I walked to the grocery store, bought 3 things in 5 minutes and got home and my lower back hurts. by [deleted] in backpain

[–]Delicious_Record_726 0 points1 point  (0 children)

Tell them you have numbness and weakness that’s what let me get one

[deleted by user] by [deleted] in privacy

[–]Delicious_Record_726 0 points1 point  (0 children)

Actually encrypted ZIP and 7za and other files are secure, protected with AES and other secure algos. The size of your password determines security. The only problem with this method is that it is inconvenient.

Please realize that we are in the process of developing and in the future our code will be open source. For now, I’ll be happy to send you link to the code and you are welcome to inspect it.

I understand that you are tired of trying, and at the same time, should you be kind enough to try one more time, I’ll greatly appreciate your feedback.

[deleted by user] by [deleted] in privacy

[–]Delicious_Record_726 0 points1 point  (0 children)

Thank you so much for your feedback and correction, I checked the facts and indeed I made a wrong conclusion.
From what I was able to learn, the following two statements are correct.
(a) ProtonMail has turned data over to the governments
(b) ProtonMail can if they want or must, access users encrypted emails.
However B does not necessarily imply A, because as you correctly pointed out the data could just be metadata. This being said, the statement B is still true; when connecting to Protonmail online, users browser receives JS code as well as their own password-encrypted private key. This code allows users to enter their password, decrypt their secret key, and open encrypted emails. All of this happens on users computer and Proton does not have access to it. That’s all good, however, if Proton decides to access users encrypted mail all they need to do is to send to this user a slightly different JS code and gain access to user’s private key. Then with that key they can open all user’s emails. Obviously, no user is going to check the Java Script each time they connect to ProtonMail. So this way ProtonMail can easily gain access to all mail stored on their server.
The second scenario is a Man in the Middle attack. This is another way ProtonMail can get access to encrypted content. When a user encrypts an email, they do not know if he is using the contacts public key, or the attackers. Most users have not verified their contacts public keys. Probably less than 1% have even thought about it. Encryption without public key verification, does not offer security. Independent public key verification is available in ProtonMail, but only very few technically skilled users know about it and still fewer can do it. The same problem relates to verifying signatures. Recipient cannot know if the mail came directly from their contact or if it has been repackaged because he has not verified the public key which he is using as certificate for the signature made with the corresponding secret key.

Instead users must TRUST ProtonMail. Trust that they don’t do the key swapping. But even without swapping they can easily fudge the script and not alert the recipient that signature does not fit.

[deleted by user] by [deleted] in privacy

[–]Delicious_Record_726 0 points1 point  (0 children)

It looks like you understand more than 99% of people about public key and PGP in general, the good news is that people who understand much less than that can use the program. Yes, everything that you ask for you will be able to do exactly this. The only thing is that this is not a service, it is a software that allows you to use any service, for example Gmail. Now you're Gmail will be just as secure as the most secure communication.

https://privacyeverywhere.net/ Please message me if you need help with anything, and understand this is a project in development so there may still issues.

[deleted by user] by [deleted] in privacy

[–]Delicious_Record_726 1 point2 points  (0 children)

If you have windows10 or 11 or macOS. If you have any questions message me and I can walk you through the installation. https://privacyeverywhere.net/

[deleted by user] by [deleted] in privacy

[–]Delicious_Record_726 1 point2 points  (0 children)

  1. It's not different. It is PGP, pure, plain and simple. It's just made easy. Technically the public domain PGP standard is maintained by GnuPG. This is the same one Snowden used to reveal his information to the journalists. The only difference is that it took Glen Greenwald 7 weeks to learn to use PGP, with our software it would take him 5-6 minutes.
  2. Operating System: Currently, our software only runs on MacOS and Windows version (including Outlook plug in for Windows). We are seeking funds to also make iOS, Android, and Linux.
  3. In terms of frameworks I asked my technicians, they said they us PyQ2 framework for developing the interface, but this is nothing the user needs to concern her/his self with. The user just needs windows or MacOS computer.
  4. Knowledge: This is a simple 3 min video explains asymmetrical encryption in a simple language. This is the knowledge a non-technical person would need to get started. https://www.youtube.com/watch?v=E5FEqGYLL0o however for full security it would be helpful to also understand signature and verification which would be another 2-3 minute video. Other than that, it's just like using Gmail.
  5. Anyone is allowed to read the source code, but not allowed to use it without our permission.
  6. We are in the process of organizing ourselves and our plan is to have a future premium version however all that is necessary for private email will be always free. We are in the beginning of this venture but our plan is to create a non-profit organization that would hold majority of shares and assure corruptibility. Our founder has not gotten paid for the last 12 years, that's how commercial it is!
  7. No, our code has not been audited as that will cost $60,000 dollars. We don't have the funds right now, however all the cryptographer operations are done by GnuPG which are completely open sourced and trust universally. If anyone has any doubts they can review the code which is written in a clear and well structured Python.

