Silk Road forums
Discussion => Newbie discussion => Topic started by: android465764E on February 02, 2013, 03:37 pm
-
So I was informed recently that the online PGP method - igolder, is probably not as secure as one would like.
So, I sought out a better method. Can never be too careful.
It seems that setting up PGP on a PC is a relatively simple affair. No such luck for people without a computer.
I have however, found a method for Android OS users which requires not much stress at all. If you already know how to do this, groovy. If you don't, read on.
I present these instructions in the hope that anyone else who is having Android dilemmas, can benefit.
1. Download an app called "APG" by Thialfihar, from the market.
2. Download a decent notepad app, one that doesn't have a character limit. "Jota Text Editor" is a good one.
3. Go to the seller's profile, and copy their PGP key to your clipboard.
4. Open Jota, and paste the clipboard contents into a new document.
5. Save the document as a *.pgp file.
ie, when you hit save, change the extension from .txt to .pgp - so it looks like this.. VendorName.pgp (obviously, substitute vendorname for the actual seller's name).
6. Open APG. Click..
Menu>Manage Public Keys>Import Keys
Next, browse for the file you just saved in Jota, and click it. Then click OK.
7. Press the "back" key on your phone, and click "Encrypt Message".
8. Type your address (or whatever info you're encrypting) into the white box.
9. Press the "select" button next to the words "Public Key(s)". On the next screen, select the vendor's key, and press OK.
10. Next, press "Encrypt to Clipboard".
11. You will see a pop-up with a message saying the encryption was successful.
Now go to SR, and dump your clipboard in the appropriate place during checkout. (the bit that asks for your address).
Done!
As I'm still new at SR and willing to take advice, I think it's useful to reciprocate and share methods and techniques.
Chances are, if I struggled with something, someone else probably did too.
So there it is.
A PGP solution for Android.
The APG app is only just out of beta, but I've tested it with Android 2.3.4 and above. Seems to work fine.
-
Man, thats freaking awesome, will be giving it a shot soon,many thanks.....
-
Man, thats freaking awesome, will be giving it a shot soon,many thanks.....
My pleasure. Glad it helps. TeamAndroidFTW!! lol....
-
Ever heard of CarrierIQ? Look it up. Was a big scandal, almost all the major carriers were using it in the US: it's just an example of the sort of thing happening on your phone that you have no idea about.
The problem with Android is that it's partially designed to keep control away from you, and in the hands of the carriers. That's not so good. Is APG better than no encryption? Well, sure, I suppose so. But you've got the same problem as iGolder.com, in the end -- a third party can conceivably defeat the encryption with ease if they choose to. I'm sure whether or not they actually have monitoring software intrusive enough to do so depends on the ROM you use, but Android is fundamentally insecure unless you really, really know what you're doing.
-
I do know of CarrierIQ. My phone doesn't have it. I'm rooted, and beleive me I know how about custom ROMs and that carrier IQ shit.
There's a simple app online that can identify if you have it, and removing (as-well as other system bloatware) is a simple process.
But thanks for bringing it up. Every little helps when it comes to security.
-
Great!