HNHacker News
TopNewBestAskShowJobs

d0ne

5,926 karma · joined May 5, 2011

Life doesn't have to be a zero-sum game.
submissionscomments
d0ne··on Mark Zuckerberg Interview
Video is below the fold. Sums up Facebook quite well within the first 90 seconds "The Facebook is a directory where I can go to look up all the information I care to know about you..."
d0ne··on The Blackberry Shift: From the executive phone to the phone of the urban poor
I keep two Blackberries handy, different providers, for reliable email receipt and transmission as well as BBM as I'm frequently traveling between countries.
d0ne··on Google Admits Handing over European User Data to US Intelligence Agencies
What site are you visiting? There is no "options" option in Social Fortress. If you can email a detailed explanation to support@socialfortress.com and we will get back to you promptly.
d0ne··on Google Admits Handing over European User Data to US Intelligence Agencies
This is a very real problem and provides case in point as to why everyone needs to start using client-side encryption for their data and communications.

In some cases this is still currently impractical to do on a day to day basis but in others such as Email, Social Networking or Instant Messaging it is not[1][2].

[1] I'm involved with a company that recently launched a free tool that provides transparent client-side AES256 encryption for Facebook, Google+, Major Email apps among others.

[2] https://www.socialfortress.com/

d0ne··on ‪Guy Kawasaki: Make Meaning in Your Company‬‏ [video]
Elegant way of expressing a complex notion.

Another great Guy video: http://www.youtube.com/watch?v=mGqvaw1i904

d0ne··on Show HN: Online Privacy through Client-side Encryption
Protected messages and photos, yes. You do have the option to toggle the protection on and off in real-time.
d0ne··on Facebook has your complete phonebook
Thanks. To see protected messages and photos, yes. You are able to toggle protection on and off in real-time so you can easily choose to send simple, less detailed, messages in plain-text and more detailed encrypted.
d0ne··on Facebook has your complete phonebook
We created Social Fortress[1] for this exact reason. Solve the root problem: Protect(AES256 Encrypt) and control your data transparently, prior to sending it anywhere, and you don't have to worry about this ever again.

[1] I'm involved with https://www.socialfortress.com

d0ne··on Facebook has your complete phonebook
I remember at some point when authorizing the installation of the FB BB App (well over a year ago) it mentioned something about needing access to contacts to work. I presumed this to mean for the local app not for them to suck them up into the cloud.

FB continues to lead the way when it comes to "it's in our TOS but don't go reading it because it won't match our marketing copy"

d0ne··on Facebook has your complete phonebook
No, any phone you install the Facebook App on. As Facebook has my phone contacts. I don't own an iPhone and only use a BB.
d0ne··on Hackers Can Kill Diabetics w/ Insulin Pumps? Facts vs. Fear Mongering
This is assuming you only want to control the pump. If the individual is unable to view any information on their monitor, or their monitor is displaying improper data, it may cause other serious health issues in high risk patients.

Not to mention that some devices may be controlled by the monitoring device and it may require a constant stream of good data.

I agree that not all setups and individuals are at risk but some most likely are.

d0ne··on Hackers Can Kill Diabetics w/ Insulin Pumps? Facts vs. Fear Mongering
The gentlemen who wrote this post takes an approach I'm not comfortable supporting: The signal and commands haven't been successfully reversed engineered yet so this isn't a real threat.

A little bit about my background: 10+ years successfully (legally) reverse engineering software technology that required both client software and packet manipulation in industries that have been very proactive against it.

Seeing as the medical devices are hardware items issued to unique individual recipients the issue could easily be fixed with a 1024+ Public Private Key-Pair between the devices unique to each issuance.

However, this does nothing to protect the many millions of individuals, using today's devices, potentially exposed to the threat described by Jay Radcliffe.

d0ne··on $1 chip tests for HIV in 15 minutes, fits in your wallet
If you do some searching around you will find 3% to 5% false positive for blood test is not uncommon.
d0ne··on $1 chip tests for HIV in 15 minutes, fits in your wallet
No.

Innovation in practical use medical technologies is one of my personal passions and frequently on the receiving end of my philanthropy.

d0ne··on $1 chip tests for HIV in 15 minutes, fits in your wallet
I could foresee these items being purchased in bulk by individuals. At the $1 price point Bachelors and Bachelorettes around the world might purchase these as frequently as Condoms.
d0ne··on $1 chip tests for HIV in 15 minutes, fits in your wallet
Even if they don't intend to market this to the US I will do whatever I can to see that it is easily available here.
d0ne··on Site Blocking: What the UK Government would prefer you not to see
That is because Deep Packet Inspection can not be prevented with SSL:

http://www.sonicwall.com/downloads/SonicOS_Enhanced_5.6_DPI-...

d0ne··on The Legislation That Could Kill Internet Privacy for Good
One step at a time. Get history first, data second. With history they can then force web site operators to retain their data for the same period of time.
d0ne··on The Legislation That Could Kill Internet Privacy for Good
This is, among other reasons, is why we created Social Fortress. We posted a Show HN earlier today about it[1].

[1] http://news.ycombinator.com/item?id=2837142

d0ne··on Show HN: Side project turned startup - Online Privacy via Client-side encryption
We are based in Atlanta.

We have raised around $100k and currently in multiple discussions for series A. Self funded the first $25k with the rest from Angels.

We were recently accepted into a incubator program which comes with funding that is not included in the number above.

