Re: Tor exit nodes

[Russell Coker <russell@coker.com.au>]

On Monday, 9 October 2017 4:11:21 PM AEDT Lars Wirzenius wrote:
> I agree that it is pointless to just shower unineterested people with
> smartcards. However, it's also clear that it'd be good for more DDs to
> use them.

One problem with the uptake is that as few DDs are using any particular 
variant the amount of effort is higher than it would be if many/most DDs used 
it.

I also own some crypto hardware I'm not using because setting it up when no-
one else I know is using it is a PITA.

> * It's not all _that_ hard to learn how to use them. There's material
>   to learn that online that works. Thus, I agree with Santiago's
>   suggestion Debian asks for interest first. Also, some of us already
>   have the hardware, and don't want more (I have, I don't).

Sure it's not that hard, but there's a huge list of "not that hard" tasks that 
I could usefully do.

> * I think having security and crypto training at every Debconf would
>   be a good idea: how to use gpg, how to configure gpg well, how to
>   secure one's laptop, etc.

A really good idea!

> * The Yubikey 4 seems to be the best hardware option. It's not free
>   hardware, however. I'm OK with that for my own use, and I'd be OK
>   for that for Debian's use. But before Debian spends money on that,
>   we should have consensus that it's OK. I'm also OK for Debian to
>   choose an option with free-er hardware, but have no personal
>   experience with those.
> 
> * One Yubikey model 4 is $40 (plus postage) on Amazon.com. Times 1000
>   DDs, that's a lot of money for Debian. Can we find someone to
>   sponsor them? Maybe Yubico itself?

Yubikey generally drops their prices over time and also does bulk deals at 
lower prices.  I would almost bet money that if an influential organisation 
like Debian wanted to buy a significant number of their devices they would 
make use a very nice deal.  1/4 list price is in the range of what 
corporations do when they see some potential sales benefits.

It wouldn't surprise me if Yubico were willing to give away 100 to Debian.  
But I doubt they would give away 1000+.

As an aside they gave me a free key from their first generation.  I later 
arranged a bulk order of ~300 at a discount price but not a "giveaway to make 
future sales price".

-- 
My Main Blog         http://etbe.coker.com.au/
My Documents Blog    http://doc.coker.com.au/