News for hackers. Stuff that matters.

bdominy

Re:Interview with Signal President Meredith Whittaker on Wednesday August 28, 2024 @11:44AM (#41380771)
She gave a talk at TechCrunch last year and kindly spoke to me briefly afterwards about how end-to-end encryption can help businesses. The problem is that without a huge benefactor, there isn’t enough consumer demand to make a sustainable business out of privacy concerns.
I created an app to do end-to-end encrypted contact info sharing and updating with your second point in mind. By holding only encrypted data that can't be accessed by us, people will hopefully trust their contact info is only in the hands of people they want. https://neu.cards
Re:VCard and RSS as an alternative to social media on Saturday March 23, 2024 @10:28AM (#39800173)
This helps with the initial exchange of contact information, but keeping it updated for the people that have it is a real challenge, especially if you want to avoid using social media.
Re:VCard and RSS as an alternative to social media on Saturday March 23, 2024 @10:22AM (#39800123)
Keeping contact info updated is a real challenge. I’ve been using neucards as it helps me know who has my info and I can switch which card someone has anytime. Here is my social card if you want to connect - https://www.neucards.com/of/braddominy?id=VOEF1RShv3&k=46QYx...
If you have an audience in mind, try meeting them in person to demo your solution. I've found people are most receptive when they see your passion and resolve.
"By offering end-to-end encryption they can give power back to the users and simultaneously simplify their regulatory burden."

This is exactly why I use e2ee in my app. I sleep better knowing that the keys to the castle are not solely in my hands, but rather with each user. They will always have a say in how their data is used because they ultimately control access.

California is attempting to pass the DELETE act which provides new rights to control your personal information with respect to data brokers. (https://www.eff.org/deeplinks/2023/08/californias-delete-act...)

People should also look for end-to-end encryption tools as they can provide some protections immediately.

Actually, I have an option in Neucards' settings that adds a Contacts tab which lets you access your phone's contacts directly within Neucards. I agree people should not need to go back and forth to find what they are looking for.
It does work without the app. You can display a QR code on your phone's screen to let people see and act on your contact info even if they don't have Neucards installed. In fact, I use my wife's android phone all the time for testing. You can also set up card types to just share certain info, like professional, personal, family, friends, etc.

The tap cards do not have a QR code printed on them because I create an access key dynamically when you activate the tap card.

Yes. LinkedIn is, in my experience, the go to way of connecting at conferences. I should mention, though, that one feature I really like myself in Neucards is location tagging when you exchange your digital card. This lets me see months later not just when, but also where, I met someone and makes it much easier to remember the context around the exchange.
Yes, for the NFC tags you will need an internet connection, but the Neucards app does maintain a local cache of the digital cards you have received. You can view the details of those cards and kick off an action, like make a call or send an email, by just tapping on the info. Updates occur when I edit my card or account information and notifications are sent to the list of recipients for my card. Neucards does a sync at launch or when triggered by a notification.

As for adding info to the phone contacts, this is a tricky situation. Right now, I do not sync the contact info from received cards into the contacts on the phone. This is because the contacts on the phone are a shared resource that other apps can access, and I don't want people's contact info to leak. I do support caller identification, so you will see a person's name rather than just a number when they call for all of the numbers on your received cards. But, this isn't as robust of an experience as having all the info in the phone's contacts.

That looks very useful! I like your focus on privacy. Thanks for sharing.
BTW, I wrote about my experience creating the NFC tags at IndieHackers - https://www.indiehackers.com/post/shipped-my-first-order-tod...
Thank you! I'm glad you like the idea.

For sharing with others who don't have the app, the link you send lets them see your card's contact information on the neucards' website which they can act on. So, for example, I typically share my phone number, linked in profile, twitter handle, etc. and that works faster for me than just giving someone my number and texting them the rest. Also, by using card types, you can set up multiple cards (Professional, Personal, Friends, Minimal, etc.) and then have more control over what info you share initially.

I'm very much hoping to add Android and making neucards as universal as possible. Open sourcing would definitely help with that, but I'm taking a wait and see approach. The physical nfc tags were just added and if people embrace them, then it would make that approach more viable.

