vabmit

16 ms·

31.
by vabmit 9y ago
ProtonMail would be happy to implement more of the OpenPGP encryption standard. Specifically, it would be great if someone would contribute ECC support to the opensource OpenPGPjs project that ProtonMail currently maintains. There are just
32.
ProtonVPN(protonvpn.com)
24 points by vabmit 9y ago|11 comments
33.
Important lessons from the first NSA-powered ransomware cyberattack(protonmail.com)
2 points by vabmit 9y ago|0 comments
34.
by vabmit 9y ago
The buses that they are currently using hold just over 50 people. I made a very conservative guess for how many people would leave the existing bus service. There are more than 10 bus trips each morning down Interstate 93 that could be cons
35.
by vabmit 9y ago
It seems like they did fail to really analyse the potential in the Boston market. I live in Southern New Hampshire and like nearly everyone that doesn't hold a minimum wage job here, I work in Boston and commute into the city every day
36.
by vabmit 9y ago
ProtonMail | Multiple Positions | Geneva, CH; San Francisco, CA; etc | https://protonmail.com Senior Software Engineer (Front-end/Back-end/Mobile/Desktop) Location: Geneva, Zurich, San Francisco, Prague, Macedonia
37.
by vabmit 9y ago
https://whois.arin.net/rest/nets;q=18.188.0.0?showDetails=tr...
38.
by vabmit 10y ago
Unless things have changed recently, YC leverages former YC founders to do the initial application review. The founders that participate are from both currently operating companies and companies that closed or exited. So (if the review proc
39.
CIA Leak – End Points Targeted Not Encryption(protonmail.com)
5 points by vabmit 10y ago|0 comments
40.
by vabmit 10y ago
First independent review article: https://www.andryou.com/2017/02/22/in-depth-look-at-protonvp...
41.
ProtonMail Launches ProtonVPN in Closed Beta(twitter.com)
5 points by vabmit 10y ago|2 comments
42.
by vabmit 10y ago
The goal of providing a tor gateway is not to protect the contents of the messages from being traced back to a specific ProtonMail account. It's also not to prevent the contents or metadata of those messages from tripping dragnet surve
43.
by vabmit 10y ago
ProtonMail's verification requirements are determined by a complex system of IP reputation and other factors that are analysed in realtime when the sign up page is rendered. As an e-mail service, one of the most challenging things for
44.
Introducing ProtonMail's Tor hidden service(protonmail.com)
322 points by vabmit 10y ago|103 comments
45.
by vabmit 10y ago
I block tor from many of my servers. I started noticing that whenever I had an issue with someone attacking a server the source traced back to an exit node. What I found when I looked at the traffic coming from the exit nodes was that the v
46.
by vabmit 10y ago
Yes, exactly. The client is able to install and run a local proxy/translator application on their machine (currently, it's called a "bridge"). Their IMAP client connects to it and it interacts with ProtonMail's APIs
47.
by vabmit 10y ago
If a user resets their single password or encryption password, they lose access to their previous e-mail. This is because what essentially happens is that a new PGP keypair is generated and the Secret Key is encrypted with the new password.
48.
by vabmit 10y ago
IMAP support is coming very soon. Engineers are working on the code, now. It's a more difficult task than people would imagine because the implementations of the IMAP standards by some clients (like Outlook) is a bit... "interesti
49.
by vabmit 10y ago
The mailbox encryption key is static. There is no need to re-encrypted all the mail when it is changed. Since the PGP Secret Key is only decrypted in the client browser or app, there is no need to transmit the decryption password to the ser
50.
by vabmit 10y ago
We've been using client certificates at MIT for more than a decade. Many people like them. But, most people hate them. As others said, the usability is the primary issue. The specific issues are: 1. You have to install a client certifi
51.
by vabmit 10y ago
Code allowing external access (IMAP etc) to mailboxes that would allow you to download all your mail is in development now. Some IMAP clients ( cough Microsoft cough ) have "interesting" ways of interpreting/implementing th
52.
by vabmit 10y ago
2fa is being tested on the internal development site, now.
53.
by vabmit 10y ago
The move from .ch to .com was done in an attempt to deal with the poor search ranking. It was done because the best guess was that Google was "geocoding" ProtonMail as a Swiss-only relevant website and there for ranking it poorly
54.
by vabmit 10y ago
A lot of people said hire a lawyer. I think that's wrong. I would just move on and find another job and forget about this start-up. My guess would be that either you had bad luck and got involved with a bad founding team or that there
55.
by vabmit 10y ago
Remember how differential cryptanalysis was discovered by the academic community and subsequently the DES S-boxes pre-dating that discovery were found to specifically make DES resistant to that attack?
56.
by vabmit 10y ago
Basically, because people thought it was safe. It didn't seem significant to use the same prime since the key exchange process involves both Alice and Bob generating a secret. Solving the discrete logarithm of g^a mod p was still thoug
57.
by vabmit 10y ago
I just want to point out that the P-curves need not have unique features that allow for more efficient computations during code breaking in order to be "weak" or "backdoored". Simply the fact that the curves are standard
58.
by vabmit 10y ago
The problem is that since the qualities of these special semi-primes that allow SNFS to work on them is not very well understood there is not an easy way to test if an attacker could use SNFS rather than GNFS. Additionally, running SNFS (or
59.
by vabmit 10y ago
I been involved in the cryptography/security community for many years. I continually see privacy/security start-ups struggle. There are lots of reasons. But, I think the key one is that doing something online securely will always
60.
by vabmit 11y ago
There is no need to modify the ISO image on the server's disk just as there is no need to modify the ProtonMail source code on disk (both of which would make it more likely to get caught). The NSA has been known to have the ability to

More ›