srecio
Joined 8 years ago
Karma
9
Submissions
17
Member since
Feb 1
Recent submissions
Comment · 7 years ago
In light of the recent Binance and Capital One hacks, I thought I'd share what I'm working on. It's tool that makes it easier for businesses to collect end-to-end encrypted documents. All s3 buckets only store PGP files so misconfiguration is less disastrous. If a business uploads their public key, then there's no data in the cloud to hack. I learned a lot of awesome JS tricks while working on this. All the encryption is done in the client's browser using OpenPGP.js (which I highly recommend).
Comment · 7 years ago
Why not set up a Delaware LLC? Makes sense if you're doing business online
Comment · 7 years ago
I built out Pipefile (https://pipefile.com) as a one man operation. Bundle your PGP key into file upload forms to receive end-to-end encrypted files. Embed the upload forms into any html page to receive files without setting up any backend infrastructure.
You can try sending me something at https://pipefile.com/steve
Comment · 7 years ago
Just use Stripe Atlas. I've been very happy with them.
Comment · 7 years ago
Relaunching my product Pipefile after some initial feedback.
One of the biggest complaints I received was the friction required for sending file requests. Now you can register pipefile.com/yourname and share that link instead. Any files uploaded there will be encrypted with your PGP public encryption key in the uploader's browser before getting sent to the servers. You can then download the .gpg files and decrypt them locally using GnuPG, GPGTools, etc.
Comment · 7 years ago
Won't most people just share the links over email? With the decryption key in the url I don't see very good security guarantees here