Page 1 of 1

cryptofree howto Windows | cryptostorm.org/cfwindows

Posted: Fri Nov 28, 2014 2:53 pm
by cryptostorm_team
Here is the setup process for connecting to cryptofree with the cryptostorm widget for Windows:


    1. download and install the widget on your Windows computer:
    Visit https://cryptostorm.is/#section6 for download links
    2. launch the widget

    3. choose 'cryptofree' from the node options menu

    4. click 'connect'

That's it.

Have fun, & play safe...


    cryptostorm_team


[attachments removed since the link on the main page will be the place to download the widget from now on, since the forum links are outdated]

Re: cryptofree howto Windows | cryptofree.me/cfwindows

Posted: Thu Jun 25, 2015 9:40 am
by dlmetcalf
The first thing it does when run is say a newer version is available and redirects to
http://cryptostorm.nu/setup.exe

If I haven't been to that domain before, my browser is never going to have seen HSTS on it, so it's MITM attackable. Right?

Re: cryptofree howto Windows | cryptostorm.org/cfwindows

Posted: Mon Aug 22, 2016 12:40 am
by df
@dlmetcalf

It actually points to https://cryptostorm.nu, but even then it's not as secure as we'd like it to be.
So in v3 we've addressed the issue by storing setup.exe (now called cryptostorm_setup.exe) on every node, and it's only accessible from an internal HTTP server that requires you to be on the VPN.
That way any further updates can be automatically downloaded only via the VPN tunnel, and since the node stores the files no sort of MiTM is possible.
To account for the unlikely event that a node is compromised, the v3 widget comes with a public key that will be used to verify the sha512 file integrity hash that's going to be downloaded along with any updates.