This month's highlights include: the completion of the MW4ALL 2.0 project, our secure file transfer web app; an extension to the Pro Bono Security Consulting Program; and security audits for Blank, Mina Foundation and Tezos Foundation projects.
Magic Wormhole for All (MW4ALL) 2.0
Project Completion: Identity-less and Secure File Transfers
The NGI Trust-funded MW4ALL 2.0 project, aimed at building a secure file transfer product based on the Magic Wormhole protocol, concluded in August. Over the 11 months of the project, we made great progress towards building a Magic Wormhole-based secure file transfer web application. Magic Wormhole is a protocol that allows for the rapid and secure sharing of data between two parties without either needing to know the other’s identity. To learn more about the project and our lessons learned, click below.
We have removed the application deadline for our pro bono security consulting services program to facilitate the opportunity for applications from a greater number of qualifying projects. The program is designed to support privacy enhancing technologies (PETs) that face significant resource constraints. We invite open source and non-profit PETs that are aligned with Least Authority’s mission to “advance digital security and preserve privacy as a fundamental human right” to apply.
The Blank Wallet browser extension for Google Chrome allows users to generate a key pair for holding and exchanging ETH and ERC-20 tokens. The distinguishing feature of the Blank Wallet browser extension is that it is designed to allow users to send and receive tokens anonymously. This privacy-enhancing feature utilizes Tornado Cash, a non-custodial mixer protocol for private transactions on Ethereum, to obfuscate the link between the user’s initial ETH deposit address and the subsequent new withdrawal address.
Ubinetic’s Synthetic Asset Platform (SAP) enables users to mint an FA2 stablecoin (uUSD) by collateralizing Tez. Users may deposit minted uUSD into a savings pool, earning a variable interest rate which is responsive to changes in liquidity levels of the pool, and is optimized to maintain a 1:1 peg with USD. The user may burn the minted uUSD thereby releasing the collateral.
The Mina StakingPower Wallet is a mobile wallet application that enables users to generate a key pair for sending, receiving, and staking on the Mina Network. The Mina StakingPower Wallet relies on the Mina Signer SDK for cryptographic functionality. Both the Mina StakingPower Wallet and the Mina Signer SDK were the key components in scope for our security audit.
Roadwork Ahead: Evaluating the needs of FOSS communities working on digital infrastructure in the public interest
Lindinger, Elisa, et al. (2020) for Implicit Development Environments.
‘This report explores the unique nature of the community that builds and maintains free and open-source software (FOSS) and the role that community takes in shaping an open Internet... Based on these insights, this report proposes recommendations of how funders can support the FOSS community more effectively.'
As firm believers in protection of our users' privacy, we offer PrivateStorage as a private, secure and end-to-end encrypted solution that aims to minimize the collection of any data related to its users. PrivateStorage implements privacy and security by design, not by policy. We cannot see your data when it is stored by us.