Main Page
From GlobaLeaks wiki
Contents |
GlobaLeaks Project
The GlobaLeaks Wiki is the main source of information for getting involved in the Globaleaks Project and for staying up to date on all of the various projects which the GlobaLeaks development team is working on.
Software Projects
The GlobaLeaks project is composed of several sub-projects, all of which are part of our bigger picture of increasing transparency and accountability, and empowering people worldwide to strive for change.
All these software components are necessary in order to ensure a high degree of user and administrator privacy, distribution of responsibilities, ease of operations for a GlobaLeaks node.
Below is a summary of all the projects that the GlobaLeaks Project is currently working on or plans to:
This is the main software piece of the GlobaLeaks project and it is needed to run a whistleblowing site to handle submissions from web, desktop and mobile clients. It is designed to provide the best user experience, ease of setup, and operation, when run over Tor Hidden Services. GlobaLeaks is made up of two parts: GlobaLeaks Client, a pure Javascript HTML web application that can be built as a Chrome or Firefox plugin, or served off of a CDN and GlobaLeaks Backend a REST server (to be built) with Awaf
Delivery framework to provide web application developers a means of shipping a desktop (.exe/.app) application. It will contain all the necessary components for anonymous inbound and outbound communications with Tor. The Awaf project lets a web developer focus on a web application development without having to deal with all the system integration complexity (Tor, anonymyzation of outbound connection, Tor HS, Windows & OSX build system).
Software to expose a Tor Hidden Service as an internet reachable website. Built to be setup as a network of distributed servers and multiple networks. The project has it's own wiki page on http://wiki.tor2web.org and is now the effort of collaboration from different organizations working in anonymity environment.
Site (and software) to provide an index of Whistleblowing sites, with their capabilities, goals, reference and information. A GlobaLeaks site may register itself to LD, an users will review and comment on its pages, evaluating its effectiveness and value. The current wiki contains ongoing research on Whistleblowing (http://leakdirectory.org), but the true aims are of converting it into a full fledged web application with the specific goal of evaluating Whistleblowing sites.
Server software to implement Web widget indicating the users anonymity status. At the moment is just notifies if they are using Tor or not, but in future it may consider also other factors (maybe warn the user that he is using a non anonymous network, UltraSurf?).
Mobile Client Software to take Submissions from mobile devices (Audio, Video, Photo, Text), this requires some research on what is the most portable way to write a mobile client. Want to ensure compatibility between mobile platform (aiming in avoid different programming languages and frameworks between Symbian, iPhone, BlackBerry devices).
Software Daemon to handle incoming FAX, OCR them, anonymize them and submit to a third party application (GlobaLeaks, Twitter, Dropbox).
This is the first release of GlobaLeaks, is based on web2py framework, and is served whitin a virtual machine, a small debian Linux that can be used to easy test and configure a GlobaLeaks service. In 6 months deprecated.
Project Status
This summarize the main software project status
| Project | Status | Priority | Repository | Language | Contributors
|
|---|---|---|---|---|---|
| GLClient 0.2 | Early prototype | Critical | http://github.com/globaleaks/globaleaks/GLClient | Javascript, Backbone.js, Bootstrap, Require.js | hellais |
| GLBackend 0.2 | Early prototype | Critical | https://github.com/globaleaks/GLBackend | Python, Tornadoweb, Rest, Awaf | mmaker, hellais |
| Anonymous Web Application Framework | Early prototype | High | http://github.com/globaleaks/Awaf | Python, Pyinstaller, Tor, Tornadoweb | mmaker, hellais, naif |
| Tor2web 3.0 | Early prototype | High | http://github.com/globaleaks/Tor2web | Python, Tornadoweb, Rest, Awaf | hellais, naif |
| LeakDirectory | Require GL 0.2 | Medium | http://github.com/globaleaks/LeakDirectory | Python, Tornadoweb, Rest, Backbone.js, Bootstrap, Require.js | |
| PrivacyBadge | Working Prototype | Medium | http://github.com/globaleaks/TorCheck | PHP, Javascript, Python | hellais |
| GlobaLeaks Mobile | Require GL 0.2 | Low | n/a | Javascript, CSS3, Html, PhoneGap | |
| GLDroid | Working Advanced prototype | Low | http://github.com/globaleaks/GLDroid | Java, Android SDK | mpdroid |
| Fax2social | Advanced prototype | Low | http://github.com/globaleaks/Fax2social | Python, Win32, Ctypes, Omnipage, Oauth, Libtiff | agatti |
| GlobaLeaks 0.1 | Complete, Feature Freeze | Low | http://github.com/globaleaks/globaleaks | Python, Web2py, Tor, jQuery, jQuery-File-Uploader | hellais, vecna, mmaker, fox, evilaliv3, marcom, lk, naif |
| Tor2web 2.0 | Complete, Feature Freeze (survival mode) | Low | http://github.com/globaleaks/tor2web-2.0 | PHP, Glype, Apache, Privoxy, Tor | naif, hellais, vecna, evilaliv3 |
GSoc Project Ideas
The following is a comprehensive list of all project development proposal which are open to public contributions and suggestions.