You may be right. It isn't easy to convince people to try something new. As for your website contact info link, how do you tell people that have the link to revisit it when you've made a change?
100% agree. I'm hoping to add Android and other markets in the not too distant future. As for unsharing, that's possible by removing a recipient and I have plans to help even more in the scenario you describe.
Also, I was recently on the Shifting Privacy Left podcast hosted by Debra Farber discussing Neucards and privacy in general. You can listen at https://shiftingprivacyleft.buzzsprout.com/2059470/12853299-...
Sorry. I mean Apple adds steps to releasing an app outside the US if it uses encryption. I'm doing neucards as a solo effort and am hoping to see some traction before taking on those requirements. Here is a link to Apple's policy

https://developer.apple.com/documentation/security/complying...

For card links, I'm using a one time key to protect the information stored on my server. The end-to-end encryption works when you exchange cards using the Neucards app with another Neucards user. It's a tricky situation because people won't use it if it isn't able to quickly exchange contact info like a vcard or other digital cards. The goal was to make sure nothing could be read by a third party without the user giving them access. As for opening the source, I'm going to wait and see. I understand the need for verification, but it is also difficult to make a living doing that.
Unfortunately, it is restricted to the US App Store due to there being a higher compliance necessary for using encryption in Europe and other countries outside the US. Once I get some traction, I'm planning to release it everywhere.
Thanks! Good catch! I could use all the help I can get :)
Thank you! Contacts sharing and updating has had a lot of takes over the years. I remember Plaxo and Bump, back in the day. I'm hoping adding a privacy focus will help people feel more comfortable sharing better information and improving their connections.
Neucards is an end-to-end encrypted contact information sharing and updating iOS app that protects your identity while letting you keep in touch with people. I started working on neucards as a side project more than ten years ago, and I decided three years ago to go full-time and try to build a community around it.

There are two major problems that neucards addresses. First, most people end up with contact lists that are hopelessly out of date. Over time, people move, change jobs, or add social profiles and unless they tell you, chances are you could lose touch. Second, your contact information ends up in the wrong hands. There has been a huge increase in robocalls, unsolicited emails, data breaches, and online scams that is driven by accessing a person's contact info. Even worse, with AI now being able to imitate a person's voice or other mannerisms, knowledge about the connections you have with others can be used against you.

Neucards automatically updates your contact information for anyone who has your digital contact card. You control your contact information and who has access. This is possible because of end-to-end encryption. Neucards brings the same level of protection for your contact information as Signal or WhatsApp does for your chats. Privacy is built it.

But, even with these protections, you can share your contact info with anyone. As an example, here is a link to my Social card:

https://www.neucards.com/of/braddominy?id=M6TC5PLngD&k=4R98i...

I'm excited about how much neucards has grown and what I have planned for the future to do even more to protect people's privacy. If you have any comments, please let me know.

Brad https://www.neucards.com

Re:The coming war on end-to-end encryption on Friday April 21, 2023 @03:19PM (#35658676)
I agree that people generally don't concern themselves too much with how their information is protected. Most people simply assume that it already is or that they can't really do much about it without giving up a lot of convenience. However, I have noticed in specific cases, people do pay attention. In my case, I'm protecting contact information while sharing with others and most people think it is a great use of e2ee.
It is important for everyone to protect their contact information as usually the first step for scammers is harvesting those details. Use a junk email account for all of your online transactions. Try getting a secondary phone number you can give out to everyone who isn't close to you. Avoid giving access to your contacts for any mobile apps. Be mindful about who has your contact info and what you are sharing.
I posted about my app Neucards that lets you share contact info with others using end-to-end encryption to protect your privacy. With data breaches, robocalls, identity theft, and scams on the rise, giving your contact details out should be under your control and even the people facilitating the exchange should not have access. Available on iOS at https://apps.apple.com/us/app/neucards/id1599851881
Re:Privacy Is OK on Thursday December 29, 2022 @05:41PM (#34179091)
Most people are just learning that their online conversations are not as private as they believed, but the real-life consequences for that lapse is almost zero which is why there is not more demand for secure solutions. What does affect you, however, is the harvesting of your contact info as spam, robocalls, identity theft, and a multitude of scams all begin with the gathering of those details. E2EE is gaining ground with the public and my hope is for all channels between individuals online to eventually be protected.

Older »