IDVector

Online security, privacy, and anonymity hardware & service.

[IDVector @idvector]

Remember DarkHotel? https://t.co/oVHMaF92sY Still happening today -> https://t.co/EdkI2PKSNw IDVector Pro client helps prevent these attacks

[IDVector @idvector]

Someone said "...because of COURSE they are!"
https://t.co/yrXVtIJwd5
If the service is "free" (& sometimes if not) YOU are the commodity!

[EFF @EFF]

On Monday, EFF will file a brief arguing a warrant should be required for cell phone tracking. https://t.co/64EEXWzM7k

[IDVector @idvector]

@FoHmaddox @ProtonVPN @Apple But with mobile we do use the same overall idea--we don't hold the crypto keys, & no customer data that we have is worth a subpoena.

[IDVector @idvector]

@FoHmaddox @ProtonVPN @Apple There are OS limitations imposed by iOS & Android that mean we can't use the same strategy in the mobile apps.

[IDVector @idvector]

@FoHmaddox @ProtonVPN @Apple So the bottom line is--because the private key material is created on device for each path, we don't have it, and we can't get it.

[IDVector @idvector]

@FoHmaddox @ProtonVPN @Apple IDVector uses custom PKI material created on device for each and every Pro Client (and future hardware) for each and every new path created.

[IDVector @idvector]

@FoHmaddox @ProtonVPN @Apple Yes, Lavabit ordered to give up SSL/TLS private key, which would expose their entire userbase.

[IDVector @idvector]

@FoHmaddox @ProtonVPN Not possible w/out drastic infrastructure & code changes. Thanks to @Apple's Feb 2016 case v. FBI, no precedent for gov compelling new code.

[IDVector @idvector]

@FoHmaddox @ProtonVPN It's a really good question to ask. But there is too much to tweet - chat offline? Please see pic!

[IDVector @idvector]

@FoHmaddox @ProtonVPN Used properly, IDVector already provides better protections than @ProtonVPN Secure Core through ephemeral Private Paths.

[IDVector @idvector]

@FoHmaddox @ProtonVPN Hi Mike! To address subpoena concerns, we don't keep any data that would be useful to law enforcement.

[IDVector @idvector]

Information security is not just about protecting the perimeter. https://t.co/ZS2ZZmnswv

[IDVector @idvector]

"You put in an opponent's name and you will see all the sites, blogs, social networks related to that user."
https://t.co/MGromBA0Cc

[IDVector @idvector]

Good news--everyone is talking about computer security. But @qz highlights how deeply awful the illustrations are.
https://t.co/rueb2JgGGY

[Open Rights Group @OpenRightsGroup]

Why the UK Government should protect #encryption not threaten it #surveillance #IPAct https://t.co/2epPOSCzxY

[SparkFun Electronics @sparkfun]

Internet #security is on our minds a lot lately - check out a timely hardware Kickstarter from a former 'Funion! https://t.co/HG9yddJqu4

[IDVector @idvector]

@FoHmaddox @FoHmaddox happy to chat more; DM us please!

[IDVector @idvector]

@FoHmaddox @ProtonMail @FoHmaddox recent and past leaks show reach of nation state level cyber
capabilities, no matter where hosting companies are incorporated.

[IDVector @idvector]

@FoHmaddox @FoHmaddox We don’t log, and the egress server doesn’t know true client IP, and the bounce server doesn’t know endpoint (service) IP.