'Participating with Safety' index «
Mobbs' Environmental Investigations «
FRAW
Association for Progressive Communications:
'Participating With Safety'
A series of briefings on information security and on-line safety for civil society organisations
Glossary
Written by Paul Mobbs for the Association for
Progressive Communications, 2002.
© 2002-2008 APC/Paul Mobbs, released under The
Gnu Free Documentation License (GFDL), version 1.2.
For further information contact:
http://www.fraw.org.uk/mei/
or mei@fraw.org.uk.
Glossary of key terms
- Access Access to information is the key goal of
information security. Those who must have access to
information should have that access without excessive effort. But those who must not have access
to information should be barred from access. Access to information is controlled primarily by the
sensitivity of the information concerned.
'Participating With Safety' cross-references
- Alternate persona On the Internet it is very easy to
give away personal information often accidentally. This can be used for everything from generating
spam mail to surveillance. The purpose of an alternate persona is to create an identity for use of
the Internet that masks your true identity.
'Participating With Safety' cross-references
- Asymmetric link Many links between servers, and the early
modems, used symmetric links. With a symmetric link the speed of data moving to your system is the
same as the speed of data moving away from your system. As new high speed modems were developed to
service the growing demand for the Internet links became asymmetric. For example, on a 56kilo-Baud
modem, data downloads to you at 56kBaud. But your upload speed is restricted to around 28 to 33kBaud.
This is because it is assume you will always download far more than you upload. The system therefore
devotes more of the bandwidth of the link to download than upload. But with the development of more
powerful computing, and peer-to-peer links, asymmetric
connections are highly restrictive. The new broadband systems, such as ADSL, are also asymmetric.
This has implications for how people can use the new broadband systems. Effectively the design of
the systems assumes that everyone is a data consumer rather than a data producer or
sharer. For those who wish to have a symmetric connection the readily available option is
ISDN, or a faster leased line. But these connections are assumed to be primarily a tool for business,
and so are far more expansive than other broadband links.
- Backing-up Backing-up is the process of making copies of
information on a computer systems to prevent the accidental loss or corruption of the data due
to user error, system corruption or hardware failure.
'Participating With Safety' cross-references
- BIOS password BIOS (or Basic Input Output System) is a
program, separate from the computer's operating system, that makes the internal electronics
of the computer system work. If you set it up, the BIOS program can require the user to
enter a password when the computer is turned on. This prevents the computer booting-up
and being used without the password. Although it can be circumvented by those with
professional experience, it is a good way of preventing most people from being able to
turn on and use the computer.
'Participating With Safety' cross-references
- Broadband A broadband network connection is simply a high
capacity, high speed connection. Currently most people dial-in to the Internet. This is a slow, low
bandwidth connection because the signal must pass through the audio frequency bandwidth of the
telephone system. Broadband connections use different systems that use a greater bandwidth either
using higher audio frequencies down telephone lines, radio frequencies along cable TV lines, or using
special high-bandwidth cables just for the purpose of data transfer. There are two impacts of
broadband. Firstly the high bandwidth means more signal can be downloaded so you can watch live
video streams or web casts. The other is that the connection is always on there is no delay whilst the
connection is established. This means that your computer can be permanently connected to the Internet,
essentially meaning that you can operate a server in your own home.
Many people use cable TV or ISDN connections for broadband access. But the new standard being introduced
in many countries is the 'digital subscriber line', or DSL. The only problem with most DSL connections
is that they are asymmetric, which restricts the amount
of data you can send out from your own system.
- Catastrophic failure In security terms, as catastrophic
failure is an event that leads to the large scale loss or damage to information and equipment.
This usually involves flood, fire, theft, or action by
the state. Surviving catastrophic failure is all about having some form of
redundant back-up systems. This means having equipment
insured at its full value, backing-up data off-site, and
ensuring that software is backed-up, and that you have copies of license/registration information
off-site.
'Participating With Safety' cross-references
- Client A client is a computer that receives data from, or is
controlled by, another computer the server The first
networked computers were essentially dumb, and so were wholly reliant on the server. Today most
networked computers process information themselves, but use the server to retrieve data from a
central location, and to coordinate communications with other computers. As computers have become
more powerful they themselves are able to be servers, communicating with other computers without the
need of a central server. These systems are called peer-to-peer
networks.
