MozillaFoundation / mpa-cryptomancer-challenge

A repo for the Mozilla Privacy Arcade Cryptomancer Challenge, part of the 2017 Global Sprint
Other
11 stars 5 forks source link

Let's get ready for the sprint #15

Open chadsansing opened 7 years ago

chadsansing commented 7 years ago

Let's get ready for the sprint!

The Global Sprint is almost here! Tomorrow and Friday (and beyond), we'll join together to contribute assets, ideas, and questions to game-based projects that help us teach about online safety in fun, low-risk ways.

Your project leaders will be online from 9 AM to 5 PM, their local time, to answer your questions and help you participate in the sprint. Please don't hesitate to let us know if you need something from us.

Remember to abide by the Code of Conduct as we work together. This is a safe space for everyone, and it's our job to maintain it as such.

Please also remember that the big idea is to teach real-life privacy and security habits through the games we adapt, expand, and invent during the sprint. Always ask yourself:

Put your users first.

Here is a blog post you can share with a last-minute invite to the sprint.

We look forward to working with you and we cannot wait to see what you make of the 2017 Global Sprint!

Please ask any last-minute questions below.

cc @cryptomancer-actual, @tromand, @anterobot, @gael-ian, @Salindurthas, @DMRaven, @dexterduck, @Masterwolf2050, @ashgamedesign, @villain4hire, @Plotanical, @KadeMorton

tromand commented 7 years ago

Up and ready :)

cryptomancer-actual commented 7 years ago

I'm here, too. I'll be working on sprint related stuff all day.

chadsansing commented 7 years ago

Ready to go!

cryptomancer-actual commented 7 years ago

Welcome @tromand !

I was wondering if you had any adventures from your own game that we could port over to Cryptomancer just by adding some fantasy elements?

cryptomancer-actual commented 7 years ago

Cover image for our project over in Issue #7

tromand commented 7 years ago

@cryptomancer-actual hum, hard to tell, the adventure in my game are completely invented by the players in a interactive way. One idea that I see could work is one of my trainee group did try a kind of DDoS on the supervision : the object they were tying to still had a GPS tracker on it, they copied the signal and flushed multiple gps tracker on the canalisation (via WC ^^) to confused the defender team. Maybe we could apply that with shards on megaphid ?

cryptomancer-actual commented 7 years ago

@tromand That's a really interesting concept. I could see a "guerilla communications" section developing here... how to protect the geolocation of shardnets through deception/denial techniques. Like you mention, if someone was tracking your location via the "Tracer" spell (which geolocates shards), you could put your shard on a wagon, or on a gigaphid (giant flying insect) and have it run/fly off. Now your adversary is on a wild goose chase. Another technique might involve using scryer-nets (which are like CCTV systems using shards) as a method to communicate with people "off the grid." There might be scryer-nets set up all over a city under marshal law, and being monitored by the authorities. A character could climb up and touch one of these and leave an encrypted message on that network (they'd have to use a strong keyphrase, otherwise the people monitoring the scryer-network can see the message). Then other characters can climb up, touch any of the scryer-net shards, and receive the message (if they shared the keyphrase offline).

tromand commented 7 years ago

This goes well for my first message, I messed up the gigaphid name :D

You could also put multiple shards of the same shardnet on gigaphid (or other animals) and just use a few for actually communicating. Like you will need a lot of tracer spells to follow shards for maybe nothing.

By the way, could we put a golem on a GigaPhid ?

cryptomancer-actual commented 7 years ago

Mobile Golem is great/fun idea.

In the game text, it says Golems are pretty big machines... giant steam-powered squid things that take a lot of energy (coal, wind, waterwheel, etc.) to power. I made them require energy, instead of just being magically powered, because I wanted to emphasize critical infrastructure (e.g. electricity) as an attack vector (i.e. destroy the windmill powering the golem and you've basically pulled the plug on a target's network). I also wanted to emphasize opportunities for BCP/DR (business continuity planning / disaster recovery, for those not in IT careers). A secure organization will have a plan for when an adversary takes out their golem, etc.

All that being said, fantasy settings contain magic, which means you can just hand-wave any idea and just say "this works because special magic." So yeah, a golem on a gigaphid... or just a flying golem that rides along the jet stream would be perfectly OK. And now that I think about it, a flying golem is amazing.

tromand commented 7 years ago

Maybe we could "invent" a flying "mini" Golem, with less-capacity than a real one (because of the lack of infra.), maybe can connect to less shardnets ? Or must land every now and then on a place with specific infra ?

cryptomancer-actual commented 7 years ago

Totally... a "golem familiar" or mount. Feel like designing it?

