 and the hope is very important, 105 99:59:59,999 --> 99:59:59,999 but hope is not a strategy for survival, or for building alternatives, 106 99:59:59,999 --> 99:59:59,999 so what it has also done, is that it has allowed us to raise the profile 107 99:59:59,999 --> 99:59:59,999 of the things which actually do make it better. 108 99:59:59,999 --> 99:59:59,999 For example ridding ourselves of the chains of proprietary software 109 99:59:59,999 --> 99:59:59,999 is something that's a serious discussion with people that wouldn't have previously 110 99:59:59,999 --> 99:59:59,999 talked about Free software because they don't care about liberty, 111 99:59:59,999 --> 99:59:59,999 they care about security. 112 99:59:59,999 --> 99:59:59,999 And even though I think those are really simliar things, 113 99:59:59,999 --> 99:59:59,999 previously they just thought we were just Free software hippies, 114 99:59:59,999 --> 99:59:59,999 in tie-dye shirts 115 99:59:59,999 --> 99:59:59,999 and while that may be true on the weekends and evenings 116 99:59:59,999 --> 99:59:59,999 or with Bdale every day [laughter] 117 99:59:59,999 --> 99:59:59,999 I think that actually does make it better 118 99:59:59,999 --> 99:59:59,999 And it also changes the dialogue, in the sense that it's no longer reasonable 119 99:59:59,999 --> 99:59:59,999 to pretend that mass surveillance and surveillance issues don't matter, 120 99:59:59,999 --> 99:59:59,999 because if you really go down the rabbit-hole 121 99:59:59,999 --> 99:59:59,999 of thinking about what the security services are trying to do 122 99:59:59,999 --> 99:59:59,999 it becomes obvious that we want to encrypt everything all the time 123 99:59:59,999 --> 99:59:59,999 to beat selector-based surveillance and dragnet-based surveillance. 124 99:59:59,999 --> 99:59:59,999 It doesn't matter if something is authenticated 125 99:59:59,999 --> 99:59:59,999 You could still trigger some action to take place 126 99:59:59,999 --> 99:59:59,999 with these kinds of surveillance machines 127 99:59:59,999 --> 99:59:59,999 that could for example drone strike someone, 128 99:59:59,999 --> 99:59:59,999 and so it raises that. 129 99:59:59,999 --> 99:59:59,999 And that gives me a lot of hope too, 130 99:59:59,999 --> 99:59:59,999 because people understand the root of the problem, 131 99:59:59,999 --> 99:59:59,999 or the root of many problems 132 99:59:59,999 --> 99:59:59,999 and the root of some violence in the world, actually. 133 99:59:59,999 --> 99:59:59,999 And so it helps us to reduce that violence 134 99:59:59,999 --> 99:59:59,999 by getting people to acknowledge that it's real 135 99:59:59,999 --> 99:59:59,999 and also that they care about it 136 99:59:59,999 --> 99:59:59,999 and that we care about each other. 137 99:59:59,999 --> 99:59:59,999 So that really gives me a lot of hope, and part of that is Snowden 138 99:59:59,999 --> 99:59:59,999 and part of that is the documents 139 99:59:59,999 --> 99:59:59,999 but the other part of it is that.. 140 99:59:59,999 --> 99:59:59,999 I don't want to blow it up and make it sound like we did something 141 99:59:59,999 --> 99:59:59,999 like a big deal, 142 99:59:59,999 --> 99:59:59,999 but in a sense, Laura, Glen, myself and a number of other people 143 99:59:59,999 --> 99:59:59,999 were really not sure we would ever be able to travel home to our country 144 99:59:59,999 --> 99:59:59,999 that we wouldn't be arrested. 145 99:59:59,999 --> 99:59:59,999 I actually haven't been home in over two and half years, 146 99:59:59,999 --> 99:59:59,999 well, two years and three months or something 147 99:59:59,999 --> 99:59:59,999 I went out on a small business trip that was supposed to last two weeks 148 99:59:59,999 --> 99:59:59,999 and then this happened 149 99:59:59,999 --> 99:59:59,999 and I've been hear ever since. 150 99:59:59,999 --> 99:59:59,999 It's a really long, crazy trip. 151 99:59:59,999 --> 99:59:59,999 But the point is that that's what was necessary to make some of these changes 152 99:59:59,999 --> 99:59:59,999 and eventually it will turn around 153 99:59:59,999 --> 99:59:59,999 and I will be able to go home, 154 99:59:59,999 --> 99:59:59,999 and Laura and Glen will be able to travel to the US again. 