- Communications and traffic data Communications or traffic
data is a general terms for the records or logs of information that are produced as part of the use
of communications systems. This can be as simple as an itemised telephone bill, or as complex as
a list of the computer networks you regularly transact data with. When communications data is
gathered from many sources and databased it can produce a powerful
data profile. Although communications data contains
no information about the actual content of your communications, the use of communications data to
produce profiles can disclose a lot of information about you and your activities. But, unlike the
tight controls over the content of your communications, the
Regulation of Investigatory Powers Act does not create tight
controls over communications data. It can therefore be used for a wide variety of investigative
purposes by the state.
'Participating With Safety' cross-references
- Compression Compression is a process to reduce the size
of a file or data transmission. Many computer files or transmission contain values of data that
repeat regularly. Compression involves replacing each iteration of a repeated word, the colour of
a group of pixels in an image, or sequence of characters, with a token. The compressed data then
consists of only unique sets of data and tokens. When the data is decompressed, or 'exploded', the
tokens are replaced with the original data, returning the file to its original state.
- Copyright Copyright is an
intellectual property right given to an
artistic work. Copyright can be applied to written works, musical compositions, and video, film
or multimedia productions. Copyright lasts seventy years after the death of the creator of the work.
During the period of copyright no one may copy and circulate a copyrighted work without first
obtaining permission and paying a license fee for doing so.
'Participating With Safety' cross-references
- Counter-surveillance Counter-surveillance is the practice
of measures or systems that avoid surveillance.
Counter surveillance involves working in ways which obstruct the potential to monitor your
activities. It is never possible to totally exclude surveillance and in practice you would not
want to because it would draw even more attention to your work. But the basic steps can make it
harder for the state or other organisations interested in frustrating your activities from
logging information about your current work.
'Participating With Safety' cross-references
- Cracker A 'cracker' is a person who engages specifically in
the breaking of security systems, especially networked computers. Crackers specialise in using
various techniques to 'crack' the security of a system in order to gain access. Most crackers are
likely to be hackers, but only a minority of hackers will
actually engaged meaningfully and persistently in the cracking of systems.
- Cycles Cycles are the regular periods of maintenance of
a computer system, or review of the security policies of a system.
To work properly computers need regular maintenance of their file systems and programs. Less
frequently the equipment itself also needs cleaning or maintenance. The purpose of carrying out
activities on a regular cycle is to ensure that the systems devised to deliver
information security are implemented as required if possible
in time to avoid or avert the potential for system failure and information loss.
'Participating With Safety' cross-references
- Data profile Data profiling is the use of information
about your lifestyle and habits to provide a descriptive profile of your life. At its simplest,
data profiling is used by marketing companies to identify you as a possible customer. At its
most complex data profiling can be used by security services to identify potential suspects for
unlawful activity, or to highlight parts of a persons life where other forms of
surveillance may reveal something about their
activities.
'Participating With Safety' cross-references
- Dataveillance Dataveillance is the use of paper or
electronic records as a means of surveillance. The
use of dataveillance is primarily a form of passive
surveillance, related to the production of data
profiles of the individuals being targeted. From these profiles other information can be
determined or guessed that answers a number of queries about the habits of that person.
'Participating With Safety' cross-references
- Decryption Decrpytion is the process of decoding
information that has been encrypted using a cipher.
Decrpytion requires the use of a key without
this, and depending on the length of the key, it is practically impossible to decrypt the
information. There are two groups of encryption ciphers:
symmetric ciphers and
public key or asymmetric
ciphers.
- Digital signature A signature is a personalised
form of identity that provides proof of authenticity. Digital signatures are a form of data
encryption that proves the authenticity of a document.
A statistical digest of the content of the document is produced. This is then encrypted with an
encryption key to produce the digital signature. The complex
relationship of the encryption cipher makes forgery of the signature impracticable without possession
of the encryption key. Therefore, when the signature is validated, it provides proof that the
document or file can only have been signed by the holder of that encryption key.
'Participating With Safety' cross-references
- Directed surveillance Directed surveillance is the
use of technological means or human operatives to undertake
surveillance. This includes the use of bugs and other
listening devices. It also includes the use of informants or human infiltrators to access a group
or organisation directly in order to provide intelligence information. In the UK directed surveillance
is controlled under the Regulation of Investigatory Powers Act.
'Participating With Safety' cross-references
- Embedded identifitication Many computer programs insert -
or embed information in the files they produce. This has privacy implications. Distributing these
files by email or the Web could result in information being disclosed about who has worked on certain
projects or who has written certain material. Another form of embedded identification are digital
watermarks. These are digital identities that are encoded within sound, video or image files in order to
trace the source of multimedia information.