The following projects list is also open to suggestions from students wishing to participate in Summer of Code. If you want to propose a project ideas use the GSoc Template, with special consideration for Skills and complexity.
If you want to get involved, please feel free to fork our github repos and make pull requests, or get in touch with us on IRC at irc.oftc.net #globaleaks.
We are applying for GSoC in 2012, here's our GSOC 2012 Application and our GSoc 2012 Student Application
Awaf
Description: GlobaLeaks and Tor2web are web applications. They need to be shipped also to Windows and OSX desktop environments in order to simplify the deployment of their corresponding server applications. Additionally, they need to be packaged with Tor, in order to handle the anonymization of outbound connections and to expose Tor Hidden Services.
The intent of this project is to implement Awaf, a common development framework to provide a desktop (.exe/.app) application with a builtin python web server, designed for anonymous inbound and outbound communications with Tor. The Awaf project will allow a web developer to concentrate on a web application without having to deal with all the system integration complexity (Tor, Tor HS, Windows & OSX build system).
The deliverable for this project is a cross-platform buildsystem that packages everything together, a set of APIs that can be used by the web application that uses AWAF and documentation on how to start using it.
Skills:
- Python, Pyinstaller, Tor, Anonymity
Difficulty:
- Moderate
Priority
- High
Possible Mentors:
Why you consider this cool:
- Because it allow Python web developers to easily ship an anonymous web application to be installed on a desktop computer without having to face all the complexity of integrating different pieces and applications.
GlobaLeaks Client
Description: The GlobaLeaks Web Client (GLClient) is a nouveau Javascript application that allows whistleblowers, node administrators, and receivers to interact with the GlobaLeaks Server via a REST interface.
The application pushes against some very important design constraints, specifically the need for modularity using the Javascript MV* framework, and to be compact and self-contained, in order to be also be usable in a browser opening it locally as an HTML5 application file and for use in PhoneGap based Mobile Applications.
GLClient will also integrate [1] OpenPGPJS for encrypted file submission.
Skills:
- Javascript (Backbone.js, Bootstrap, Require.js), HTML5, CSS3, REST, Web Mockups, a little bit of Python
Difficulty:
- Hard
Priority
- Critical
Possible Mentors:
Why you consider this cool:
- Because so far there are no highly-interactive, encrypted, cross-platfom web applications running over Tor.
Form Builder
Description: A whistleblowing site made with GlobaLeaks need to be flexible enough to be able to accept different kind of data that can be acquired trough a set of Forms. The Form Builder is a Javascript/Python web application that allows an administrator to create, customize, and deploy online submission forms, complete with wizards to walk users though the submission forms. The forms and wizards will be created and configured on the server, and will be provided to the Javacript client via a REST interface. The user is allowed to interact with the forms and wizards which are preloaded with a single HTTP request in a highly interactive way, even if the remote server answers very slowly.
This module will be integrated within the Awaf framework and will additionally be used as part of GlobaLeaks Backend software.
Skills:
- Mostly Javascript (Backbone.js, Require.js), REST framework
Difficulty:
- Moderate
Priority
- High
Possible Mentors:
Why you consider this cool:
- The Form Builder will allow a clear-cut and easy means for administrators to setup an interface for users to interact with while submitting documents and information to the whistleblowing site.
Tor2web 3.0
Description:
Skills:
- Python 3, Tornadoweb, Awaf, HTML/CSS/JS Parsing/Fixing, TCP Sockets multiplexing,
Difficulty:
- Hard
Priority
- High
Possible Mentors:
Why you consider this cool:
- Because current Tor2web 2.0 doesn't scale and the world really needs an anonymous distributed internet publishing system.