155 99:59:59,999 --> 99:59:59,999 Obviously, Julian is still stuck in the Ecuadorian embassy 156 99:59:59,999 --> 99:59:59,999 Sarah lives in exile in Berlin, 157 99:59:59,999 --> 99:59:59,999 I live in exile in Berlin, 158 99:59:59,999 --> 99:59:59,999 And Ed is in Moscow 159 99:59:59,999 --> 99:59:59,999 So we're not finished with some of these things 160 99:59:59,999 --> 99:59:59,999 and it's also possible that we are, the set of people I mentioned, 161 99:59:59,999 --> 99:59:59,999 the state we're in, will stay that way forever. 162 99:59:59,999 --> 99:59:59,999 But what matters is that the rest of the world 163 99:59:59,999 --> 99:59:59,999 can actually move on and fix some of these problems, 164 99:59:59,999 --> 99:59:59,999 and I have a lot of hope about that. 165 99:59:59,999 --> 99:59:59,999 And I see a lot of change, that's the really big part. 166 99:59:59,999 --> 99:59:59,999 Like I see the reproducible build stuff that Holger and Lunar are working on. 167 99:59:59,999 --> 99:59:59,999 People really understand the root reason for needing to do that 168 99:59:59,999 --> 99:59:59,999 and actually seems quite reasonable to people 169 99:59:59,999 --> 99:59:59,999 who would previously have expended energy against it, 170 99:59:59,999 --> 99:59:59,999 in support of it, so I think that's really good. 171 99:59:59,999 --> 99:59:59,999 And there's a lot of other hopeful things. 172 99:59:59,999 --> 99:59:59,999 So I would try and be as uplifting as possible. 173 99:59:59,999 --> 99:59:59,999 It's not just the rum! 174 99:59:59,999 --> 99:59:59,999 [question]: Near the end of the film we saw something about another source. 175 99:59:59,999 --> 99:59:59,999 I may have been missing some news or something 176 99:59:59,999 --> 99:59:59,999 but I don't remember anything about that being public. 177 99:59:59,999 --> 99:59:59,999 Do you know what happened to them? 178 99:59:59,999 --> 99:59:59,999 [Jacob]: As far as I know any other source that was mentioned in the film 179 99:59:59,999 --> 99:59:59,999 is still anonymous, and they're still free. 180 99:59:59,999 --> 99:59:59,999 I'm not exactly sure because I was not involved in that part 181 99:59:59,999 --> 99:59:59,999 but I also saw the end of the film 182 99:59:59,999 --> 99:59:59,999 and I've seen a bunch of other reporting which wasn't attributed to anyone in particular 183 99:59:59,999 --> 99:59:59,999 So the good news... there's an old slogan from the Dutch hacker community, right? 184 99:59:59,999 --> 99:59:59,999 "Someone you trust is one of us, 185 99:59:59,999 --> 99:59:59,999 and the leak is higher up in the chain of command than you" 186 99:59:59,999 --> 99:59:59,999 And I feel like that might be true again, hopefully. 187 99:59:59,999 --> 99:59:59,999 I think that guy has a question as well. 188 99:59:59,999 --> 99:59:59,999 [question]: Part of the problem initially was that encryption software 189 99:59:59,999 --> 99:59:59,999 was not so easy to use, right? 190 99:59:59,999 --> 99:59:59,999 And I think part of the challenge for everyone 191 99:59:59,999 --> 99:59:59,999 was to improve on that situation to make it better 192 99:59:59,999 --> 99:59:59,999 so I'm asking you if you've observed any change and to the rest of the room 193 99:59:59,999 --> 99:59:59,999 have we done anything to improve on that? 194 99:59:59,999 --> 99:59:59,999 [Jacob]: I definitely think that there is a lot of free software 195 99:59:59,999 --> 99:59:59,999 that makes encryption easier to use, 196 99:59:59,999 --> 99:59:59,999 though not always on free platforms, which is heart-breaking. 