'Participating With Safety' cross-references
- Encryption Encryption is the process of encoding information
so that it cannot be decoded, or decrypted,
without the use of a key. The process of encryption
relies of mathematical problems so complex that they cannot be solved without the key. This prevents
anyone but those holding the key from decrypting data. There are a number of different mathematical
systems or 'ciphers' for encrypting data. They fall into two broad groups:
symmetric ciphers and
public key or asymmetric ciphers.
Today public key encryption is becoming the standard for every encryption because of its ease of
use. Systems for public key encryption are usually based around the program Pretty Good Privacy,
or PGP.
'Participating With Safety' cross-references
- Firewall A firewall is a device on a computer network that
filters the packets of data moving on the network to improve security. Firewalls
can prevent attacks on a computer system by preventing access to the different services of the
computer. They can also either allow or deny certain computers to have access to areas of a network.
They also work in both directions. This means that the not only stop unwanted packets getting in. They
also monitor where packets come from on the host system and restrict those that are not from sources approved
for external access. The firewall therefore forms an important part of securing
computer networks, as well as dial-up Internet connections, against external attacks and from rogue
software (such as viruses) operating on the computer system.
'Participating With Safety' cross-references
- Hacker The term 'hacker' has been abused by the media to give
a negative connotation of someone who engages in breaking into computers. In fact 'hacker' within
the subculture of computing has a positive connotation, meaning someone who is technologically adept
with computers, electronics or any other technical specialism. In the computer subculture those who
break into computer systems are referred to as 'crackers'.
- Information Security Information security is the theory and
practice of setting up and using computer and communication systems to protect the integrity of
information, prevent the loss of information during processing, and ensuring that those who need
information have access to it whilst at the same time others who have no right of access should
not.
'Participating With Safety' cross-references
- Intellectual property rights Intellectual property is a legal
definition of ownership over an intellectual creation. The intellectual creations that make up intellectual
property are the copyright over the works of an author, the
patenting of technical designs, the trademarking of designs or names, and the protection of
databases of information. Intellectual property is the core
of the new information society. It provides legal protection to the information traded or used in the
media or on computer systems. But the effect of intellectual property law in recent years has been
to close off knowledge, so providing a monopoly control to demand money for essential information.
As a result there has been a backlash against the recent expansion of intellectual property rights.
Most prominently by the open content movement.
- Internet Protocol or TCP/IP The Internet Protocol (IP) is the protocol
that controls the movement of data over the Internet. It is often synonymous with the 'transmission
control protocol', or TCP. The IP protocol organises the movement of data between fixed points, or
addresses, on the Internet. These IP addresses are identified numerically as a series of four number,
separated by dots e.g. '192.168.1.254'. Information moved over the 'Net is split into
packets of equal size. These packets are then sent over the
'Net, being reassembled in the correct order when they reach their destination. To get around the problem
of remembering sequences of numbers, the domain name system was
developed to convert recognisable names into IP addresses. But once the IP address is resolved, it is
the IP address, not the name, that is used to control communications.
- Key A key is a device to release a lock. It can be a physical
key that releases the mechanism of a lock. But it can also be a software key a sequence of
characters or words that permit the release or recovery of data. Keys are commonly enabled by
passwords or pass phrases. A combination of password and
data keys is also important for the use of
symmetric and
public key or asymmetric ciphers
and encryption systems. Public key encryption requires a
key pair two kwys, one to encrypt which is public, and one to decrypt which is private.
'Participating With Safety' cross-references
- Linux Linux is an alternative operating system for the PC.
Although it has been developed as a collaborative effort between programmers and software
companies around the world, it is as powerful and versatile as Windows. But it has two significant
advantages over Windows. Not only is it distributed under and open license, which means it costs
less and can be freely copied and used on other computers without having to pay extra. But it is
also more stable and secure than Windows. This is because it is modelled on the Unix operating
system that commonly runs large mainframe and business computers.
'Participating With Safety' cross-references
- Longevity When making data back-ups it is important to
consider how long the data will remain recoverable.
All storage media degrade with time. This depends upon the characteristics of the storage media -
for example CDs candegrade if left in sunlight. But it is also dependent upon changes in technology.
Hardware changes slowly. But the format of the files that hold the data can become quickly
obsolete, usually when a change in the design of operating systems causes older programs to become
unusable.