You could use the same format as the Familiars on page 260 of Cryptomancer.

tromand commented 7 years ago

I'l try something !

tromand commented 7 years ago

First Draft

GolemPhid :

A GolemPhid is a magically enhanced Gigaphid carrying a bit of the dwarf technology used in a Golem that can bridge shardnets. Because of the lack of infrastructure, they are not equivalent to a Golem: they can only bridge 4 Shardnets, do not log accesses nor communications, and need to land to at least one rest period every seven period to maintenance in a safe-house containing at least a cryptoadmin and a ritual chamber. In any other way, they work like a Golem.

tromand commented 7 years ago

feel free to correct the wording to match with the rest of the Cryptomencer rules-book :)

cryptomancer-actual commented 7 years ago

Awesome, thanks! I'll play with it a little bit. Nice thing about a giant insect is that it has many legs, and probably holds a shard in each leg. Also, I love the maintenance window. Maybe that's the balancing feature... there is a certain % chance that the gigaphid might be resting, which can created an unplanned outage.

tromand commented 7 years ago

Yes and that also mean that during the "rest" time, the gigaphid is static (it can be localized or attacked)

BakuDreamer commented 7 years ago

Do gigaphids have wings ? ( never actually says ) Or maybe they're like giant dragon-caterpillars. They sort of fly - ungulate like Flacor the luck dragon. ? Giant caterpillars will eat an acre of rainforest every day for sure.

​ ​

On Thu, Jun 1, 2017 at 8:42 AM, Romand Tiphaine notifications@github.com wrote:

Yes and that also mean that during the "rest" time, the gigaphid is static (it can be localized or attacked)

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/MozillaFoundation/mpa-cryptomancer-challenge/issues/15#issuecomment-305533809, or mute the thread https://github.com/notifications/unsubscribe-auth/AakbRc-BC-nRXketcCsFVkEASA6OVbzGks5r_tvWgaJpZM4NrkJl .

chadsansing commented 7 years ago

Happy Day 2 of the Global Sprint!

Let us know how to help :)

cc @cryptomancer-actual, @tromand, @anterobot, @gael-ian, @Salindurthas, @DMRaven, @dexterduck, @Masterwolf2050, @ashgamedesign, @villain4hire, @Plotanical, @KadeMorton, @fabiocosta0305, @ksedivyhaley, @BrotherPhil

tromand commented 7 years ago

I'll be off for a few hours but will be back tonight (well, tonight for me ^^)

chadsansing commented 7 years ago

As the sprinting hour winds down on the east coast of the US, I want to thank all of you for your awesome contributions to this project.

We'll be curating and sharing throughout the summer. Stay tuned!

fabiocosta0305 commented 7 years ago

How long the project will stay active?

cryptomancer-actual commented 7 years ago

@fabiocosta0305 I'll probably continue to harvest and incorporate ideas until July 1st. After that, will be spending a ton of time editing/curating/expanding user submissions.

fabiocosta0305 commented 7 years ago

Oooh. Nice... I'll think some ideas and everything I have I'll put here

BakuDreamer commented 7 years ago

I thought this was done. I still have some material, can I just put it in the email here.

( More Talents : Nomenclator, Delimiter, and Stigmartyr )

Bokeh ( 'convoluted encryption', another kind of shadow magic ) Secret Twins ( cryptophasia as a spell ) ... Umbrastion ( a cognitive firewall )

or should I just save it until next time ?

On Mon, Jun 19, 2017 at 11:30 AM, Fábio Emilio Costa < notifications@github.com> wrote:

Oooh. Nice... I'll think some ideas and everything I have I'll put here

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/MozillaFoundation/mpa-cryptomancer-challenge/issues/15#issuecomment-309526397, or mute the thread https://github.com/notifications/unsubscribe-auth/AakbRYIY8U_FaCUUttC51lEvZkNTIOX9ks5sFr5CgaJpZM4NrkJl .

cryptomancer-actual commented 7 years ago

@BakuDreamer If the talents/spells have a clear learning nexus for people brand new to security/privacy and are based on concrete security/privacy concepts, feel free to drop them here. If they are more fictional or esoteric, you can put them in the /r/Cryptomancer sub-Reddit.

BakuDreamer commented 7 years ago

Bokeh ( blur ) is like 'multiple encryption' Someone with the Bokeh talent can 'bokeh' a message before it's encrypted, which changes it into asemic text ( which can then be encrypted ) After it's sent and decrypted, it's still bokeh'd and requires someone to un-bokeh it

On Mon, Jun 19, 2017 at 1:08 PM, cryptomancer-actual < notifications@github.com> wrote:

@BakuDreamer https://github.com/bakudreamer If the talents/spells have a clear learning nexus for people brand new to security/privacy and are based on concrete security/privacy concepts, feel free to drop them here. If they are more fictional or esoteric, you can put them in the /r/Cryptomancer sub-Reddit.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/MozillaFoundation/mpa-cryptomancer-challenge/issues/15#issuecomment-309559089, or mute the thread https://github.com/notifications/unsubscribe-auth/AakbRXEhZtsqEl1U1OAwlA6meXypr9nbks5sFtVVgaJpZM4NrkJl .

BakuDreamer commented 7 years ago

​ Someone with ' Nomenclator ' has the ability to create fake true-name / soul-key pairs and attach them to things. But the names only last for 22.7 seconds before evaporating.