197 99:59:59,999 --> 99:59:59,999 For example Moxie Marlinspike has done a really good job 198 99:59:59,999 --> 99:59:59,999 with Signal, Textsecure and Redphone 199 99:59:59,999 --> 99:59:59,999 and making end-to-end, encrypted calling, texting, sexting, 200 99:59:59,999 --> 99:59:59,999 and whatever apps, 201 99:59:59,999 --> 99:59:59,999 sext-secure is what I think it's nicknamed 202 99:59:59,999 --> 99:59:59,999 and I'm very impressed by that, and it works really well 203 99:59:59,999 --> 99:59:59,999 and it's something which in the last two years 204 99:59:59,999 --> 99:59:59,999 if you have a cell-phone, which I don't recommend 205 99:59:59,999 --> 99:59:59,999 but if you have a cell-phone, and you put in everyone's phone number, 206 99:59:59,999 --> 99:59:59,999 a lot of people that I was classify as non-technical, 207 99:59:59,999 --> 99:59:59,999 that don't care about Free software as a hobby or as a passion 208 99:59:59,999 --> 99:59:59,999 or as a profession. 209 99:59:59,999 --> 99:59:59,999 You see their names in those systems 210 99:59:59,999 --> 99:59:59,999 often more than some of the Free software people, 211 99:59:59,999 --> 99:59:59,999 and that's really impressive to me 212 99:59:59,999 --> 99:59:59,999 and I think there's been a huge shift just generally about those sorts of things 213 99:59:59,999 --> 99:59:59,999 also about social responsibility 214 99:59:59,999 --> 99:59:59,999 or people understand they have a responsibility to other people 215 99:59:59,999 --> 99:59:59,999 to encrypt communications, and not to put people in harm's way 216 99:59:59,999 --> 99:59:59,999 by sending unsafe stuff over unsafe communication lines 217 99:59:59,999 --> 99:59:59,999 So I think in my personal view it's better. 218 99:59:59,999 --> 99:59:59,999 But the original problem wasn't actually that the encryption was hard to use. 219 99:59:59,999 --> 99:59:59,999 I think the main problem is people didn't understand the reason 220 99:59:59,999 --> 99:59:59,999 that it needed to be done 221 99:59:59,999 --> 99:59:59,999 and they believed the lie that is targetted versus mass surveillance 222 99:59:59,999 --> 99:59:59,999 And there's a big lie, and the lie is that there is such a thing 223 99:59:59,999 --> 99:59:59,999 as targeted surveillance. 224 99:59:59,999 --> 99:59:59,999 In the modern era, most so-called targetted surveillance actually happens 225 99:59:59,999 --> 99:59:59,999 through mass surveillance. 226 99:59:59,999 --> 99:59:59,999 They gather everything up, and then they look through the thing 227 99:59:59,999 --> 99:59:59,999 they've already seized. 228 99:59:59,999 --> 99:59:59,999 And of course there are targetted, focussed attacks. 229 99:59:59,999 --> 99:59:59,999 But the main thing is that the abuse of surveillance often happens 230 99:59:59,999 --> 99:59:59,999 on an individual basis 231 99:59:59,999 --> 99:59:59,999 It also has a societal cost. 232 99:59:59,999 --> 99:59:59,999 I think a lot of people really understand that. 233 99:59:59,999 --> 99:59:59,999 It's probably because I also live in Germany now for the last two years 234 99:59:59,999 --> 99:59:59,999 but I feel that German society in particular is extremely aware 235 99:59:59,999 --> 99:59:59,999 of these abuses in the modern world 236 99:59:59,999 --> 99:59:59,999 and they have a historical context that allows them to talk about it 237 99:59:59,999 --> 99:59:59,999 with the rest of the world, where the rest of the world doesn't downplay it. 238 99:59:59,999 --> 99:59:59,999 So this is how other people relate to Germany 239 99:59:59,999 --> 99:59:59,999 not just about Germans relate to each other. 240 99:59:59,999 --> 99:59:59,999 And that has also been really good for just meeting regular people 241 99:59:59,999 --> 99:59:59,999 who really care about it, 242 99:59:59,999 --> 99:59:59,999 and who really want to do things. 243 99:59:59,999 --> 99:59:59,999 So people's parents email me, and are like 244 99:59:59,999 --> 99:59:59,999 "I want to protect my children, 245 99:59:59,999 --> 99:59:59,999 what's the best way to use crypto with them" 246 99:59:59,999 --> 99:59:59,999 You know, things like that. 247 99:59:59,999 --> 99:59:59,999 And I didn't every receive emails like that in the past 248 99:59:59,999 --> 99:59:59,999 and that's to me is uplifting and very positive.