'Participating With Safety' cross-references
- Open content All the material, text images, sound and video,
belongs to someone. Those who create media have intellectual property rights over is use and
exploitation. Until recently intellectual property rights were used as a means of monopoly control
over computers, computer programs and other information. Today there is a growing movement, enabled
by the Internet, that seeks to promote the release of works under an 'open license'. The 'open'
license does not disavow the intellectual property rights of the creator. What it allows is the
unrestricted copying, sharing or modification of a work, providing that the original owner is
acknowledged, and providing that the use of the work does not exclude the originator of the work
from a share of any money that might arise from the use of their work. Open licenses also require
that where something is created using materials that was released using an open license, that the
work created must be released under an open license also. The mainstream computer software and
publishing industry, who use 'closed' licenses to distribute their works, abhor the concept of the
open license because it does not allow monopoly control. But the use of open licenses has allowed
the development of many projects that directly benefit communities because the use of open licensing
allows people to participate in the development of projects without the threat of legal action from
the owners of material, and because their contribution to the development of the project will be
acknowledged. In this way open content has been an important tool for enabling amateurs to develop
their skills to a professional standard via the 'Net.
- Passive surveillance Passive surveillance is the use
of indirect techniques, such as analysing records or information (a process often referred to as
dataveillance), in order to carry out
surveillance. There are different options for carrying
out passive surveillance such as data profiling or
monitoring people's use of communications media through the tracking and databasing of
communications or traffic data.
'Participating With Safety' cross-references
- Passwords and passphrases A password is a key it is
a way of restricting access to only those who
have the password. Passwords tend to be a single
sequence of alphanumeric characters without any spaces. Passphrases allow a far wider variety
of characters including spaces and special keys and they can be very long. This provides
greater security because longer strings are harder to guess. Passphrases can also be a sequence
of words, making them easier for humans to remember without the inherent insecurity of having
a single word within a password (single word can be guessed from a dictionary, a sequence of
words cannot).
'Participating With Safety' cross-references
- Peer-to-Peer The traditional model of network computing has been
a central computer the server and a number of clients connected to the server. The server then
organises services for each of the clients. Now that computers have become more powerful it is
possible for a persons computer to work with other computers as an network of peers a
'peer-to-peer' network to provide information and services. Examples of peer to peer services
are the file-sharing systems such as Napster or Gnutella. These programs operate by enabling
remote computers to find each others IP address and
then share data directly without the need for a central server. The only barrier to the growth
of peer-to-peer services is the current lack of broadband Internet services in many countries, and
the fact that most of the Internet services available to consumers are
asymmetric which restricts the ability to send data
at high speed.
- Performance The performance of a computer system is one
of the key objectives of information security. Performance
begins with the design and installation of a system ensuring that the resources the user requires
are available. Computers that have insufficient resources are more prone to failure due to the
constant switching or movement of data caused when they reach their processing capacity. When
designing information security systems it is also important to ensure that only the required level
of safeguards is implemented to protect sensitive data,
whilst at the same time ensuring that those who require access
to information have it without excessive effort.
'Participating With Safety' cross-references
- Pretty Good Privacy/PGP PGP is one of the most popular
public key encryption systems. PGP is widely available,
and is able to work with email and other programs to enable the encryption of files and the
use of digital signatures to verify the
authenticity of files or email.
'Participating With Safety' cross-references
- Plug-in A 'plug-in' is a program that can be used as part of a
another program to control the processing of information. Most plug-in used on the Internet are for
web browsers. But other work with different programs for example
PGP
and the use of encryption with email programs. These enable the use of multimedia
services, and allow the display of animated images (e.g., the flash plug-in) or video (e.g., the
Real Player plug-in). Plug-ins are also available for email programs that can control the use of
encryption as part of email communications.
- Public key encryption Public key encryption,
or asymmetric encryption, uses two keys. One key, the public key,
encrypts the data. A second key, the private or secret
key is then used to decrypt the data. The relationship
between the keys is so complex that one cannot be determined from the other. This means that you
can freely publish you public key, and others can encrypt data with it. But only you can decrypt
this information using your private key. This removes the problem created with older
symmetric encryption systems of securely
distributing the key that both encrypts and decrypts data. One of the most popular systems for
public key encryption is Pretty Good Privacy, or
PGP.