Our current discussions for a Series A were initiated by the other parties.

d0ne··on Show HN: Side project turned startup - Online Privacy via Client-side encryption
Started working on the Social Fortress platform 7 months ago when there wasn't a solution that satisfied a need. Eventually turned it into a funded start-up and now it is live.

Social Fortress provides consumers with unparalleled privacy online by integrating transparent client-side encryption transparently into major social networks, webmail service providers and desktop email clients. Consumers’ data is encrypted prior to leaving their device and stays that way until it reaches the device of trusted contacts where decryption is also done on client devices.

Social Fortress protects messages and photos using AES 256 CTR method with rolling keys. No two messages or photos are encrypted with the same key. Social Fortress maintains the central key management server as well as the consumers relationship and authorization trees.

All of the encryption and decryption is done in the background, directly inline, so the end user experience on his or her favorite online communication platform does not change. Messages are stored wherever they would normally should be except they are protected with AES encryption every step of the way. Photos are stored encrypted in a separate data center with no access to the key management infrastructure.

It takes less than a minute to get Social Fortress, and it installs as a single browser plugin for web apps or application plugin in the case of Outlook or Thunderbird. We just launched into an open beta and would appreciate your feedback.

If you have any questions that are not answered on our site, we will be here to answer them.

d0ne··on Google Loses Effort to Seal Records in Android Patent Lawsuit With Oracle
I find it good practice to hand write, what at the time I deem very important, emails I'm not 100% certain I should send. Sleep on it and then read it the next day. If I still want to send it then I type it up and press Send.
d0ne··on Facial-Recognition Tools Pose New Risk
If you hit the pay-wall try this link and then clicking on the article from there:

http://www.google.com/search?aq=f&hl=en&gl=us&tb...

d0ne··on Show HN: Weekend Project - Create Simple Android mockup
No worries, it happens.
d0ne··on Show HN: Weekend Project - Create Simple Android mockup
Your project is useful. 'alleri' + one word comment + your recent status fit the pattern I've seen lately. I've up voted your post.
d0ne··on Show HN: Online Privacy through Client-side Encryption
Link and a bit more technical details:

https://www.socialfortress.com/

Social Fortress currently provides transparent client-side encryption and decryption within Facebook, Google+, Thunderbird and Outlook for your messages and photos.

When you download and install Social Fortress your plugin is customized to sync with just your account and the key management server. This unique plugin is authorized to request keys for messages for your Trusted Contacts and generate new keys associated with your account.

The keys are generated in parallel on the client and on the key management server. They are always rolling forward and are synced with the key management server in real-time utilizing a few unique variables within your custom plugin and a few generated randomly each time.

No two messages are encrypted with the same key and keys are only stored in memory during the encryption / decryption process. Every time a message or photo that has been protected is viewed, either by yourself or others, authorization to that messages key is requested from the key management server.

Your Trusted Contact list is managed globally by connecting with other users through Social Fortress. Within Facebook all of your friends are initially treated as Trusted Contacts and you can easily remove individuals from this list with the click of a button.

Social Fortress uses AES-256 CTR for the encryption and communicates over a 256 SSL stream from your device to the key management server. The data in this stream is also encrypted using aspects of your customized installation.

The technology for web services (Facebook, Google+) operates as browser plugin for Firefox, Chrome and Internet Explorer[1] and independent of any service's API.

The technology for Thunderbird and Outlook is a separate plugin which requires installation.

We integrate transparently into the products we support so the user experience is exactly the same. No extra clicks, no confusing decisions and nothing extra to learn. We designed Social Fortress to be used by individuals who don't even know what the word encryption is.

Within every environment you have the ability to enable / disable Social Fortress protection with the click of a button or using a keyboard shortcut (CTRL+Q). This only disables the encryption functions. The reader is always on so messages and photos protected by your friends appear normal without you having to protect your own. It's like having Flash or PDF Reader once it is installed you don't ever have to do anything again.

If your device becomes compromised / lost / whatever you can login to the site and disable all active installations in two clicks and this will not affect previously encrypted messages as we just disable authorization access to your old plugins and have no need to change any previously generated keys.

We also support other services but have yet to make them live:

Skype Chat

Twitter

mail.yahoo.com

Gmail.com

Chatter.com

Yammer.com

Blackberry Native Email support

[1] The IE Plugin is not currently part of the public beta.

d0ne··on 'friend ships' between teachers, students banned by new Missouri law
Link: http://www.newtechie.com/2011/07/social-networking-friendshi...
d0ne··on Loopt has invalid SSL cert?
Can't post the screenshot directly to HN. However, you may be able to contact Loopt on their support page: http://loopt.zendesk.com/forums or via there twitter @loopt
d0ne··on Here’s How U.S. Spies Will Find You Through Your Pics
For all the non-criminals out there who actually think they are entitled to privacy this is another good use case for Social Fortress[1][2].

[1] Disclaimer: I'm involved with Social Fortress

[2] Social Fortress protects messages and photos with transparent client side encryption directly within services such as Facebook, Google+, Outlook and others. It can be had for free from https://www.socialfortress.com

d0ne··on Can Homomorphic Encryption be Practical?
We've looked into this at Social Fortress and while Homomorphic Encryption could have interesting uses there are more practical approaches for the enterprise in the use cases presented in this paper.

Kudos to the researchers as there is valuable information contained.

← PreviousPage 3 of 6Next →