3 ms·
I don't understand the point of this, even if it worked correctly. If I understand correctly what it does is create some kind of secure tunnel between two nomx
by simias 10y ago
I don't understand the point of this, even if it worked correctly.
If I understand correctly what it does is create some kind of secure tunnel between two nomx devices if you tell it to. But doesn't starttls do that already if you configure your mail server that way? And it already just works with any compliant email server?
So unless I'm missing something there's absolutely no doubt in my mind that this is a scam. Kudos to the author for bothering to find flaws in the admin interface but honestly at this point I'd just have reflashed the raspberry pi and used it as a media center.
Even the first picture with the case open is already a huge red flag, not because of the raspberry pi but because of the botched glue gun job.
- Zekio 10y agoIt would have a better life as a Pi-hole since you can use the fancy case it came in :)
- uxp 10y agoAgreed. That's a pretty nice injection molded case for a Pi. Too bad it costs ~$180.
- doubleplusgood 10y agoThe software side looks like someone just executed an ancient Postfix + Squirrelmail + Dovecot tutorial[0] and cobbled together a horrible UI for it. [0]: https://www.exratione.com/2012/05/a-mailserver-on-ubuntu-1204-postfix-dovecot-mysql/ https://www.exratione.com/2012/05/a-mailserver-on-ubuntu-120...
- uxp 10y agoIs it squirrelmail, or just IMAP(s)/POP3(s)? I guess, at least it isn't running it in conjunction with sendmail https://threatpost.com/no-fix-for-squirrelmail-remote-code-execution-vulnerability/125151/ https://threatpost.com/no-fix-for-squirrelmail-remote-code-e...
- dgl 10y agoThe thing I think it is trying to do is enforce that TLS is used for the known domains. Starttls as implemented in most SMTP servers normally allows fallback to non-encrypted delivery (it's opportunistic). This kind of agreed upon enforcement has been possible in many email products for years though (I worked on one which could do it about 10 years ago).
- ams6110 10y agoIt sends directly (using TLS) to port 26 on the other "handshake" device i.e. not relaying through any third party such as an ISP. I guess there's some theoretical benefit possible there but if you're worried about your ISP reading your email, just use GPG.