Thursday, January 05, 2006

Hamachi - free secure VPN for Windows

Gibson podcast about Hamachi, a "free" personal Win32/Linux VPN solution, in December:
This week Leo and I discuss and describe the brand new, ready to emerge from a its long development beta phase, ultra-secure, lightweight, high-performance, highly-polished, multi-platform, peer-to-peer and FREE! personal virtual private networking system known as "Hamachi". After two solid weeks of testing and intense dialog with Hamachi's lead developer and designer, I have fully vetted the system's security architecture and have it running on many of my systems. While I am travelling to Toronto this week, Hamachi is keeping my roaming laptop securely and directly connected to all of my machines back home. Don't miss this one!
I went to the web site, from which I could figure out approximately nothing. In particular, I can't see how they plan to make money. Gibson says a Mac version is coming:
Steve: It's www.hamachi.cc. Alex is up in Vancouver, and so he's got a .cc on the end of his URL. You'll go to his site, download his client, currently for Windows or Macintosh - I'm sorry, Windows or Linux, and then Mac is coming soon. Installing couldn't be any easier. You simply run the setup, you go through a little wizard-based install to basically, you know, tell it where you want to load it on your hard drive. It sees that it's being installed in a system that it hasn't installed before. There's a negotiation with the server where it assigns it a unique IP. Your client produces its own asymmetric key pair, which it then uses to perform strong authentication. You do that on a couple other systems. Now, one trick is, he is assigning IPs sequentially. When I installed it on my second machine, for example, one of mine was 5.11.66.114. That was the first one I installed. What's very cool is I can tell you the IP. It doesn't matter. You can't get to 5.
I still haven't quite figured it out. If they produce a Mac client I'll give it a try.

Update: The key to figuring this out is to click on the screenshots and read them. I think I get it. I am also now inclined to believe a Mac client may appear. This is very interesting.

No comments: