Let's show we want to be and are capable of being united.

[unlikely-alice]

Profile-of-the-idea

name: I don't know. Some kind of a union name. Maybe, The Mehr Revolution Union.

people involved:
Only me for now. Hopefully others will join.

Problem

Not having an organized union which is necessary to win Iran's revolution and stop tragedies like Nika from happening ever again.

Solution

Have an organized union. See this.
The 9pm google search thing can easily be done even by my grandparents. The exactly at 9pm part is to show that we can act orderly. This is going to be very scary for IRI, a growing number of people who are showing they can and will act, with a council planning their next move (the plan must be a good one btw, not those shitty calls of going to the streets, or strikes, or most other calls that have happened so far).

Literature

I'm not sure.

Similiar efforts

Task Force Nika. It's very different. I'm not talking about coordinating IT efforts.
Open Source Open Science Iran Movement. I'm not trying to unite the open source community.
There are probably other similar efforts but none targets the general population with an actual organization plan.

Value added

It is a scalable unity solution.
Unity solutions like "من وکالت می‌دهم" are not scalable and have a ceiling. The Pahlavi family does not have more than 1 or 2 million supports which is not enough to win against a fascist regime. However, if we form a council with 10k members and each member have an average of 10k supporters (with no overlap), then this council will have 100m supporters in total.

Actionable Tasks (topic, plan, deadline)

• Create a pretty call to action website which will link to the above website.
• Invite people all over social media and city streets to join and become active union members.
• Prepare some underlying tools and procedures to make starting a council with some form of strict structure on the internet possible.
• Ask neutral programmers to review these tools and make sure they're not doing anything fishy.
• Invite capable people to the council and work with them to make sure this council can do its responsibilities (good planning and organization).
• Win

Decision Making Procedure

Throw away software projects that take more than 3 days to implement by a pair of developers.
Throw away software projects that need funding.
Throw away ideas that do not immediately help.
Throw away ideas that could lead to more harm than good.
Do not waste time on a bad idea even though it might hurt someones feelings.
Do everything else in no particular order (whichever feels best right now).

[armantorkzaban]

Create a pretty call to action website which will link to the above website.

when can we begin with this? what is the timeline?

[unlikely-alice]

Well. I had an idea 2 days ago. To create a beautiful animated website explaining how HTTPs works, how IRI is planning to perform a MITM attack, etc... and at the last part tell them to join the union. I went on to learn 2d web graphics, made some progress on the animations, etc. But after doing some more research on the topic, seems like that attack is not possible. So I'm back to square 1 on the pretty call to action website right now.

[armantorkzaban]

How can we support? and what do you mean by the 'attack is not possible'? If they attack some CAs, or users insistently opt for advanced options and accept the fake certs, they can actually, can't they?

[unlikely-alice]

iOS and Android since version 7.0 don't accept user installed certificates by default. They have separate storage for system CAs and user CAs and by default apps are configured to use only system CAs. This configuration is not something user can change, app developers configure this while building the app.

Safari and Chrome do accept user installed CAs but not for every website. I haven't tested or checked their code but I suspect all public websites are only verified using system CAs. The user installed ones are only used for stuff such as "localhost", or werid internal company domains such as "home.local", etc.

This was not about them attacking some CA (system ones), that's way too difficult (though happened once in 2011), it was about Iran performing a country wide MITM and forcing users to install a custom certificate authority (one issued by the government) on their desktops/phones to access the internet. But seems like iOS and Android don't allow that anymore.