Live data from Hacker News

Show HN: Zoldy – Protect your information while in danger or at risk

zoldyapp.com

21–23 of 23 posts

Re: Show HN: Zoldy – Protect your information while in danger or at risk

#21

How do you protect on-device data loaded into the app - specifically from many digital forensics tools used by security consultants, law enforcement, customs, intelligence agencies, and organized crime? How do you protect data uploaded into your optional cloud service? How are you poised to protect yourself from potentially nation-state-level actors attempting to control, subvert or compromise this app/service? Did y…

> How do you protect on-device data loaded into the app - specifically from many digital forensics tools used by security consultants, law enforcement, customs, intelligence agencies, and organized crime?

Data is not loaded into the app, you upload your data, and taking in consideration your question, you could delete your data in your device, and if need it use the service to send the files, even to yourself.

> How do you protect data uploaded into your optional cloud service?

Files in the cloud are only accesible by your device, they are encrypted and saved into an unreadable folder linked to your device. You cannot know how and where is a file, or how it is named, for example, using the folder system to keep files in Firebase makes that when you are trying to get one of them name changes because the folder is part of that name (virtual folders), so metadata with the name is saved and when a recipient receives an email the download is exactly with the same name as you uploaded, this way files are protected in different ways, including name. What are you going to search if you do not know what to search, or where?.

> How are you poised to protect yourself from potentially nation-state-level actors attempting to control, subvert or compromise this app/service?

Very good question, ToS were redacted by a group of lawyers dedicated to the digital law, the service is working in Europe and I use the same rules to protect the idea. Information will be 15 days available since the emails were sent, that seems to be very little time to react against. And how nation-state-level actors will know about someone using the service?, or you mean like something to shut down, if this is the case I trust the lawyers behind me, or I hope so.

> Did you develop this app in concert with, or consulting with, any organizations that advise/train high-risk individuals in personal safety? Do they confirm this somewhere publicly?

No, I did it myself because see the link I posted before https://www.uoc.edu/portal/es/news/entrevistes/2009/roberto_... in Spanish, please use any translator service, I was a Lecturer in there and saw lots of times how a service like this could have helped a lot of different people, this and that and all made me to go ahead. They know about.

> Why can't I find your name in a google search on anything related to privacy, security, encryption, etc? You barely appear in an google results at all...

Because I am 51 and I have been here since this started (internet) and I took always seriously my privacy, no facebook, twitter.. I like not to be in google, I prefer my ideas to be there, not me.

> What is your education and experience in relation to app development, security, encryption digital privacy? Have you done any research, published anything in peer-reviewed journals, appeared in any conferences, professional or otherwise - in those fields?

In relation to app development, security, encryption digital privacy my education will never be enough that is why I counted/payed on a developers team, in Spain. I planned the app, hows, services to use, and they developed, a year and a half including testing. This is not the firt time I startup something, here years ago I tried an Ecommerce platform in Canary Islands, (one of them La Palma where a volcano is actually working), it is in Spanish, I think that you are searching in English and thats why you have no results, https://www.diariodeavisos.com/2011/12/un-emprendedor-canari...

> Has your app been audited by any established, respected, qualified groups or organizations? Will anyone established in the fields of security, encryption, or digital privacy vouch for you?

Nope, I did not contact anybody, I had the idea 25 years in my head, I lastly found how to build it and here I am. I understand that this point is important, really important for the idea to have more credibility.

Thank you!

Re: Show HN: Zoldy – Protect your information while in danger or at risk

#22
I'm sure you're going to find you niche @rmoon.

I'm not in your target group, since in a case of being threatened I’d rather write a quick and dirty dead man’s switch myself, nevertheless people less technical than me could benefit from the service.

An idea for you to consider: at least in Europe, in the last couple of years on the enterprise software market Emergency Notification Systems (mass notification, incident management, etc.) are a big thing. A lot of governments in the EU either already deployed an ENS system, or consider doing so (it might be the case that they are obliged to do so, IDK). I can see how a service like yours could complete an ENS for a gov org for instance by supplying an emergency passwords / sensitive data sharing in the time of crisis. Usually ENS systems don’t offer that capability – they’re only about re-setting an org structure after a disaster, etc. IMO sensitive data redistribution could be an important factor in a crisis situation, and from what I’ve seen almost no one on the client’s side think about it beforehand… They solely rely on software vendors to deliver everything. Do your research. ENS are needed in many places: military, gov agencies, corporations, police, border services, fire deps. (also take a dive into mobile devices management suites [MDM], since they’re often a part of ENS deployments) Good luck!

Re: Show HN: Zoldy – Protect your information while in danger or at risk

#23

I'm sure you're going to find you niche @rmoon. I'm not in your target group, since in a case of being threatened I’d rather write a quick and dirty dead man’s switch myself, nevertheless people less technical than me could benefit from the service. An idea for you to consider: at least in Europe, in the last couple of years on the enterprise software market Emergency Notification Systems (mass notification, incident…

Thank you!, I really appreciate your words. I know this service is not for the masses, I knew it from the beginning, but I wanted to bring it to reality because I am really convinced that it can be very useful to many people out there.

What you mention is part of the idea, not now it is only starting up, but ahead if I have any chance, I can think of Zoldy Clouds working independently, for those groups that you also mention. I already contacted two Certification companies here in Europe to have a Certificate from a 3rd party, this way fears about the service will still be there but not that much.

Post reply on HN