News for hackers. Stuff that matters.
Re:GoTenna – Send and receive messages even when you don’t h... by GeorgeMac on Friday July 18, 2014 @08:45AM (#8052691)
Is it me or is their a guy in the video getting baked? Not only that it is around the security part where he is getting in contact with his mate "Jason Greengrocer" about getting more. That part makes me happy!
Re:GoTenna – Send and receive messages even when you don’t h... by daniper on Friday July 18, 2014 @10:42AM (#8053244)
Daniela, goTenna co-founder here, "Jason Greengrocer" is actually a real person in my phone I contact about once a month ;)
Re:GoTenna – Send and receive messages even when you don’t h... by danesparza on Friday July 18, 2014 @11:19AM (#8053477)
Are you suggesting Jason lives in your phone?
Re:GoTenna – Send and receive messages even when you don’t h... by junto on Friday July 18, 2014 @09:11AM (#8052784)
I think they are quite deliberately pointing out that dealers can communicate with their users in private, outside of law enforcement spying on them [Use case A1].
Re:GoTenna – Send and receive messages even when you don’t h... by GeorgeMac on Friday July 18, 2014 @09:17AM (#8052818)
I like the fact that can be publicly advertised as a unique selling point.
Re:GoTenna – Send and receive messages even when you don’t h... by lighthazard on Friday July 18, 2014 @11:33AM (#8053583)
Also, if they're not encrypting the radio transmission, easily intercept-able.
Re:GoTenna – Send and receive messages even when you don’t h... by daniper on Friday July 18, 2014 @11:44AM (#8053657)
All transmissions are end-to-end encrypted, unless you use the "shout" or "emergency" features which are, by definition, messages to everyone within range of you.
Re:GoTenna – Send and receive messages even when you don’t h... by drdaeman on Friday July 18, 2014 @12:48PM (#8054052)
For those who care about security, is there an article to read for further details on that?
Re:GoTenna – Send and receive messages even when you don’t h... by jmyaunch on Friday July 18, 2014 @02:04PM (#8054590)
Hi! I'm on the mobile development team here at goTenna. We're taking advantage of the Bluetooth LE standard encyption with is AES-CCM. More on that here: http://bit.ly/1teKWvG

For encrypting the data as it's sent between gotennas we're using 1024 bit RSA. Not sure what level of detail you'd like.. but here are a few things to get you started!

RSA itself: http://bit.ly/1kDlTgP Cryptographic Services: http://bit.ly/1teLhPb More on CDSA (see above articles first): http://bit.ly/Ug2CLt

Much of our approach is fairly standard!

Re:GoTenna – Send and receive messages even when you don’t h... by jimmies on Friday July 18, 2014 @06:56PM (#8056016)
So, question: How do you authenticate the person you are trying to message with, i.e. How do I know that I'm sending the message I want to send to (the real) Jason Greengrocer not the FBI pretending to be Jason?
Re:GoTenna – Send and receive messages even when you don’t h... by daniper on Saturday July 19, 2014 @12:20AM (#8056678)
At set up, you can either set up your goTenna ID to be your phone number (recommended, as it will then integrate with your contact list and make it easy for other people you know using goTenna to find you with goTenna) or a randomly generated string we create for you (for the crypto people out there!). The way we ensure your (or Jason Greengrocer's!) phone number isn't spoofed is we verify your phone number through the regular telephony network when you do have connectivity. If you complete setup without connectivity and enter a telephone number as your ID, you will show up as "Unverified." We don't recommend offline setup though because then you can't download all our awesome detailed offline map packs (you'll just get the world vector map that comes with the app at download).
Re:GoTenna – Send and receive messages even when you don’t h... by orbifold on Saturday July 19, 2014 @04:07AM (#8056982)
I thought encryption on amateur radio frequencies was not allowed?
Re:GoTenna – Send and receive messages even when you don’t h... by daniper on Saturday July 19, 2014 @03:52PM (#8058513)
Not an issue on MURS; you're thinking of GMRS.