Silk Road forums
Discussion => Security => Topic started by: euler2718 on February 05, 2013, 05:47 pm
-
Does anybody know any free apps to do this, and if not can somebody with forum presence maybe write a program that does this. I know somebody has to have asked this or hinted at this before. Desperately need to communicate to certain people without fear of the government intercepting information.
-euler
-
It's a little bit more problematic than you're thinking it is... I mean it's entirely possible, but it's not like "sure, somebody will have that out to you this afternoon!" Just use APG to encrypt messages and email them back and forth, possibly as attachments so you don't have to cut & paste I suppose. Not all that familiar with the app, but there has to be a PGP encryption app for iOS too. I have no clue what it is, but it's got to be out there.
-
For ios there are a couple of apps: secumail, ipgmail?( I think) and oPenGP which is the one I have used. It works fine, but if you have a jail broken iPhone then Cydia comes with GPG. You use it from the command line (Mobile Terminal) in combination with iFile. I wrote a tutorial for it a while back. When I get chance I'll trawl back through my posts; unless someone cares enough to beat me to it. It's basically same as Linux command line GPG, but since copy/ paste doesn't work great in Mobile Terminal it's best to use it to encrypt .txt or .asc files using -a in the command ( this will output an encrypted.asc file rather than a .gpg file, which you can copy paste from.)
It sounds a bit complicated, but once you get set up with all the commands as shortcuts in Terminal, and a blank .asc file to copy paste to, it works pretty well and is more versatile than the GUI versions above
-
Here is guide to GPG on jail broken iphone
http://dkn255hz262ypmii.onion/index.php?topic=27442.msg298906#msg298906
-
For ios there are a couple of apps: secumail, ipgmail?( I think) and oPenGP which is the one I have used.
APG on Android and oPenGP on iOS both work very well!
-
tigertext is a android/ios/bb messaging app that lets you set time limits for messages to expire or lets you recall messages on demand. Messages are sent encrypted through data plan, not through regular sms, and are also not stored locally on the phone but on the company's servers until the message is deleted. Their servers are supposed to be dumped every minute.
*using a third party app requires faith in the creator(s)*
-
For ios there are a couple of apps: secumail, ipgmail?( I think) and oPenGP which is the one I have used.
APG on Android and oPenGP on iOS both work very well!
But is there a way for me to send an encrypted text from my Android with APG and have some1 decrypt it on their iPhone? I'm a little confused, that's what I'm trying to do.
-euler
-
tigertext is a android/ios/bb messaging app that lets you set time limits for messages to expire or lets you recall messages on demand. Messages are sent encrypted through data plan, not through regular sms, and are also not stored locally on the phone but on the company's servers until the message is deleted. Their servers are supposed to be dumped every minute.
*using a third party app requires faith in the creator(s)*
+1 on TigerText.. I hear its used a lot in the business world for sensitive inside info.
-
2048 bits is generally considered the minimum size RSA key (assuming you want basically "guaranteed" security, not a "good enough" security). My key is 4096 bits, and the minimum ciphertext using it (encrypting the letter "a") is 905 ASCII-armored characters.
That's 6 text messages. Again, it's not impossible or undoable... but the question is why does it absolutely need to be done via SMS?
-
http://www.slate.com/articles/technology/future_tense/2013/02/silent_circle_s_latest_app_democratizes_encryption_governments_won_t_be.single.html anyone see this announcement? A new encryption app...idk anything about it though
-
http://www.slate.com/articles/technology/future_tense/2013/02/silent_circle_s_latest_app_democratizes_encryption_governments_won_t_be.single.html anyone see this announcement? A new encryption app...idk anything about it though
Rarely have I read such a puffed up piece of tripe... it's a user friendly private key encryption system. That they chop into lots of pieces, and for some reason, transmit to their servers. Which then gets downloaded. Or something like that.
There's so many words in this article, and so very little said. This is nothing special, at least not as described. The author is a very strange tech writer, because he apparently knows almost nothing about technology...
-
http://www.slate.com/articles/technology/future_tense/2013/02/silent_circle_s_latest_app_democratizes_encryption_governments_won_t_be.single.html anyone see this announcement? A new encryption app...idk anything about it though
Rarely have I read such a puffed up piece of tripe... it's a user friendly private key encryption system. That they chop into lots of pieces, and for some reason, transmit to their servers. Which then gets downloaded. Or something like that.
