GigaOM » Collaboration

SecretSync Adds Client-Side Encryption to Dropbox on the Fly

Simon Mackie — Tue, 17 May 2011 21:04:36 +0000

Although popular cloud file sync service Dropbox does encrypt files that are uploaded using it, if you want to be completely sure that your files are secure, you should encrypt them yourself — that way, an attacker won’t be able to access your data, even if your Dropbox account is compromised CompletelyPrivateFiles’ app SecretSync is an on-the-fly client-side encryption tool that provides you with a secure folder; any files added to that folder will automatically be encrypted before being synced with your Dropbox account. Providing you also have SecretSync also installed in any other machines that you use, decryption is also automatic.

Once your files are encrypted, even if someone gains access to your Dropbox account, they won’t be able to access your data, as the image below shows:

SecretSync is very similar to BoxCryptor, another client-side file encryption app for Dropbox that we’ve covered previously. Once installed both apps are completely transparent in use, encrypting and decrypting your data on the fly using the 256-bit AES standard before uploading your files. Although SecretSync works in a slightly different way to BoxCryptor — SecretSync puts an encrypted folder on your hard drive that’s linked to your Dropbox account, while BoxCryptor provides an encrypted virtual hard disk — they both effectively provide the same on-the-fly encryption of specified files. Like BoxCryptor, SecretSync is currently in beta and is only available for Windows, although the SecretSync site notes that clients for Linux and Mac are on the way. There’s no indication yet if there are any plans to charge for the service.

Related research and analysis from GigaOM Pro:
Subscriber content. Sign up for a free trial.

Send Sensitive Data Securely With Lockify

Charles Hamilton — Wed, 06 Apr 2011 09:49:36 +0000

If you want to send sensitive data between team members, it’s possible to encrypt email using PGP or GPG, but those systems require both the sender and the receiver to install software. Lockify provides an easy way to securely share sensitive data (like a password, bank account or credit card number) occasionally.

Sending a message is simple. Just:

Type the message.
Select how long (or how frequently) it can be viewed by the recipient (“this message will self-destruct in…”).
(Optional, but recommended) Elect to make the recipient verify their identity by typing in a code sent via SMS, answer a private question, or authenticate via Gmail.

You can also specify whether the recipient can copy or print the message, and select a decryption key size. Once the message has been encrypted, you are given a link that can be sent to your recipient via email, SMS, or even Facebook private message. You can track when the link has been used, and make it expire early if needed.

Of course, since we’re dealing with sensitive information, Lockify needs to ensure that it can maintains the security of your data. The service explains how it’s done:

Your private information never leaves your computer unencrypted. And only your encrypted information goes to our server. The decryption key is embedded into the link that you share with your recipient, i.e. we don’t have your key. The result? We never have the ability to access your private information. Guaranteed.

At present, messages encrypted by Lockify are text-only, and are limited to 10,000 characters, although the service says that it plans to support sending files in future.

Lockify is currently in private beta, but you can request an invitation on the service’s website.

Related research and analysis from GigaOM Pro:
Subscriber content. Sign up for a free trial.

iTwin: Remote, Encrypted Access to Your Files

Charles Hamilton — Mon, 03 Jan 2011 20:00:46 +0000

The iTwin device provides a simple and secure way of connecting to your office’s files while you’re out of the office. When you first open the box, you’ll see something that looks like a USB key, except that there are USB ports on both ends. Look a little closer, and you’ll see that the device can be split into two pieces.

To set up the iTwin, insert the device (with both halves still attached) into a Windows machine. You’ll be prompted to install the software, and to register an email address you can use to disable the device if it gets lost. The two halves are then “paired,” so that they work together to create a connection between computers using 256-bit AES encryption.

You will be able to access one machine from the other, but only if both pieces of the device are installed. For additional security, you can also create a password on the iTwin.

You can leave one half of the device in your office machine, and insert the other into, say, a laptop. You’ll be able to access, move, copy and back up files. You can edit remote files directly, or copy files by dragging and dropping them.

Both iTwin and Pogoplug allow you to connect to your own files remotely without monthly fees, and without using cloud storage. But Pogoplug connects to an external hard drive and makes it available remotely, while iTwin allows you to connect to your entire computer and network. Of course, in order to access a particular machine, you’ll need to leave it on and connected to the Internet.

Of course, there are some security issues to be considered. While iTwin provides a couple of ways to disable the connection if one half gets lost, it might take a while before the loss is noticed. And the connection is bi-directional, so if someone entered your office, they could access your laptop. Frankly, it’s an open question whether the security of this system is better or worse than a software-only solution with strong passwords.

I wasn’t able to fully test the system, since iTwin only works with Windows machines at present, although the developers say a Mac version is in the works. I’ll be interested to see how speedy and stable the system is in actual use, and how well it interacts with Windows’ sleep mode.

iTwin retails for $99 on the developer’s website.

How do you connect with your files while you’re on the road?

Related content from GigaOM Pro (sub. req.):

Encrypt Your Communications For Added Security

Jason Harris — Tue, 22 Apr 2008 18:49:37 +0000

Information security is a very important consideration when using computer networks (including the Internet). Security is one of many reasons corporate IS departments exist.

However for your own personal and work-related communications, how do you ensure your emails and instant message conversations don’t fall victim to prying eyes?

With a distributed team, individuals might have valuable information that is transferred over the wire. Here are some ways you can encrypt the data you exchange with others.

To exchange secure messages via email, look into PGP. PGP stands for Pretty Good Privacy and works like this: if you want to send someone an encrypted email, first find your recipients’ public PGP key. The public PGP key is a cryptic batch of letters and numbers that, when used with plug-in software, will allow you draft the email to them. When the recipient gets the email, they decode the message with their private PGP key and can read the message in its entirety. For PGP options, check out PGP Corporation, and for a freeware option take a look at GNUPGP along with this instruction set. PGP mail plug-ins exist for Windows, Mac, and Linux.

If you are looking to secure your instant messages, conduct voice conversations, and swap files, Skype is a great tool. This VoIP program features full encryption that has yet to be compromised, not even the German government has gained access to it. Skype is cross-platform and runs on Linux, Windows, Windows Mobile, and Mac OS X.

Additionally, for encrypted instant messaging, BitWise IM is a second option. They feature a free Personal edition that offers cross-platform IM conversations. For business communications, BitWise Plus is available for a one-time fee.

(top photo credit: Flickr User ButterflySha)

Related research and analysis from GigaOM Pro:
Subscriber content. Sign up for a free trial.