'Participating With Safety' cross-references
- Recovery Recovery if the ability to retrieve data
from its storage media. Where data is stored as ordinary files, recovery is limited only by
the longevity of the storage media for reliable recovery. But further complications may arise
due to trying to use information stored on obsolete file formats. Storing data as
compressed files, or as
encrypted files holds higher risks. This is because
encrypted or compressed files often contain more than one original file. Any corruption of
the stored file therefore loses more data than if only one file were corrupted. Compressed and
encrypted files, because they work on blocks of data, may be wholly unrecoverable if only one
small part of the file is corrupted.
'Participating With Safety' cross-references
- Redundancy Redundancy is the maintenance of spare
or back-up capacity to be available in the event of an emergency. For example, you could have
two computers just in case the main system fails. In relation to
information security redundancy usually
involves the keeping of multiple back-ups, often in different locations, to guard against
one or more of the copies being damage or destroyed.
'Participating With Safety' cross-references
- Regulation of Investigatory Act 2000 The 'RIP' Act 2000,
passed in the UK in 2000, updated the UK law on surveillance. It allowed new technologies such
as the Internet to be officially monitored, and created power to require people to divulge their
encryption keys. For details of the law see
The RIP Act
(from HMSO's legislation web site).
- Risk assessment The purpose of risk assessment is two-fold.
Firstly it is a process of considering what possible problems may arise, how they arise, and how likely
they are to occur. In this way it is possible to develop
systems
that reduce the significance of the risk. The other purpose is to provide a comparative assessment
between different systems or methods in order to adopt the methods that provide security and
deliver the best performance.
By using risk assessment it is possible to plan sensibly for everyday risks, as well as
catastrophic failures.
'Participating With Safety' cross-references
- Scripting Scripting is a form of computer program. But unlike
traditional programming language, that manipulate the processes of the computer, scripting tends
to involve a far smaller set of simple instructions. Many of these instructions will be related
to accomplishing a specific purpose, such as controlling the process of connecting your computer
to another computer via a modem. Scripting languages tend to be structured
towards a specific tasks, and there are a number of different scripting languages in common use.
The use of scripting languages should not be confused with 'marking-up' languages, such as
HTML. Scripting systems work dynamically to control
a system, whereas making-up languages simply provide a constant, static scheme to control the
display of information.
'Participating With Safety' cross-references
- Secure server Storing information away from your main
work location provides a good level of security
and redundancy. Using the Internet, this
can be easily organised by transacting data with a secure server. This is a server on the Internet
on which you have an account to store data. The server itself, as it is maintained by professionals,
has good security. It is also likely to be located in a country where the laws of privacy provide
greater protection to the information you store there.
'Participating With Safety' cross-references
- Secure socket layer Secure sockets, or SSL, is a system of
encryption used with web browsers. The browser agrees
an encryption key with the web server, and then all
communications between the two are encrypted. This prevents the content of the communications
being monitored as they make their way across the Internet. When using SSL with a web site, the
URL of the page you are looking at will be prefixed 'https'
rather than 'http'. The padlock in the corner of the browser window will also be closed rather
than open. Note also that some service providers operate SSL systems for their email servers -
but not all do this, and you may have to specifically request it.
IR Toolkit cross-references
- Security barrier A security barrier is a means to restricting
access or protecting information or equipment, and forms the basis of information security. In
practice there is not one barrier there are multiple barriers. This not only recognises the need
to protect different levels of the environment within which information is held. It also is a key
part of protecting information according to its
sensitivity.
Barriers are not foolproof all barriers have weaknesses. Instead the purpose of a barrier is to
impede access to the point where, with barriers in succession, it takes an impractically long time
to gain access without being detected.
'Participating With Safety' cross-references
- Sensitivity Sensitivity is one of the important tests
within information security. It is a waste of resources, and often not physically possible, to apply
strict standards of security to absolutely all data. Therefore one of the first steps to developing
a system of information security is to assess the sensitivity
of information, and classify it on a sliding scale so that different measures can be applied to
highly sensitive data, sensitive data, data that needs to be controlled, and data that is
insensitive.
'Participating With Safety' cross-references
- Server A server is a computer that organises the communication
and exchange of data with other client computers over
a network. This can be as simple as allocating the computer an identity on the network. It can
also involve supplying services such as email, web browsing, and access to file on a local network
or the Internet. Servers are permanently connected to the local network or Internet in order
that they can continually service requests for data. But as consumers get access to permanently
connected broadband services, many people leave their own computers permanently connected too.
