An analysis of the Nomx secure communications device
scotthelme.co.uk
An analysis of the Nomx secure communications device
1–10 of 77 posts
Re: An analysis of the Nomx secure communications device
#2Re: An analysis of the Nomx secure communications device
#3>
The only good thing I can say about this product is that it does not create an MX record for your domain, upholding the "no MX" in the name.
Haha
Re: An analysis of the Nomx secure communications device
#4I don't understand the point of this, even if it worked correctly.
If I understand correctly what it does is create some kind of secure tunnel between two nomx devices if you tell it to. But doesn't starttls do that already if you configure your mail server that way? And it already just works with any compliant email server?
So unless I'm missing something there's absolutely no doubt in my mind that this is a scam. Kudos to the author for bothering to find flaws in the admin interface but honestly at this point I'd just have reflashed the raspberry pi and used it as a media center.
Even the first picture with the case open is already a huge red flag, not because of the raspberry pi but because of the botched glue gun job.
Re: An analysis of the Nomx secure communications device
#5I don't understand the point of this, even if it worked correctly. If I understand correctly what it does is create some kind of secure tunnel between two nomx devices if you tell it to. But doesn't starttls do that already if you configure your mail server that way? And it already just works with any compliant email server? So unless I'm missing something there's absolutely no doubt in my mind that this is a scam. K…
It would have a better life as a Pi-hole since you can use the fancy case it came in :)
Re: An analysis of the Nomx secure communications device
#6TL;DR:
It's $199 to $399 for a plastic case literally just containing a Raspberry Pi 3 Model B, running an outdated Raspian, and the software stack is extremely poorly developed. eg: their "secure handshake between devices" is basically two devices serving SMTP on port 26 instead of port 25.
Re: An analysis of the Nomx secure communications device
#7This is great! I've always wanted a step-by-step guide on how _not_ to do things.
Re: An analysis of the Nomx secure communications device
#8Calling your product 'the most secure' and 'ensuring absolute privacy' should already set off alarm bells for anyone interested in either security or privacy. It's the kind of marketing that no one in their right mind would use if they knew much about either.
Not surprising, this device does everything wrong and provides neither of those things.
Re: An analysis of the Nomx secure communications device
#9I don't understand the point of this, even if it worked correctly. If I understand correctly what it does is create some kind of secure tunnel between two nomx devices if you tell it to. But doesn't starttls do that already if you configure your mail server that way? And it already just works with any compliant email server? So unless I'm missing something there's absolutely no doubt in my mind that this is a scam. K…
The software side looks like someone just executed an ancient Postfix + Squirrelmail + Dovecot tutorial[0] and cobbled together a horrible UI for it.
[0]: https://www.exratione.com/2012/05/a-mailserver-on-ubuntu-120...
Re: An analysis of the Nomx secure communications device
#10Wow. The title kind of gave away that this was going to be a fun read, but I did not expect it to be that bad.
Even if the vendor did not make those bold claims and simply sold it as a hassle-free email appliance for home users and small businesses, it would be borderline fraudulent. With the bold claims attached it almost looks like performance art to ridicule all the snake oil-peddlers out there.