Hacker News Reader

Comment by GeorgeMac | Hacker News Reader

Is it me or is their a guy in the video getting baked? Not only that it is around the security part where he is getting in contact with his mate "Jason Greengrocer" about getting more. That part makes me happy!

View on HN

Daniela, goTenna co-founder here, "Jason Greengrocer" is actually a real person in my phone I contact about once a month ;)

Are you suggesting Jason lives in your phone?

I think they are quite deliberately pointing out that dealers can communicate with their users in private, outside of law enforcement spying on them [Use case A1].

I like the fact that can be publicly advertised as a unique selling point.

Also, if they're not encrypting the radio transmission, easily intercept-able.

All transmissions are end-to-end encrypted, unless you use the "shout" or "emergency" features which are, by definition, messages to everyone within range of you.

For those who care about security, is there an article to read for further details on that?

Hi! I'm on the mobile development team here at goTenna. We're taking advantage of the Bluetooth LE standard encyption with is AES-CCM. More on that here: http://bit.ly/1teKWvG

For encrypting the data as it's sent between gotennas we're using 1024 bit RSA. Not sure what level of detail you'd like.. but here are a few things to get you started!

RSA itself: http://bit.ly/1kDlTgP Cryptographic Services: http://bit.ly/1teLhPb More on CDSA (see above articles first): http://bit.ly/Ug2CLt

Much of our approach is fairly standard!

So, question: How do you authenticate the person you are trying to message with, i.e. How do I know that I'm sending the message I want to send to (the real) Jason Greengrocer not the FBI pretending to be Jason?

At set up, you can either set up your goTenna ID to be your phone number (recommended, as it will then integrate with your contact list and make it easy for other people you know using goTenna to find you with goTenna) or a randomly generated string we create for you (for the crypto people out there!). The way we ensure your (or Jason Greengrocer's!) phone number isn't spoofed is we verify your phone number through the regular telephony network when you do have connectivity. If you complete setup without connectivity and enter a telephone number as your ID, you will show up as "Unverified." We don't recommend offline setup though because then you can't download all our awesome detailed offline map packs (you'll just get the world vector map that comes with the app at download).

I thought encryption on amateur radio frequencies was not allowed?

Not an issue on MURS; you're thinking of GMRS.

Reply on news.ycombinator.com