-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathabout.html
190 lines (160 loc) · 13.1 KB
/
about.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
<!DOCTYPE html>
<html lang="en" >
<head>
<meta charset="UTF-8">
<title>About SaferVault Project</title>
<!-- Favicon -->
<link rel="icon" href="https://voks2.github.io/safervault/assets/safervault-logo-favicon-2.png" type="image/x-icon">
<link rel="shortcut icon" href="https://voks2.github.io/safervault/assets/safervault-logo-favicon.png" type="image/x-icon">
<meta http-equiv="X-UA-Compatible" content="IE=edge"> <!-- -->
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<meta name="description" content="An all-in-one voice recording, camera, and file management app designed to keep your data safe in high-risk situations">
<meta name="keywords" content="data safety, voice recorder, camera">
<meta name="author" content="Vojin Mitrović">
<!-- Open Graph Metadata -->
<meta property="og:title" content="SaferVault">
<meta property="og:description" content="An all-in-one voice recording, camera, and file management app designed to keep your data safe in high-risk situations">
<meta property="og:image" content="https://voks2.github.io/safervault/assets/safervault-socialshare.png">
<meta property="og:url" content="https://voks2.github.io/safervault/">
<!-- Twitter Card Metadata -->
<meta name="twitter:card" content="summary_large_image">
<meta name="twitter:title" content="SaferVault">
<meta name="twitter:description" content="An all-in-one voice recording, camera, and file management app designed to keep your data safe in high-risk situations">
<meta name="twitter:image" content="https://voks2.github.io/safervault/assets/safervault-socialshare.png">">
<meta name="robots" content="index, follow">
<!--<link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=DM+Sans:wght@400;500;700&display=swap"> -->
<link rel="preconnect" href="https://fonts.googleapis.com">
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
<link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900&display=swap" >
<link rel="stylesheet" href="styles.css">
<script src="index.js" defer></script>
</head>
<body>
<!-- <div id="maintan"></div> -->
<div id="container">
<header>
<div id="top-bar">
<div id="logo">
<a href="index.html">
<img src="assets/safervault-logo-v2-dark.png" alt="SaferVault Logo" class="logo-text" id="logo-image">
<!-- <img src="assets/logo-img-v1.png" alt="SaferVault Sign" class="logo-sign"> -->
</a>
</div>
<nav class="menu">
<ul>
<li><a href="index.html#context" class="top-menu-link">Context</a></li>
<li><a href="index.html#features" class="top-menu-link">Features</a></li>
<li><a href="index.html#how-to" class="top-menu-link">How to use?</a></li>
<li><a href="index.html#get-involved" class="top-menu-link">Get involved</a></li>
<li><a href="about.html" class="top-menu-link">About</a></li>
<li><button id="dark-mode-toggle" class="top-menu-link">Dark theme</button></li>
</ul>
</nav>
<div class="hamburger">
<span></span>
<span></span>
<span></span>
</div>
</div>
<div class="hero-section">
<div class="main-heading">About SaferVault Project</div>
<div class="sub-heading">In the middle of difficulty lies opportunity — <i>Albert Einstein</i></div>
</div>
</header>
<div class="content">
<div class="section" >
<div class="section-title" id="history">Project history</div>
<div class="sub-section-container">
<div class="sub-section">
<div class="section-sub-title"></div>
<div class="section-text">
<p>The SaferVault project began in 2020 when Vojin Mitrović, a Web Manager at the Slavko Ćuruvija Foundation, envisioned a tool to help investigative journalists protect their data in situations where they might be forced or threatened to relinquish access to their recording devices.</p>
<p>Vojin successfully raised funds to develop a proof-of-concept application called <strong>Safer Recorder</strong>. This system consisted of two parts: an Android voice recorder app for journalists in the field and a web platform controlled by editors in the office. Journalists could record audio, which was encrypted in real-time and transferred to the web platform, allowing editors to access the recordings. The key innovation was that journalists could capture information without being able to play it back, making it inaccessible to potential attackers who might force them to surrender their devices.</p>
<p>Technically, this was achieved by encrypting the data with a key held by another entity rather than the recording system itself. Crucially, no readable data was ever stored on the device, preventing attackers from retrieving information through device forensics.</p>
<p>Check out the screenshots of the Safer Recorder web platform and mobile app below to see how the initial concept took shape:</p>
<figure>
<img src="assets/saferrecorder-imgs/control-platform-2.JPG" alt="Safer Recorder web platfrom Create user screen.">
<figcaption>The platform administrator could create "users," typically journalists recording sensitive information in the field.</figcaption>
</figure>
<figure>
<img src="assets/saferrecorder-imgs/control-platform-1.jpg" alt="Safer Recorder web platfrom Users list screen.">
<figcaption>On a separate screen, the admin can manage users and their access.</figcaption>
</figure>
<figure>
<img src="assets/saferrecorder-imgs/control-platform-3.jpg" alt="Safer Recorder web platfrom Recordings screen.">
<figcaption>All recordings captured by the users' mobile apps are instantly uploaded to the platform and can only be accessed by the platform administrator.
