Ξ welcome to cryptostorm's member forums ~ you don't have to be a cryptostorm member to post here Ξ
∞ take a peek at our legendary cryptostorm_is twitter feed if you're into that kind of thing ∞
Ξ we're rolling out voodoo network security across cryptostorm - big things happening, indeed! Ξ
Ξ any OpenVPN configs found on the forum are likely outdated. For the latest, visit GitHub Ξ

cryptofree howto Windows | cryptostorm.org/cfwindows

cryptofree: full-bore cryptostorm protection... for free! Capped to 1 megabit down / 500kb up, it's a great way to use cryptostorm in a pinch. Play nice & be safe, ok?
User avatar

Topic Author
cryptostorm_team
ForumHelper
Posts: 159
Joined: Sat Mar 02, 2013 12:12 am

cryptofree howto Windows | cryptostorm.org/cfwindows

Postby cryptostorm_team » Fri Nov 28, 2014 2:53 pm

Here is the setup process for connecting to cryptofree with the cryptostorm widget for Windows:


    1. download and install the widget on your Windows computer:
    Visit https://cryptostorm.is/#section6 for download links
    2. launch the widget

    3. choose 'cryptofree' from the node options menu

    4. click 'connect'

That's it.

Have fun, & play safe...


    cryptostorm_team


[attachments removed since the link on the main page will be the place to download the widget from now on, since the forum links are outdated]


dlmetcalf

Re: cryptofree howto Windows | cryptofree.me/cfwindows

Postby dlmetcalf » Thu Jun 25, 2015 9:40 am

The first thing it does when run is say a newer version is available and redirects to
http://cryptostorm.nu/setup.exe

If I haven't been to that domain before, my browser is never going to have seen HSTS on it, so it's MITM attackable. Right?

User avatar

df
Site Admin
Posts: 281
Joined: Thu Jan 01, 1970 5:00 am

Re: cryptofree howto Windows | cryptostorm.org/cfwindows

Postby df » Mon Aug 22, 2016 12:40 am

@dlmetcalf

It actually points to https://cryptostorm.nu, but even then it's not as secure as we'd like it to be.
So in v3 we've addressed the issue by storing setup.exe (now called cryptostorm_setup.exe) on every node, and it's only accessible from an internal HTTP server that requires you to be on the VPN.
That way any further updates can be automatically downloaded only via the VPN tunnel, and since the node stores the files no sort of MiTM is possible.
To account for the unlikely event that a node is compromised, the v3 widget comes with a public key that will be used to verify the sha512 file integrity hash that's going to be downloaded along with any updates.


Return to “cryptofree: no-cost cryptostorm network access”

Who is online

Users browsing this forum: No registered users and 6 guests

cron

Login