bribriinlondon

6 ms·

1.
by bribriinlondon 4y ago
Very cool. Do you offer consulting if someone wanted to bake this into their solution?
2.
by bribriinlondon 12y ago
Yes. Unfortunately, this is an area that has become a zero sum game. Encryption needs to happen by default in every communication. It goes beyond that, entire systems and cryptographic constructs need to be overhauled in the wake of the NIS
3.
by bribriinlondon 14y ago
PrivateSky is a browser based encrypted messaging and managed file transfer service. The keys are only available to the sender and recipient, not even CertiVox staff can access the keys. They are not physically able to comply with CALEA req
4.
by bribriinlondon 14y ago
Sign up for the service, it's free. The service is served over SSL so there is little risk of MITM (that would require a Diginotar style hack). The marketing site does not require SSL. We are not collecting and you are not transmitting a
5.
Petraeus should have used PrivateSky
2 points by bribriinlondon 14y ago|3 comments
6.
by bribriinlondon 14y ago
PrivateSky - http://privatesky.me
7.
by bribriinlondon 14y ago
Use PrivateSky - privatesky.me
8.
by bribriinlondon 15y ago
You obviously haven't worked in a real business. You would NEVER disclose your internal processes or architecture, that's nuts, it's like drawing out your whole attack surface for your adversary. Nevertheless, someone asked a follow on ques
9.
by bribriinlondon 15y ago
I can confirm we use the secure execution environment of the HSM, we say VMs in a general sense because of the limited knowledge of HSMs, makes it easier for people to understand. But it is actually compiled C code running in the tamper pr
10.
by bribriinlondon 15y ago
This is why it is critical to encrypt all communications using a trusted provider or doing it yourself with PGP, if you have the skills to do it. Whether or not this interception is currently legal / illegal, this has been happening on a ma
11.
by bribriinlondon 15y ago
PrivateSky – Secure Information Exchange platform turns your HTML5 browser into a two-factor authentication token (no more username and passwords) PrivateSky is protected by the first HTML5 2 factor authentication solution, SkyPin, using el
12.
by bribriinlondon 15y ago
Coverage: http://www.pcmag.com/article2/0,2817,2388080,00.asp?kc=PCRSS...
13.
by bribriinlondon 15y ago
Hi, we have a managed file transfer / bulk uploader coming out in a new "professional" version in about six weeks, and yes, you can do put only yourself into the Circle of Trust. In fact, I use Posterous as an online password manager exact
14.
by bribriinlondon 15y ago
Yea, I agree. The problem we run into is that we need to run the identity of the package creator by the recipient so they can determine whether they want to open it or not. We're toying with the idea of remembering a preference about your
15.
by bribriinlondon 15y ago
The only way we could decrypt the message theoretically is if you brought it to us in conjunction with a "bad actor" on our end. We're not like Hushmail, we don't actually transport your message, we just give you the ability to generate an
16.
by bribriinlondon 15y ago
Sorry Gojomo, too much crypto-speak. DLP means discrete logarithm problem. It's what makes cracking some key distribution / agreement and crypto-systems hard to do. http://planetmath.org/encyclopedia/EllipticCurveDiscreteLoga... Edit: S
17.
by bribriinlondon 15y ago
Hi, did the video on the front of the site not work? Maybe we should make the Watch it now button bigger? Cheers.
18.
by bribriinlondon 15y ago
Thanks. As mentioned, we've got Chrome and Firefox coming out soon. Cheers, Brian.
19.
by bribriinlondon 15y ago
It's done through the key agreement process itself. If you have the primary private key (SkyKey) you can create the decryption key through the ID input. So if I send something to you, it would be (my SkyKey + your ID "JangoCuni") = unique
20.
by bribriinlondon 15y ago
We've got Chrome and Firefox coming out soon, as stated above. I'm sorry, should we wait until then to declare our service? As far as who we are, we're British, you can have a brief summary read here: http://certivox.com/index.php/about-
21.
by bribriinlondon 15y ago
Hi, sorry, the description didn't come though: I've been a long time lurker on the board, but this is my first official post. My name is Brian Spector, I'm a long time crypto geek, working in infosec for about 20 years. Last week we launche
22.
by bribriinlondon 15y ago
https://privatesky.me We built it. It's an IE add on. I JUST asked HN to rate my start-up, as a matter of fact.
23.
Rate my startup - CertiVox's PrivateSky(privatesky.me)
5 points by bribriinlondon 15y ago|18 comments