5,926 karma · joined May 5, 2011
In some cases this is still currently impractical to do on a day to day basis but in others such as Email, Social Networking or Instant Messaging it is not[1][2].
[1] I'm involved with a company that recently launched a free tool that provides transparent client-side AES256 encryption for Facebook, Google+, Major Email apps among others.
Another great Guy video: http://www.youtube.com/watch?v=mGqvaw1i904
[1] I'm involved with https://www.socialfortress.com
FB continues to lead the way when it comes to "it's in our TOS but don't go reading it because it won't match our marketing copy"
Not to mention that some devices may be controlled by the monitoring device and it may require a constant stream of good data.
I agree that not all setups and individuals are at risk but some most likely are.
A little bit about my background: 10+ years successfully (legally) reverse engineering software technology that required both client software and packet manipulation in industries that have been very proactive against it.
Seeing as the medical devices are hardware items issued to unique individual recipients the issue could easily be fixed with a 1024+ Public Private Key-Pair between the devices unique to each issuance.
However, this does nothing to protect the many millions of individuals, using today's devices, potentially exposed to the threat described by Jay Radcliffe.
Innovation in practical use medical technologies is one of my personal passions and frequently on the receiving end of my philanthropy.
http://www.sonicwall.com/downloads/SonicOS_Enhanced_5.6_DPI-...
We have raised around $100k and currently in multiple discussions for series A. Self funded the first $25k with the rest from Angels.
We were recently accepted into a incubator program which comes with funding that is not included in the number above.
Our current discussions for a Series A were initiated by the other parties.
Social Fortress provides consumers with unparalleled privacy online by integrating transparent client-side encryption transparently into major social networks, webmail service providers and desktop email clients. Consumers’ data is encrypted prior to leaving their device and stays that way until it reaches the device of trusted contacts where decryption is also done on client devices.
Social Fortress protects messages and photos using AES 256 CTR method with rolling keys. No two messages or photos are encrypted with the same key. Social Fortress maintains the central key management server as well as the consumers relationship and authorization trees.
All of the encryption and decryption is done in the background, directly inline, so the end user experience on his or her favorite online communication platform does not change. Messages are stored wherever they would normally should be except they are protected with AES encryption every step of the way. Photos are stored encrypted in a separate data center with no access to the key management infrastructure.
It takes less than a minute to get Social Fortress, and it installs as a single browser plugin for web apps or application plugin in the case of Outlook or Thunderbird. We just launched into an open beta and would appreciate your feedback.
If you have any questions that are not answered on our site, we will be here to answer them.
https://www.socialfortress.com/
Social Fortress currently provides transparent client-side encryption and decryption within Facebook, Google+, Thunderbird and Outlook for your messages and photos.
When you download and install Social Fortress your plugin is customized to sync with just your account and the key management server. This unique plugin is authorized to request keys for messages for your Trusted Contacts and generate new keys associated with your account.
The keys are generated in parallel on the client and on the key management server. They are always rolling forward and are synced with the key management server in real-time utilizing a few unique variables within your custom plugin and a few generated randomly each time.
No two messages are encrypted with the same key and keys are only stored in memory during the encryption / decryption process. Every time a message or photo that has been protected is viewed, either by yourself or others, authorization to that messages key is requested from the key management server.
Your Trusted Contact list is managed globally by connecting with other users through Social Fortress. Within Facebook all of your friends are initially treated as Trusted Contacts and you can easily remove individuals from this list with the click of a button.
Social Fortress uses AES-256 CTR for the encryption and communicates over a 256 SSL stream from your device to the key management server. The data in this stream is also encrypted using aspects of your customized installation.
The technology for web services (Facebook, Google+) operates as browser plugin for Firefox, Chrome and Internet Explorer[1] and independent of any service's API.
The technology for Thunderbird and Outlook is a separate plugin which requires installation.
We integrate transparently into the products we support so the user experience is exactly the same. No extra clicks, no confusing decisions and nothing extra to learn. We designed Social Fortress to be used by individuals who don't even know what the word encryption is.
Within every environment you have the ability to enable / disable Social Fortress protection with the click of a button or using a keyboard shortcut (CTRL+Q). This only disables the encryption functions. The reader is always on so messages and photos protected by your friends appear normal without you having to protect your own. It's like having Flash or PDF Reader once it is installed you don't ever have to do anything again.
If your device becomes compromised / lost / whatever you can login to the site and disable all active installations in two clicks and this will not affect previously encrypted messages as we just disable authorization access to your old plugins and have no need to change any previously generated keys.
We also support other services but have yet to make them live:
Skype Chat
mail.yahoo.com
Gmail.com
Chatter.com
Yammer.com
Blackberry Native Email support
[1] The IE Plugin is not currently part of the public beta.
[1] Disclaimer: I'm involved with Social Fortress
[2] Social Fortress protects messages and photos with transparent client side encryption directly within services such as Facebook, Google+, Outlook and others. It can be had for free from https://www.socialfortress.com
Kudos to the researchers as there is valuable information contained.