On Mon, Jun 19, 2017 at 9:05 PM, Brendan McAuliffe < sugarplumvampire@gmail.com> wrote:

Bokeh ( blur ) is like 'multiple encryption' Someone with the Bokeh talent can 'bokeh' a message before it's encrypted, which changes it into asemic text ( which can then be encrypted ) After it's sent and decrypted, it's still bokeh'd and requires someone to un-bokeh it

On Mon, Jun 19, 2017 at 1:08 PM, cryptomancer-actual < notifications@github.com> wrote:

@BakuDreamer https://github.com/bakudreamer If the talents/spells have a clear learning nexus for people brand new to security/privacy and are based on concrete security/privacy concepts, feel free to drop them here. If they are more fictional or esoteric, you can put them in the /r/Cryptomancer sub-Reddit.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/MozillaFoundation/mpa-cryptomancer-challenge/issues/15#issuecomment-309559089, or mute the thread https://github.com/notifications/unsubscribe-auth/AakbRXEhZtsqEl1U1OAwlA6meXypr9nbks5sFtVVgaJpZM4NrkJl .

BakuDreamer commented 7 years ago

The Dancing Pig

​ A cantrip that puts a glamour-type charm in a Banner that makes you need to roll a Willpower resistance check to not open it ​ ​

On Mon, Jun 19, 2017 at 9:59 PM, Brendan McAuliffe < sugarplumvampire@gmail.com> wrote:

​ Someone with ' Nomenclator ' has the ability to create fake true-name / soul-key pairs and attach them to things. But the names only last for 22.7 seconds before evaporating.

On Mon, Jun 19, 2017 at 9:05 PM, Brendan McAuliffe < sugarplumvampire@gmail.com> wrote:

Bokeh ( blur ) is like 'multiple encryption' Someone with the Bokeh talent can 'bokeh' a message before it's encrypted, which changes it into asemic text ( which can then be encrypted ) After it's sent and decrypted, it's still bokeh'd and requires someone to un-bokeh it

On Mon, Jun 19, 2017 at 1:08 PM, cryptomancer-actual < notifications@github.com> wrote:

@BakuDreamer https://github.com/bakudreamer If the talents/spells have a clear learning nexus for people brand new to security/privacy and are based on concrete security/privacy concepts, feel free to drop them here. If they are more fictional or esoteric, you can put them in the /r/Cryptomancer sub-Reddit.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/MozillaFoundation/mpa-cryptomancer-challenge/issues/15#issuecomment-309559089, or mute the thread https://github.com/notifications/unsubscribe-auth/AakbRXEhZtsqEl1U1OAwlA6meXypr9nbks5sFtVVgaJpZM4NrkJl .

BakuDreamer commented 7 years ago

On Mon, Jun 19, 2017 at 11:54 PM, Brendan McAuliffe < sugarplumvampire@gmail.com> wrote:

The Dancing Pig

​ A cantrip that puts a glamour-type charm in a Banner that makes you need to roll a Willpower resistance check to not open it ​ ​

On Mon, Jun 19, 2017 at 9:59 PM, Brendan McAuliffe < sugarplumvampire@gmail.com> wrote:

​ Someone with ' Nomenclator ' has the ability to create fake true-name / soul-key pairs and attach them to things. But the names only last for 22.7 seconds before evaporating.

On Mon, Jun 19, 2017 at 9:05 PM, Brendan McAuliffe < sugarplumvampire@gmail.com> wrote:

Bokeh ( blur ) is like 'multiple encryption' Someone with the Bokeh talent can 'bokeh' a message before it's encrypted, which changes it into asemic text ( which can then be encrypted ) After it's sent and decrypted, it's still bokeh'd and requires someone to un-bokeh it

On Mon, Jun 19, 2017 at 1:08 PM, cryptomancer-actual < notifications@github.com> wrote:

@BakuDreamer https://github.com/bakudreamer If the talents/spells have a clear learning nexus for people brand new to security/privacy and are based on concrete security/privacy concepts, feel free to drop them here. If they are more fictional or esoteric, you can put them in the /r/Cryptomancer sub-Reddit.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/MozillaFoundation/mpa-cryptomancer-challenge/issues/15#issuecomment-309559089, or mute the thread https://github.com/notifications/unsubscribe-auth/AakbRXEhZtsqEl1U1OAwlA6meXypr9nbks5sFtVVgaJpZM4NrkJl .

fabiocosta0305 commented 7 years ago

@BakuDreamer looks like the kind of Cryptomancy that Brazilians would love! Hu3! :-D

BakuDreamer commented 7 years ago

Did the Risk Eaters pay for dinner ? Something that might happen at the masquerade-party. ​

On Thu, Jun 22, 2017 at 7:33 AM, Fábio Emilio Costa < notifications@github.com> wrote:

@BakuDreamer https://github.com/bakudreamer looks like the kind of Cryptomancy that Brazilians would love! Hu3! :-D

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/MozillaFoundation/mpa-cryptomancer-challenge/issues/15#issuecomment-310398572, or mute the thread https://github.com/notifications/unsubscribe-auth/AakbRSDP85ArI4wiHferxXAeIpZgxctXks5sGns9gaJpZM4NrkJl .