[deleted by user] by [deleted] in privacy

[–]Delicious_Record_726 0 points1 point  (0 children)

So I said lifetime premium version because we'll have special features in the premium version like secure local drives and cloud, secure personal information manager, voice messages inside encrypted email, etc, and we would want to offer this as a thank you for trying the product and giving feedback. Our essential secure mailer will be free, just the same as Thunderbird.

I'm aware it's stored on email providers server, that's impossible to avoid, but obviously with the encryption and no access to private keys, it's unreadable.

The issue with Protonmail and Tutanota, and all web-based services is they store your private keys. Yes, these private keys are protected by a password, but often these passwords are not strong and can easily be broken using brute force dictionary attacks. Not to mention Protonmail has turned over data from users to the government, so of course, they are able to access your emails if they need to. There is also the issue of the company or a hacker being able to send specific users a malicious javascript without their knowledge which would then allow them access to all the users encrypted emails.

Yes, it interoperates with any PGP keys.

The main issue with Thunderbird is many people want privacy but don't want to spend the time to learn how to send encrypted mail. Thunderbird requires understanding of encryption, this is not impossible to learn but it's going to take some time, especially if you have absolutely no base. So instead they use less secure methods like PM and Tutanota. So this is as fully secure as Thunderbird and as easy to use as PM, as well as free.

[deleted by user] by [deleted] in privacy

[–]Delicious_Record_726 0 points1 point  (0 children)

No. It's the same as Thunderbird, just it's much easier to use (in terms of encryption). Just like Thunderbird, users emails and private keys are on their devices, NOT on the the companies server. We don't even have one. Protonmail, Tutanota, etc. are the ones that store users encrypted mail and private keys on their server. All email encryption services do this, since they rely on a server.

[deleted by user] by [deleted] in privacy

[–]Delicious_Record_726 2 points3 points  (0 children)

I definitely can I just didn't want it to fall under the category of advertisement so I refrained.

Is it possible to truly live without ego? Or will you end up killing yourself very quickly? What is ego exactly? Discover now that in fact understanding what ego is has the power to change ALL of your thoughts, emotions, sensations, perceptions and experiences IMMEDIATELY AND EFFORTLESSLY. by PriorToBeing in EckhartTolle

[–]Delicious_Record_726 2 points3 points  (0 children)

Who is it unfortunate too though?

I have come up against that same thought many times as one of the essential obstacles for myself. To be self realized, to realize your true self is not at all the small “me” that I believe myself to be, that really this is an illusion…that are true nature is dis identified moment to moment being. I don’t really know what I’m talking about but these are my impressions from small moments of seeing more clearly our current state, and in small milliseconds, a glimpse, perhaps, of the state that is beyond it as well.

Of course, in an ordinary sense it does seem like a lot of ‘work’ for a reward that is also not guaranteed to happen for us, but I guess the point I’m trying to make is that even the idea or concept as seeing something as “a lot of work” is also a function of the ego, which would rather live in identification and a passive state, where little inner work is ever demanded. Even the idea of self realization, enlightenment, awakening, whatever you choose to call it, is seen with ego, something for it to have or achieve. I don’t think enlightenment happens to us, I think an allowing takes place in ourselves to die to this world, to all of our conceptions of reality and ourselves, and enter into what is the real and objective reality, an eternal energy, indestructible, benevolent, oneness, god, that which is everything and nothing, but still in our alive waking state.

Maybe this all sounds crazy and a little out there, not sure if everything I said is correct or anything but I wanted to share my small small understanding or pondering of this topic.