</figcaption>
</figure>
<figure>
<img src="assets/saferrecorder-imgs/safer-recorder-app.png" alt="Safer Recorder mobile app screens.">
<figcaption>SaferRecorder mobile app screens: unencrypted recording (left), listening to unencrypted recordings (middle), and encrypted recording that can only be uploaded to the web platform (right).</figcaption>
</figure>
<p>Building on this success, Vojin expanded the concept into a more comprehensive data capture and management solution, simplifying the design and addressing security concerns. This evolution led to the creation of <strong>SaferVault</strong>, which integrates camera and file management capabilities alongside sound recording.</p>
<p>Unlike the previous version, SaferVault eliminates the need for a centralized server, reducing security risks and enhancing development opportunities. With innovative safety <a href="/index.html#features">features</a> like compartmentalized encryption, encrypted data export-import, and Guard Mode, SaferVault offers flexibility and robust protection against a broader range of risks and scenarios.</p>
</div>
</div>
</div> <!--sub-section-container end-->
</div> <!--section end-->
<div class="section" >
<div class="section-title" id="missing">What’s missing?</div>
<div class="sub-section-container">
<div class="sub-section">
<div class="section-sub-title"></div>
<div class="section-text">
<p>While SaferVault offers robust features for protecting data, it’s important to acknowledge its limitations when facing the most formidable threats. As explained in the <a href="index.html#guard-mode">Guard mode</a> feature description, SaferVault allows users to capture data that can only be decrypted by the trusted individual who pre-authorized the Guard mode instance. In most cases, this is sufficient to prevent data loss, as that individual remains out of reach from the attacker. However, when dealing with powerful entities that can exert immense pressure—such as security services, international corporations, or global organizations—the risk extends beyond simply accessing your data. These actors may compel the user to reveal the identity of the person who holds the decryption credentials. Once this identity is exposed, they could trace and coerce that individual into providing access to the encrypted information.</p>
<p>SaferVault currently lacks a technical solution to fully conceal the identity of the decryption authority in these extreme scenarios. While practical workarounds exist, such as using pre-authorized devices within an organization, these approaches require significant coordination and further testing.</p>
<p>Our current solution effectively addresses common security needs, but we recognize that further innovation is essential to protect against the highest-stakes threats. We welcome collaboration and partnerships to develop and refine solutions that can better safeguard against these extreme scenarios.</p>
</div>
</div>
</div> <!--sub-section-container end-->
</div> <!--section end-->
<div class="section" >
<div class="section-title" id="next">What’s next?</div>
<div class="sub-section-container">
<div class="sub-section">
<div class="section-sub-title"></div>
<div class="section-text">
<p>The SaferVault concept has progressed to a point where user flows for all key features outlined on this website have been translated into wireframes. Additionally, the core feature of decryption authority transfer and the technical concept of encryption without storing readable data on the device have been validated through a proof-of-concept application.</p>
<p>The next step is to validate the mobile app concept through user feedback, refining the design and user experience as we proceed. To achieve this, we are seeking partnerships with developers and product managers specializing in digital security, as well as experts in risk management and encryption. Their collaboration will help us fine-tune the application mockups, ensuring they are ready for presentation to target audiences for feedback and validation.</p>
<p>This process is crucial to ensuring that the app meets the needs of users in high-risk scenarios and delivers on its promise of data security.</p>
<p>For more complex scenarios involving powerful entities capable of reaching individuals globally, further innovation is required. The challenge lies in developing a system that can conceal the identity of the trusted individual while preserving the user's ability to regain access to their data once the threat has subsided. This may involve creating a unique platform anonymizer or developing a specialized file transfer protocol to achieve this goal.</p>
</div>
</div>
</div> <!--sub-section-container end-->
</div> <!--section end-->
<div class="section" >
<div class="section-title" id="team">SaferVault team</div>
<div class="sub-section-container">
<div class="sub-section">
<div class="section-sub-title"></div>
<div class="section-text">
<p>SaferVault was conceived by Vojin Mitrović, a web manager and content editor from Belgrade, Serbia, with extensive experience in managing content platforms and initiatives within the nonprofit sector, focusing on human rights, legal, and media projects. For more details, visit Vojin's <a href="https://voks2.github.io/" target="_blank">personal website</a>.</p>
<p>The Safer Recorder proof-of-concept application, which preceded SaferVault, was also developed under Vojin's vision. This project was funded by Internews and brought to life by Aleksandar Acić, an Android developer based in Berlin, Germany.</p>
</div>
</div>
</div> <!--sub-section-container end-->
</div> <!--section end-->
<div class="section" >
<div class="section-title" id="contact">Contact</div>
<div class="sub-section-container">
<div class="sub-section">
<div class="section-sub-title"></div>
<div class="section-text">
<p>To discuss collaboration opportunities or to learn more about the project, please <a href="mailto:[email protected]">contact</a> Vojin directly.</p>
</div>
</div>
</div> <!--sub-section-container end-->
</div> <!--section end-->
</div> <!--content end-->
<footer>
<nav class="footer-menu">
<ul>
<li><a href="about.html#history">Project history</a></li>
<li><a href="about.html#contact">Contact</a></li>
<li><a href="privacy-policy.html">Privacy Policy</a></li>
</ul>
</nav>
</footer>
</div>
</body>
</html>