This allows them to connect with other computers on the Internet in a similar manner to servers
and exchange information. This has allowed the development of non-centralised networks of
ordinary computers in peer-to-peer
networks.
- State action and intervention The purpose of
security barriers is to impede access to sensitive information
or equipment by making access impractical without discovery. The state does not have this problem
because they have the legal power to gain access. Therefore mitigating against actions by the
state is not a matter of preventing access that is futile. Instead the objective is to slow or
restrict access. This work both in terms of physical access to information, and access via
surveillance.
'Participating With Safety' cross-references
- Surveillance Surveillance is the art of monitoring
the activity of something. In terms of civil society there are two main types of surveillance.
Passive surveillance is the indirect monitoring of
a person or organisation. For example, using financial transactions, or the use of communications
media such as the Internet.
Direct or intrusive surveillance
is the direct intervention in the work of a person or organisation using technical means, such as
bugs, or human operatives such as infiltrators. To guard against surveillance it is necessary to
understand and apply not only a strategy for
information security, but also
counter-surveillance.
'Participating With Safety' cross-references
- Symmetric encryption Encryption uses
a key to encode data. In symmetric encryption the same key is used to encode and decode data.
The problem with this system is that if you wish others to use the system, you must transmit
the correct key to them. This risks disclosure of the key. Symmetric encryption is often
used to encrypt information that remain on the same computer system. For communications uses
public key encryption is simpler and more secure
to use.
- Systems Security systems are a clear set of inter-related
processes or activities that deliver information security.
Setting up systems involves classifying the sensitivity
of data, developing cycles to ensure that regular maintenance
of the computer is carried out, and the development of security
barriers to protect information and equipment.
'Participating With Safety' cross-references
- Tempest Tempest is the name for system that enables the
content of a video screen to be remotely watched. It is similar to the system used to detect
the use of TVs without a valid license of cable subscription only more hi-tech. Special receivers
are able to focus on a particular computer's screen and pick up the switching signals from the
high-powered electronics inside. These are then processed to produce a rough representation of
the image on the screen. To guard against this you need a shielded monitor, or use a system that
has very low electromagnetic emissions, such as an LCD or TFT flat screen.
'Participating With Safety' cross-references
- Temporary file A temporary file is a file opened
by a program or an operating system to store information whilst it is being worked on. Many
programs generate temporary files. This can lead to problems when the program forgets to
delete the temporary files because they mount up, and begin to occupy otherwise useful disk
space. They also represent a security problem because information that was recently worked
on will be available to those who know how to extract it from the temporary files.
'Participating With Safety' cross-references
- Viruses and 'malware' Viruses are programs that do things
you don't want to your computer. It could involve emailing all your friends with sensitive
files picked at random from your hard drive. Some will delete all the data on your hard drive.
For this reason viruses, and virus-like programs called Trojans and worms, are called
'malware' (software that makes you sick). There are a variety of ways to stop viruses. The
most effective is regular maintenance of your system, and configuring it to disable the 'macro
languages' in programs such as Microsoft Word that allow the viruses to work. You should also
use anti-virus software to regularly scan programs on your computer, and to scan all emails
and attached files that you download.
'Participating With Safety' cross-references
- Windows (in)security Windows, although it is the most
popular desktop operating system, is insecure. The operating system has many flaws. Its
organisation does not protect the security of different users. And it is susceptible to failure.
There are other more secure options for desktop computing such as
Linux. But the transition from Windows to Linux requires
a lot of effort from inexperienced computer users to learn the slightly different methods of
working.
'Participating With Safety' cross-references
Free Documentation License:
Copyright © 2001-2008 Association for Progressive
Communications (APC) and Paul Mobbs. Further contributions, editing and
translation by Karen Banks, Michael de Beer, Roman Chumuch, Jim Holland,
Marek Hudema, Pavel Prokopenko and Pep Turro. The project to develop
this series of briefings was managed by the Association for Progressive
Communications, and funded by OSI.
Permission is granted to copy, distribute and/or modify
this document under the terms of the GNU Free Documentation License,
Version 1.2 or any later version (see http://www.gnu.org/copyleft/ for
a copy of the license). You can also download the license
here.
Please note that the title of the briefing and the 'free
documentation license' section are protected as 'invariant sections and
should not be modified.
For more information about the Participating With
Safety project, or if you have questions about the briefings, contact
secdocs@apc.org.