Hacker News new | ask | show | jobs
by KennyBlanken 1685 days ago
How do you protect on-device data loaded into the app - specifically from many digital forensics tools used by security consultants, law enforcement, customs, intelligence agencies, and organized crime?

How do you protect data uploaded into your optional cloud service?

How are you poised to protect yourself from potentially nation-state-level actors attempting to control, subvert or compromise this app/service?

Did you develop this app in concert with, or consulting with, any organizations that advise/train high-risk individuals in personal safety? Do they confirm this somewhere publicly?

Why can't I find your name in a google search on anything related to privacy, security, encryption, etc? You barely appear in an google results at all...

What is your education and experience in relation to app development, security, encryption digital privacy? Have you done any research, published anything in peer-reviewed journals, appeared in any conferences, professional or otherwise - in those fields?

Has your app been audited by any established, respected, qualified groups or organizations?

Will anyone established in the fields of security, encryption, or digital privacy vouch for you?

1 comments

> How do you protect on-device data loaded into the app - specifically from many digital forensics tools used by security consultants, law enforcement, customs, intelligence agencies, and organized crime?

Data is not loaded into the app, you upload your data, and taking in consideration your question, you could delete your data in your device, and if need it use the service to send the files, even to yourself.

> How do you protect data uploaded into your optional cloud service?

Files in the cloud are only accesible by your device, they are encrypted and saved into an unreadable folder linked to your device. You cannot know how and where is a file, or how it is named, for example, using the folder system to keep files in Firebase makes that when you are trying to get one of them name changes because the folder is part of that name (virtual folders), so metadata with the name is saved and when a recipient receives an email the download is exactly with the same name as you uploaded, this way files are protected in different ways, including name. What are you going to search if you do not know what to search, or where?.

> How are you poised to protect yourself from potentially nation-state-level actors attempting to control, subvert or compromise this app/service?

Very good question, ToS were redacted by a group of lawyers dedicated to the digital law, the service is working in Europe and I use the same rules to protect the idea. Information will be 15 days available since the emails were sent, that seems to be very little time to react against. And how nation-state-level actors will know about someone using the service?, or you mean like something to shut down, if this is the case I trust the lawyers behind me, or I hope so.

> Did you develop this app in concert with, or consulting with, any organizations that advise/train high-risk individuals in personal safety? Do they confirm this somewhere publicly?

No, I did it myself because see the link I posted before https://www.uoc.edu/portal/es/news/entrevistes/2009/roberto_... in Spanish, please use any translator service, I was a Lecturer in there and saw lots of times how a service like this could have helped a lot of different people, this and that and all made me to go ahead. They know about.

> Why can't I find your name in a google search on anything related to privacy, security, encryption, etc? You barely appear in an google results at all...

Because I am 51 and I have been here since this started (internet) and I took always seriously my privacy, no facebook, twitter.. I like not to be in google, I prefer my ideas to be there, not me.

> What is your education and experience in relation to app development, security, encryption digital privacy? Have you done any research, published anything in peer-reviewed journals, appeared in any conferences, professional or otherwise - in those fields?

In relation to app development, security, encryption digital privacy my education will never be enough that is why I counted/payed on a developers team, in Spain. I planned the app, hows, services to use, and they developed, a year and a half including testing. This is not the firt time I startup something, here years ago I tried an Ecommerce platform in Canary Islands, (one of them La Palma where a volcano is actually working), it is in Spanish, I think that you are searching in English and thats why you have no results, https://www.diariodeavisos.com/2011/12/un-emprendedor-canari...

> Has your app been audited by any established, respected, qualified groups or organizations? Will anyone established in the fields of security, encryption, or digital privacy vouch for you?

Nope, I did not contact anybody, I had the idea 25 years in my head, I lastly found how to build it and here I am. I understand that this point is important, really important for the idea to have more credibility.

Thank you!