โฌ†๏ธ โฌ‡๏ธ

Scrambls - protection of your intellectual property and encryption in social networks

Hello, dear habrazhiteli! Many in our time are interested in the security of their personal data, and especially correspondence. And this is not surprising, given the scandal with the NSA and other factors.



There is also a certain problem with social networks and cloud services: nothing else belongs to us , that is, our posts in social networks are their property, not ours, as our data in cloud storages do not belong to us.



And how to get out of this situation? The guys from Scrambls seem to have solved this problem already!



So what does scrambls do? It encrypts the text entered by the user before sending it to the server (for example, when posting a comment in FB), and when it detects an encrypted fragment on the page, it decrypts the text and displays it in its original form. In this case, the user himself chooses whether everyone can decrypt his record, or only selected users.

')

Illustrative example:



[scrambls} dfeJD40wC1c ั˜ั–ั”ั˜ะ„ั• {] - text visible to all users of scrambls

[scrambls} dfeJD44Mybb ั˜ั•ั—ะ‡ั–ั–ั– {] - text that is visible only to people from the group I created



How it works





To work with scrambls, you need to install a browser plugin and log in to their website. When you enter into the text of the text, surrounded by double dogs, the plugin encrypts the message with the private key. When the markers [scrambls} and {] are found on the page, the plugin decrypts everything in between. In this case, all encryption operations occur on the client, and the server on which the ciphertext lies lies only transmitting data. When encrypting, of course, you can select a group that is allowed to view the text.



The plugin adds an additional toolbar with the scramble settings. This is how it looks in my Firefox:







For Chrome, the plugin is made more carefully, this is the button:







The visually decrypted text on the page is highlighted with a special background; when you hover the mouse over a message, a hint is displayed indicating the group for which the message is intended.







It is also a very good feature - changing the group of the encrypted message without re-encryption. This is possible due to the uniqueness of the key for each message.



If you do not have a plug-in, or if the scramble message came through a regular instant messenger, you can use the online encoder / decoder.







Security





What do the developers themselves write about security scrambls?



Quote from the site (english)
Scrambls employs a custom algorithm. Each post is uniquely keyed and the key length is long enough for most web posts.



Scrambls is 'social security'. We make no assertion that the encoding is unbreakable. The keys are vulnerable to a local attack. SSL is employed to ensure client to server communications.



Assorted security platforms. If youโ€™re in the field of real information protection.

It is interested in those who are interested in them. Please see developer.scrambls.com .





Transfer:

Scrambls implements its own encryption algorithm, optimized for communication through social networks. Each post is encrypted with a unique key, the length of which is sufficient for ordinary posts in the social network.



Scambls - social encryption. We do not claim that it is not possible to hack. All conversions are done on the client, outside the secure environment (like most commercial security solutions), encryption keys are vulnerable to local attacks. SSL is used only to ensure the security of data transmission between the client and the server.



Be sure that if more advanced security systems appear on the client, we will implement them very quickly. As a division of Wave Systems with 20 years of experience in security, we believe in the future of real information protection.



For those who are interested. Scrambls is designed to integrate external key servers and algorithms. See developer.scrambls.com .




In general, quite a good security procedure. If you are interested in technical details - you can read the documentation on developer.scrambls.com, everything is described there in great detail. If you wish, you can arrange them in a separate article.



In general, the guys speak very convincingly, right? By the way, they have not only browser plug-ins, but also a mobile version for iOS (allows you to work with Twitter) and the client Scrumbls for files, which allows you to encrypt files and folders before sending them to the cloud. The client for files is available only under Windows, so I could not test it.



I think Scrambls is a very interesting thing. Although I would like a less intrusive (and more stable) plugin for Firefox.



PS : [scrambls} dfeJD4ixnda ั• ั• ั• ะ…ั˜ ั˜ะ‡ ั˜ะ‡ ั˜ะ‡ ั˜ะ‡ ั˜ะ‡ ั˜ะ‡ ั˜ะ‡ ั” ั” ั” ั”]

Source: https://habr.com/ru/post/190148/



All Articles