phunel

I'm at a bit of a loss. Just wanted to ask the community if there were any recommendations for decent security awareness training. This requirement is coming up more and more with regulators and underwriters.

In essence, this is of course more 'box ticking' and has little to do with actual security, but the requirement remains.

Would love to hear from actual experience. I've gotten quotes from about a half dozen suppliers and I've yet to find a supplier that the staff wouldn't hate me for subjecting them to. The materials are almost universally pretty childish and melodramatic.

Saw the Stacksi launch earlier last year and they seem to have the right idea for this domain. Would love to find a comparable company but offering security awareness training - or if the Stacksi guys are reading this, please consider adding this to your product line up! :)

Is there anyone in the HN community currently tackling the development problem for encrypted mail on a mobile device? The GnuPG support via Enigmail on Thunderbird would, it seems, be the obvious model to implement.

I doubt I am the only one who has a genuine need for sending/receiving encrypted messages. I travel worldwide extensively and often my iPhone is the only reliable internet connection available. I carry a laptop, but often leave it behind if I'm going somewhere for only a few days.

Lately I've been using only a notebook (the analog kind), a pen, and an iPhone and the setup is minimalist and very effective for me - and in turn my laptop increasingly feels burdensome, as when I receive encrypted messages from my company or development team, I have to race back to wherever my laptop is to decrypt and respond. In the worst case scenario, I have to find an internet connection for the laptop as well (I understand I can jailbreak, etc. the iPhone to tether the connection, but the instability for my main business phone just isn't worth it yet - and isn't really the focus of this post).

I realize there are some inherent security flaws in using a mobile device for encrypted mails, with your encryption keys being held on the easily lost device - yet I'd rather use some system, and a system I had control of at that, versus say hushmail.

Anyone working on this? Anyone heard of anyone working on this? Is there any hope for this happening on the iPhone? An encryption app, or system that was as easily integrated as Thunderbird/Enigmail? Or on Android? I'd be willing to toss out my Apple phone for an Android phone if this became available. I'd also have no problem paying dearly for such an app.