Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View

InstantCrypt is the Easy-to-Use front end for GPG/GnuPG that works
with all e-mail clients and your web mail. Attempted to design for
inexperience user to get start encrypting/decrypting within 20
minutes. Runs local or portable. Both Alice and Bob need the program.

Thunderbird/Enigmail works better imo but not with webmail.

Point of this program is to provide ease of use with email encryption
and that is an effort I applaud. FME most developed users can't
install and implement PKE.

Justin Thompson et al are nearing a releasee of info on Project
Mackerel, hopefully they will set inroads into this problem.

"Green Cryptography focuses on assembling the implementation the right
way, such that the functions of encryption and authenticate will be
appropriately handled, and more easily realized, by developers.
Mackerel focuses on applying the implementation to the right stuff, by
aligning current cryptographic models with real-world communication
models, and adds a layer of abstraction on top of a green
cryptographic model, such that the concepts of confidentiality and
integrity are more tangible and palatable for users."
-- /

Re: Instacrypt

From the website:

"InstantCrypt cannot [because for normal secure e-mail exchange, these
features are not a priority]: Clearsign and make and verifiy detached
signature for files."

I would say that signing and verifying represents a pretty common use case,
and probably more common that encrypting.  Sending encrypted messages to a
mailing list is pointless, but people often sign messages sent to mailing
lists.  Verifying a valid signature from a file that is being broadcast,
like a computer program available for download, it also pretty common.

What worries me here is that this program is not very well documented, at
least not on its website.  It is compatible with OpenPGP, which is certainly
a good thing...but beyond that, we cannot see much.  What sort of keys will
it generate?  How does it generate those keys (it does not look like it is a
GPLed program, so I doubt that it is using GPG as its back end)?  I
understand that this is a program meant for beginners, but any crypto
program should have a certain amount of technical information available for
people who might want to perform some kind of evaluation (i.e. a person who
is knowledgeable in crypto might want to know whether or not they should
advise others who are less knowledgeable to use this particular program).

Just my $0.02.

-- B


On Wed, 10 Nov 2010 21:51:24 -0500, Mr. B wrote:

Quoted text here. Click to load it

I agree and considering the author has been working on this program
since 2004, the only consideration I will give him for the lack of
info is that he appears to be a one man show who has at least
identified a real need.

Outside of that identification (which is the focus of my OP), I
wouldn't touch this thing with a ten foot algorithm. After seeing that
it was foisted on an unsuspecting client by his lawyer, a dummy named
"nix" on Wilders, I knew it was potential garbage. lol


My bet it will be payware soon.

Re: Instantcrypt

On Wed, 10 Nov 2010 23:48:43 -0500, Ari Silverstein wrote:

Quoted text here. Click to load it

Nancy Norelli and she is quite the piece of work. Why have a handle
"nix" if you are going to announce on a forum who you are? :)

I have spoken with her, emailed her several times. She has a blog/rant
about intelligence agencies that is impossible to determine what in
the world she is blogging/ranting about.

She sent me to a fellow in California who desired to initiate a
completely anonymous webforum using Eastern Indian programmers on a
Pirate Bay web hosted site. When I suggested that none of this made
any sense, he informed Poosey that I was incorrect.
Quoted text here. Click to load it

About version 3? :)

Re: Instantcrypt

On Thu, 11 Nov 2010 01:19:01 -0500, PooseyII wrote:

Quoted text here. Click to load it

Norelli is just as naive as the typical end user without having any
excuse other than ego and pride for being so.  Wilders is full of
these imbeciles most average 78,234 posts. Hell, they had enough time
to learn about cryptography if they would have cu their post count
down to 55,098. lol
Quoted text here. Click to load it

It means she is an attorney who thinks she is an IT academic and is
out soliciting business with bullshit. It'll work, other idiot
attorneys and end users will hire her because she uses fancy words
they assume makes her a genuine commo wizard.

I hope she has great legs because if she doesn't, a good professional
witness will turn her case arguments to garbage. Juries still like
"The Toast of Buffalo! = Ari himself, with
his unerring sense of what is hip, contributed a box of doughnuts
from Famous Doughnuts, a company he owns."

Re: Instantcrypt

On Thu, 11 Nov 2010 01:28:17 -0500, Ari Silverstein wrote:

Quoted text here. Click to load it

Then she had best stay a research attorney. :)

Re: Instantcrypt

On Thu, 11 Nov 2010 01:28:17 -0500, Ari Silverstein wrote:

Quoted text here. Click to load it

Our client out of the Miami office, the one with the Indian problem, I
contacted nancy to see if whe was interested in repping them in the
negotiations. Things have come unglued and since she talks like a
toughie, I emailed her about her take on the case.

Five, six or more swapped emails and she can't seem to figure out that
I am laying the case in her lap. 10% is a chunk of change at this

She did give ne one piece of sage advice.

"Get an attorney who can help mediate this." :)

Thanks. We did. <smashing head with palm of hand>

Re: Instantcrypt

On Wed, 10 Nov 2010 21:51:24 -0500, Mr. B wrote:

Quoted text here. Click to load it

Good two pennies it is. :)

Site Timeline