Saturday, 28 November 2009

12. Freenet users watch your back!

The Guardian recently ran an interesting article on ‘Freenet’ – you can read it here.

Freenet claims to provide a secure way for trusted partners to communicate online, swap files and generally stay off the radar. Burmese rebels, Tibetan dissidents, Thai ex-prime ministers, along with unlikely bedfellows such as the ALF and the National Front - basically anyone who wants to communicate anonymously or without censorship will find it useful.

Given that even having ‘Freenet’ on your computer could be incriminating in some countries, I wanted to know how easy it was to uninstall and ‘clean’ my computer of any evidence of having been a Freenet user at all. What I found surprised me.

First of all, there is talk in the scant guide offered with Freenet of ‘a panic button’ – I imagined something to hit if the heavy jackboots start thudding up the stairs. What would the panic button do? Immediately wipe all Freenet-associated files from my hard disk? Hmm, I don’t know, because I couldn’t find the panic button in the copy I downloaded and ran. Even if there was one somewhere, the fact that it isn’t under my nose means it wouldn’t be much use in a hurry.

More worrying for people who are at risk for just being Freenet users (I would think those in Burma, N. Korea, China to name an obvious few of many), is how hard it was to actually remove Freenet from my computer. The uninstaller provided with each download merely removed the program files from my Applications list into my Trash list. It did not remove them from the computer. Further, even though I was running my browser in ‘Privacy mode’, links to Freenet ‘keys’ were stored in my browser Cache history. This is particularly worrying if you don’t bother to check, since the advice from Freenet is to use a separate and dedicated browser – meaning everything in your cache will be freenet related. No need for anyone examining your computer to sort through thousands of innocuous logs to find the Freenet ones.

Still, none of that is of as much concern as this: manually deleting Freenet from my computer was not as simple as emptying the cache and Trash files. The cache went into the trash, so to speak, but the Trash folder with Freenet files in it could not be emptied from the desktop no matter what I did. Some files had been automatically locked by Freenet, and the whole Trash application froze trying to unsuccessfully delete them. In short, I had to do a ‘sudo’ from the command line to forcibly remove them, a process that if you don’t know how to do you’d better learn if you plan on using Freenet in a hostile environment. I’d also say you’d better learn how to do it quick (maybe write yourself a script), because wiping all trace of Freenet off my computer took me the best part of an hour the first time I tried it.

8 comments:

  1. Postscript: incidentally, even the sudo rm -rf ~/.trash command doesn't really remove the files from your computer as I understand it. All it does is make them invisible and overwritable. If they take your computer away and examine the hard disk sector by sector, they'll find the 'erased' files for sure.

    I believe there are 'disk wipe' programs available that will actually overwrite unwanted data, though I don't use them myself and can't offer any recommendations (if anyone has any, please post a comment/link here, thanks!).

    ReplyDelete
  2. clicked 'bollox' by accident while scrolling. sry.

    ReplyDelete
  3. "I believe there are 'disk wipe' programs available that will actually overwrite unwanted data, though I don't use them myself and can't offer any recommendations (if anyone has any, please post a comment/link here, thanks!)."

    Try shred.

    ReplyDelete
  4. You should have submitted this as a feature request. It's all valid, but you do have to remember that current version of Freenet is 0,7,5 which means it's before 1; in the software world this implies that not all the features needed have been implemented yet.

    As for the panic button, it removes (but not wipes from hard drive) the downloads and inserts which you had running when you hit it.

    ReplyDelete
  5. This blog is very interesting, i liked because show many good new ideas. I must to say it catched my attention. I like to know about everything and i am fan of the watches. I prefer to see several style before to buy one.
    _______________
    buy viagra

    ReplyDelete
  6. The panic button only shows up if you have the correct physical security level. If you set it to LOW, then don't complain: if you don't care about security then you don't care about security! The panic button was only ever intended to remove data related to what you have actually been browsing however. Removing all evidence of a specific program quickly and on any operating system is an extremely difficult problem. However, evidently we do need a better uninstaller on Mac, if it is leaving stuff in the Trash can. I have filed a bug here:
    https://bugs.freenetproject.org/view.php?id=4986

    ReplyDelete
  7. just run a VM with it's drive on a USB memory stick... very easy to pull it out and destroy it

    ReplyDelete
  8. I'm commenting over a decade late, but Google trawled up your little post when I, too, searched for where to find this elusive panic button on Freenet.

    BTW it's 2023 and the version is still at 0.7.5 -- not every developer is driven like Micro$oft to needless upgrades, I guess?

    Anyways... I found the panic button under the 'Filesharing' tab although the throwaway comment that you refer to, and that I, too, had read but couldn't locate again when I wanted to, called it "Downloads section" or something.

    Secondly, I believe I can answer the reason why your uninstall was unsuccessful with files undeletable even from the recycle bin folder -- Did you remember to Shutdown Freenet before you uninstalled?

    You have to bear in mind that since the browsing of the darknet is obfuscated eschewing the using of the ubiquitous 'DNS', every user (designated as a 'peer' by the FreeNet system) is advertising themselves as well as listening for such beacons. i.e. running the FreeNet Node. On my Linux machine the node autostarts although I may have chosen for it to do that at install time, of which I have no recollection.

    And as you know, files in use can be locked by the OS from being deleted. So instead of panicking and throwing all kinds of 'wipers' and 'cleaners' programmes at this, first simply look if you have shutdown your FreeNet node. At the bottom of the main (home) page of your node (accessed at localhost:8888) you'll find two buttons to stop or shut down your node and another to restart it.

    ReplyDelete