7 ms·
I guess actually using this program would be blatantly illegal. But it's an interesting problem--how to defend against this? One way is to compute a fingerprint
by vilhelm_s 11y ago
I guess actually using this program would be blatantly illegal. But it's an interesting problem--how to defend against this? One way is to compute a fingerprint of the Diffie-Hellman shared secret, and then have the chat participants vocally compare it (I think one of the "secure chat" programs do this?). That should be secure as long as the attacker can not imitate voices, but it's rather heavy-handed.
- unimpressive 11y ago>That should be secure as long as the attacker can not imitate voices, EDIT: Messed up reading. I think the major problem with this idea is that it makes the barrier to entry for using omegle much higher, suddenly you need a microphone. Original post below the cut: --- They can. https://news.ycombinator.com/item?id=10020701 https://news.ycombinator.com/item?id=10020701 https://news.ycombinator.com/item?id=10020710 https://news.ycombinator.com/item?id=10020710
- vilhelm_s 11y agoHm, did you paste the right URLs? I don't see how they are related to this thread.
- unimpressive 11y agoThey seem to point to the right place on my computer. The first should be a post I made about how this works, in the second somebody talks about doing it and how he could imitate peoples voices. EDIT: OHHH, vocally. I did a misread ignore me.
- StavrosK 11y agoWhat you describe is standard ZRTP. You don't really have to imitate voices if it's someone the participants have never ever seen before, but you do have to get the lipsync right. Does Omegle have sound?