The Gradient @thegradient

**c_th1** @c_th1@digitalcourage.social · Jul 6

**xoron** @xoron@infosec.exchange · Jul 3 *

**c_th1** @c_th1@digitalcourage.social · Jun 22

**xoron** @xoron@infosec.exchange · Jun 21

Jun 21

xoron @xoron@infosec.exchange

File encryption with a browser.

I've been exploring the #WebCryptoAPI and I'm impressed!

When combined with the #FileSystemAPI, it offers a seemingly secure way to #encrypt and #store files directly on your device. Think #localstorage, but with #encryption!

I know #webapps can have #security vulnerabilities since the code is served over the web, so I've #OpenSourced my demo! You can check it out, and it should even work if #selfhosted on #GitHubPages.

Live Demo: https://dim.positive-intentions.com/?path=/story/usefs--encrypted-demo

Demo Code: https://github.com/positive-intentions/dim/blob/staging/src/stories/05-Hooks-useFS.stories.js

Hook Code: https://github.com/positive-intentions/dim/blob/staging/src/hooks/useFS.js

IMPORTANT NOTES (PLEASE READ!):
* This is NOT a product. It's for #testing and #demonstration purposes only.
* It has NOT been reviewed or audited. Do NOT use for sensitive data.
* The "password encryption" currently uses a hardcoded password. This is for demonstration, not security.
* This is NOT meant to replace robust solutions like #VeraCrypt. It's just a #proofofconcept to show what's possible with #browser #APIs.

dim.positive-intentions.com@storybook/core - Storybook

#Cryptography #JavaScript #Frontend

**c_th1** @c_th1@digitalcourage.social · Jun 18

**Cryptomator** @cryptomator@mastodon.online · May 28

May 28

Cryptomator @cryptomator@mastodon.online

Cryptomator vs. VeraCrypt — which encryption tool is right for you?

We’ve compared both in a detailed breakdown of their use cases, strengths, and key differences — especially when it comes to cloud storage and user-friendliness.

Read the full comparison now: https://cryptomator.org/comparisons/veracrypt-alternative/?utm_source=mastodon&utm_medium=social&utm_campaign=veracrypt-comparison

#Encryption #PrivacyTools #Cryptomator

**c_th1** @c_th1@digitalcourage.social · May 15 *

**c_th1** @c_th1@digitalcourage.social · May 8

**Bhavani Shankar** @bshankar@fe.disroot.org · May 6 *

**SantaOS** @SantaOS@mastodon.social · Apr 30

**c_th1** @c_th1@digitalcourage.social · Apr 20

Replied in thread

**Kevin Karhan** @kkarhan@infosec.space · Apr 14

Apr 14

Kevin Karhan @kkarhan@infosec.space

@jrdepriest @quinn I'd just not risk it and #VeraCrypt like all file containers, doesn't change the mdate and thus bricks #OneDrive #sync.

Replied in thread

**Christian Pietsch** @chpietsch@fedifreu.de · Apr 11 *

Apr 11 *

Christian Pietsch @chpietsch@fedifreu.de

@marczz

Why you should use full-disk encryption

If any of the arguments I make below apply to you, you should use full-disk encryption. I am pretty sure the first argument applies to everyone. The second argument applies at least to everyone in the EU and the US state of California. The third argument applies to everyone again.

You will fail to delete drives properly

Storage media get lost. Most people do not know how to properly delete hard disk content before selling them, or they forget it. In the case of flash drives, or SSDs, standard tools like shred don't work. hdparm may do the trick, but this is not well known. If you are lucky, the manufacturer of you SSH provides a Windows app that lets you delete it securely. Your server does not run on Windows of course.

The law demands it

#GDPR and similar data protection and privacy laws require you to store no #PII (personal data) permanently. You have to anonymize PII or delete it after a few weeks. IP addresses are PII. All servers store IP addresses by default. The GDPR also demands that you use state-of-the-art technology to protect sensitive data. Full disk encryption is the state of the art.

Law enforcement makes "mistakes"

I'm a board member of @Artikel5eV, an organisation that runs relays on the Tor network, including exit relays. Running Tor relays is perfectly legal in Germany. Nevertheless, law enforcement agencies have raided the homes of Artikel 5 e.V. board members twice. Illegally so, as a court confirmed recently. I won't run Tor relays in my home, but there is a good chance that my home will be raided one day unless all police officers and prosecutors decide to obey the law.

There is also a possibility that the rule of law might collapse in your country sooner or later. We are just witnessing it in the USA.

You already mentioned that ordinary thieves can also be a problem.

Encryption is available for free

So what is your case against disk encryption? It is obvious that it alone does not solve all IT security issues, but it is an important building block. #LUKS is reliable free and open-source software for HD encryption. If you are not using Linux, check out #VeraCrypt. The Raspberry Pi 5 comes with hardware acceleration for AES, so there no longer is a noticeable performance penalty for encryption.

#storageEncryption #hardDiskEncryption #encryptAllTheThings

**c_th1** @c_th1@digitalcourage.social · Apr 2

**Blue Ghost** @blueghost@mastodon.online · Apr 1

Apr 1

Blue Ghost @blueghost@mastodon.online

VeraCrypt is disk encryption software.

Create virtual encrypted disk within a file.
Encrypt entire partition of storage device.

Decrypted data stored in RAM.

Access encrypted data via Linux/macOS/Windows.

Supports cipher cascades: https://veracrypt.fr/en/Cascades.html
Supports on-the-fly encryption: https://wikipedia.org/wiki/Disk_encryption
Supports plausible deniability: https://veracrypt.fr/en/Plausible%20Deniability.html

Website: https://veracrypt.fr
Mastodon: @veracrypt

#VeraCrypt #Encryption #InfoSec

**Phil** @Phil35@fosstodon.org · Mar 11

@KNTRO@mas.to · Feb 21

Replied in thread

**skywlkr** @skywlkr@mastodon.social · Feb 21

Feb 21

skywlkr @skywlkr@mastodon.social

@kuketzblog Hoffentlich hilft es den Menschen zu verstehen Datensicherheit und Verschlüsselung selbst in die Hand zu nehmen und Tools wie #VeraCrypt, PGP-Keys, #KeePass, @cryptomator , usw. zu nutzen.

**Kevin Karhan** @kkarhan@infosec.space · Feb 11 *

**VeraCrypt** @veracrypt@mastodon.social · Feb 5

Feb 5

VeraCrypt @veracrypt@mastodon.social

VeraCrypt 1.26.20 is out!

Highlights:

Improved performance: SHA-256 acceleration on ARM64
Fixes: Linux Mint auth, Windows driver issues
"Unmount" replaces "Dismount" for consistency
Updated translations

Release notes: https://veracrypt.fr/en/Release%20Notes.html
Downloads: https://veracrypt.fr/en/Downloads.html

#VeraCrypt #Privacy #Encryption

Recent searches

Search options

Administered by:

Server stats:

#veracrypt