- Global-WAN differs in that:
- 1. its encryption is compliant and unbreakable forever
- 2. no metadata (who/where/when) is available to anyone
- 3. security not delegated to US open-source cryptography
- operating-systems, script engines, HTTP servers and
- VoIP servers (and all recurringly expose users to new
- critical security breaches, year after year).
- With Enigmabox, "your IP is your identity", which is the
- only thing needed to track people, the cryptography is
- taken from an open-source library made in an US university
- and Microsoft documented its design in 2006.
- Enigmabox relies on SIP phones from Grandstream, which
- describes itself as a "surveillance specialist" based in
- the USA:
- http://www.grandstream.com/index.php/products/ip-video-surveillance
- In contrast, Global-WAN lets you use regular phones (just
- a micro and a loudspeaker, which any ability to send data
- on the Internet).
- Unsurprisingly, almost everything is done wrong by
- Enigmabox - at least from a security point of view.
- The open-source project used by Enigmabox is named 'cjdns':
- https://github.com/cjdelisle/cjdns/blob/master/doc/security_specification.md
- 1. it uses a (vulnerable) US cryptographic library
- 2. it relies on (vulnerable) public-keys for key-exchange
- 3. it relies on backdoored runtimes (NodeJS, Python, Perl)
- and "off-the-shelves" Operating Systems
- The public-key crypto is weakened by using a 16-byte hash
- of the user IPv6 address (further identifying users and
- easing key-recovery).
- The 'password' method is presented as safe while it can't
- match the cryptographic entropy requirements. That's a
- lot of 'accidental' incoherences for people so concerned
- by the security of their users.
- Partners are hosted by Cloudflare (a commercial CDN) so
- someone is paying the bills (in addition to the costs of
- the R&D) for the pleasure of tracking Enigmabox users.
- Microsoft Research (not a privacy fan) documented the
- design used by Enigmabox... in 2006:
- http://research.microsoft.com/pubs/75325/virtualring.pdf
- Finally, if you look at the prices (and purchase page)
- then its look & like is very similar to Global-WAN's
- page:
- http://enigmabox.net/en/order/
- http://global-wan.ch/en/register.html
- But, unlike Global-WAN, they offer to get payments in
- Bitcoins (that Global-WAN presents as a trap aimed at
- tracking people - something recently confirmed by a
- university in Belgium).
- This makes you wonder who came first, and to do what:
- Enigmabox.net domain has been registered in June 2013
- TrustLeap.com domain name was registered in Nov. 2007.
- It took us 7 years of R&D to make Global-WAN because
- we have rewritten everything in order to deliver real
- security.
- Clearly not the case of Enigmabox.
- --
- Pierre Gauthier
- CEO and President
- http://twdi.ch/
- http://global-wan.ch/
- Paradiesli 17, CH-8842 Unteriberg SZ, Switzerland
- Tel +41 55 414-2093, Fax +41 55 414-2067