News for hackers. Stuff that matters.
Re:GoTenna – Send and receive messages even when you don’t h... by daniper on Friday July 18, 2014 @11:44AM (#8053657)
All transmissions are end-to-end encrypted, unless you use the "shout" or "emergency" features which are, by definition, messages to everyone within range of you.
Re:GoTenna – Send and receive messages even when you don’t h... by drdaeman on Friday July 18, 2014 @12:48PM (#8054052)
For those who care about security, is there an article to read for further details on that?
Re:GoTenna – Send and receive messages even when you don’t h... by jmyaunch on Friday July 18, 2014 @02:04PM (#8054590)
Hi! I'm on the mobile development team here at goTenna. We're taking advantage of the Bluetooth LE standard encyption with is AES-CCM. More on that here: http://bit.ly/1teKWvG

For encrypting the data as it's sent between gotennas we're using 1024 bit RSA. Not sure what level of detail you'd like.. but here are a few things to get you started!

RSA itself: http://bit.ly/1kDlTgP Cryptographic Services: http://bit.ly/1teLhPb More on CDSA (see above articles first): http://bit.ly/Ug2CLt

Much of our approach is fairly standard!

Re:GoTenna – Send and receive messages even when you don’t h... by jimmies on Friday July 18, 2014 @06:56PM (#8056016)
So, question: How do you authenticate the person you are trying to message with, i.e. How do I know that I'm sending the message I want to send to (the real) Jason Greengrocer not the FBI pretending to be Jason?
Re:GoTenna – Send and receive messages even when you don’t h... by daniper on Saturday July 19, 2014 @12:20AM (#8056678)
At set up, you can either set up your goTenna ID to be your phone number (recommended, as it will then integrate with your contact list and make it easy for other people you know using goTenna to find you with goTenna) or a randomly generated string we create for you (for the crypto people out there!). The way we ensure your (or Jason Greengrocer's!) phone number isn't spoofed is we verify your phone number through the regular telephony network when you do have connectivity. If you complete setup without connectivity and enter a telephone number as your ID, you will show up as "Unverified." We don't recommend offline setup though because then you can't download all our awesome detailed offline map packs (you'll just get the world vector map that comes with the app at download).
Re:GoTenna – Send and receive messages even when you don’t h... by orbifold on Saturday July 19, 2014 @04:07AM (#8056982)
I thought encryption on amateur radio frequencies was not allowed?
Re:GoTenna – Send and receive messages even when you don’t h... by daniper on Saturday July 19, 2014 @03:52PM (#8058513)
Not an issue on MURS; you're thinking of GMRS.