Opened 8 years ago

Closed 8 years ago

#3315 closed enhancement (implemented)

update our tor-legal-faq from eff's new version

Reported by: arma Owned by: phobos
Priority: Medium Milestone:
Component: Webpages/Website Version:
Severity: Keywords:
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

https://www.eff.org/torchallenge/legal-faq

We should grab the text parts of it, convert it to wml, and update our page.

Child Tickets

Change History (6)

comment:1 Changed 8 years ago by wseltzer

I wonder about "Should I run an exit relay from my home?" The current text seems a bit alarmist to me. We're not aware of any United States incidents, and few outside the United States. Shall we also suggest university research facilities?

Instead of the Yes/No, what about: "Where should I run an exit relay?"

Since exit relays appear to be the "source" of traffic routed through the Tor network, you might consider running exit relays from network colocation or non-home locations.

If law enforcement becomes interested in traffic from your exit relay, it's possible that officers will seize the computer to look for evidence. For that reason, it's probably best not to run your exit relay in your home or using your home Internet connection.

Instead, consider running your exit relay in a commercial collocation facility where you contract for Internet services, or in a university or research setting. Have a separate IP address for your exit relay, and don't route your own traffic through it.

Of course, you should avoid keeping any sensitive or personal information on the computer hosting your exit relay, and you never should use that machine for any illegal purpose.

comment:2 in reply to:  1 Changed 8 years ago by arma

Replying to wseltzer:

I wonder about "Should I run an exit relay from my home?" The current text seems a bit alarmist to me.

Right -- that issue stuck out for me as well.

More generally, it seems that the tor legal faq has two types of questions: legal questions and more fuzzy practical advice.

I can see two benefits to saying a clear "No" about running an exit relay at home. The first benefit is that it reduces the number of users who get surprised. The second benefit is that EFF can respond with "we clearly told you not to do that" if anybody comes to them in that situation.

But I worry about the edge case on the other side, where somebody actually has a good relationship with their ISP, and it's a reasonable situation for running an exit relay there, but they read the FAQ entry and decide against it "because the EFF told me I should never do that."

comment:3 Changed 8 years ago by cypherpunks

For the home user advice, how about instead of "No" saying "Probably not" and then noting what Roger just said, viz: You may of a good relationship with your ISP and be in a reasonable situation to run an exit relay from home, but for most people the risk is too great... followed by existing or similar text about the risks.

My guess however is that it's not worth it at the moment, and the more negative version makes sense. The expected increase in exit nodes and capacity will not be enough to make up for the expected negative reactions/publicity/network-dynamics resulting from even just a few people who thought they were OK and were surprised to be wrong. But this is just my gut sense with no real knowledge to back it up. -Paul

comment:4 Changed 8 years ago by phobos

Status: newaccepted

What if we just pointed them at the eff versions, rather than convert? I find these new versions are defanged and wishy-washy compared to what we have now.

comment:5 Changed 8 years ago by wseltzer

Sure, we could just link. Or we could rebrand our versions as not-the-EFF, since they seem to care and I agree the new ones are weaker.

comment:6 Changed 8 years ago by phobos

Resolution: implemented
Status: acceptedclosed

replaced our copy with EFF's.

Note: See TracTickets for help on using tickets.