There's so many words in this article, and so very little said. This is nothing special, at least not as described. The author is a very strange tech writer, because he apparently knows almost nothing about technology...
since you explained the subject of his article a lot better than the writer did, I'll take your word for it.
-
But is there a way for me to send an encrypted text from my Android with APG and have some1 decrypt it on their iPhone? I'm a little confused, that's what I'm trying to do.
yes most versions of PGP/GPG are compatible with each other that's not the problem. If you are intending to carry on any kind of drug business using smart phones I'd say it's a bad idea. I provided the information above purely for, well, informations sake.
-
But is there a way for me to send an encrypted text from my Android with APG and have some1 decrypt it on their iPhone? I'm a little confused, that's what I'm trying to do.
yes most versions of PGP/GPG are compatible with each other that's not the problem. If you are intending to carry on any kind of drug business using smart phones I'd say it's a bad idea. I provided the information above purely for, well, informations sake.
Thank you I was confused about something I guess, but I understand now. And don't worry I don't plan on running a drug business off my cell phone, I'd just rather have the gov't not be able to see some of the texts I send to certain people. I don't deal drugs.
-euler
-
Had a look at this app. It looks good but can someone explain it to me like I am a child.
It says it advises installing k9 email as well. So I installed k9.
I generated a secret key on the app, but I am finding it difficult to "export" a public key, and it only seems to give me the option to export my "secret key".
With k9 supposedy if its set up right, you can automatically send and receive emails which will encrypt and decrypt. Has anyone got it running smooth? Thanks.
-
Bump, to keep up with this thread!
-
Gliph App
It's what you are looking for :)
-
i've heard a lot of warnings and cautions against using IOS devices for anything SR related
is this because of having your identity so closely tied with the device?
I'm sure apple is a corp. that would cooperate with LE on anything if they haven't already
if the iphone is unlocked/jailbroken and paid for thru an anonymous method does this make it potentially securable?
-
I have also heard these warnings and every time they come up I ask for the details of why using an IOS device to access Tor network, or using GPG to encrypt messages sent over Tor from iOS. I hear a lot of "Personally I wouldn't trust a smart phone " but I'd like to know the specific risks so I can decide for myself.
I have used Onion browser in the past, with Tor bridges and user agent spoofing so I appear to be using windows 7. How is my identity being leaked? At which point in the chain? Please understand I am not casting doubts on people better informed than me, but whenever this question comes up there is a lot of muttering into beards but no solid facts. There has been suggestions that malicious code may be pushed to my device, but I have changed my root password and disabled OTA software updates.
Or is it suspected that the Onion browser project and oPenGP might have backdoors, either deliberate or accidental?
I understand about it being a bad idea to, say, burgle a house while carrying a mobile phone as your location in the area can be confirmed. But this seems to me not really to apply to using it to access Tor.
Just to add, I order rarely from SR and only small amounts, and so obviously I am less concerned about what an adversary with large resources could do against me;
I guess another risk is that if one of my small packages were intercepted and my device seized, it isn't encrypted in the same way a PC can be.
I'd just like one of the security gurus to step in here and advise me of the details of the vulnerabilities here.
I have also heard about phone microphones being remotely activated . Again, I don't really see this as a concern in this instance.
I guess the core of what I'm asking is in what way is using Tor from a phone more risky than using it from your home IP, which I'm sure many of us do? Can my communications be intercepted between my device and the cell tower? But surely I would have to be under scrutiny already?
-
I wouldn't trust any device that is FCC-compliant, GPS-capable, and closed-source with built-in data transmission whose functionality is controlled by a wireless manufacturer. Maybe I'm a little on the paranoid side.
Tor and PGP are only as secure as the machine you're using it on. If it's a 1-piece unit built and controlled by somebody else, they could easily have direct access to exactly what is shown on the screen and which connection requests the user is making.
-
My thinking is that if you use a phone you are better off with Android than an I phone.
I didn't think it was possible to do truly secure pgp encryption on phones and tablets yet.
It is just so easy to hack a cell phone I didn't think it was a good idea to use it for SR business ( not just looking around ). Am I wrong on this?
-
Threema is very good..
Android App release any day...
Real E2E encryption.
Cheers!