Marc Hedlund sez, "Wesabe just open sourced a project called Grendel
that makes it easy for web apps to encrypt data using the user's login password, and only decrypt that data when the user is logged in. Let's say you're using a word processing web app and don't want your documents stored plaintext -- the web app could use Grendel to easily encrypt your docs for you, using OpenPGP. Log in and you can edit; log out and only you can get at the data again (since only you have your password). There are some hooks for encrypting with multiple keys if you want to share docs with selected other users on the system. Since people are throwing a ton of sensitive data in web apps these days I think having some tools to help make that safer would be a good thing."
Protecting "Cloud" Secrets with Grendel
Of course, data on web sites is usually shared with at least some other people in some way. Sometimes a user might want to share their information with the web site support staff, so the staff can help solve a problem or fix a bug. Or, the user might want to share their sensitive data with selected other users on the site, such as coworkers or family members. Grendel allows this, letting you encrypt data with multiple keys so that more than one user's password can gain access.
It's very easy to screw up when building a cryptography system -- check out Nate Lawson's excellent Google Tech Talk on common crypto flaws, or Matasano's Socratic dialog on similar topics, for a map of the pitfalls available to you, and us. We've been fortunate at Wesabe to have a number of people who think very carefully about security, and they've put a lot of effort into designing and building Grendel. That said, we have two goals in open sourcing Grendel: first, to make a tool available to others that could help make "cloud" applications in general much safer for everyone, and second, to open up what we've built so others can review and help us improve it. We would love comments on any aspect of Grendel, security or otherwise.
(Disclosure: I am proud to serve on Wesabe's advisory board)
The PocketLab is billed as a “Swiss Army Knife of science.” Launched via Kickstarter, the small device contains numerous sensors to measure acceleration, force, angular velocity, magnetic field, pressure, altitude, and temperature and send that data to smartphones or laptops. According to inventor Clifton Roozeboom, it’s a tool for students and citizen scientists who can’t […]
Ambient displays translate online information into a simple presentation that’s meant to be glanceable, easy to understand, and non-intrusive. I’ve always appreciate artistic ambient displays, like Nancy Patterson’s Stock Market Skirt and Eric Paulos’s Limelight. Ken Kawamoto’s Tempescope appears to be another wonderful example. It’s a weather display in the form of a transparent box […]
Twenty years ago, Texas Instruments released the TI-83 graphing calculator, a stupidly expensive piece of old technology that most high schools still require their juniors and seniors buy for around $100. Why? Because. That’s why. From Mic.com: Pearson textbooks feature illustrations of TI-series calculators alongside chapters so students can use their TI calculator in conjunction […]
It’s time for a power upgrade — throw out that tired-out power strip and swap in this family-size USB charger, packed with 6 high-speed ports. With a built-in control chip, Kinkoo optimizes each port to ensure the fastest charging possible for all your devices. The Kinkoo is made from high-grade and durable materials so you […]
Watching Netflix, Hulu or other streaming services can unfortunately be difficult while traveling outside the US. Rather than bypass these restrictions with the help of a complex and slow VPN, choose a faster and simpler solution with Getflix. Instead of rerouting all your Internet traffic through a different server, this handy service only routes the […]
Shake, stir, and muddle your way to delicious homemade cocktails with this must-have bar set. Expect only the finest quality tools from MakersKit — enabling you to unleash your inner mixologist.Top 12 Favorite Things of 2014, Sunset MagazineQuart-size vintage-style Mason jar shakerRetro double jigger for accurate measurementsStrainer & spouts for a mixologist-style smooth pourHardwood muddler […]