4 ms·

That is awesome - now we also need to kill metadata collection. Is this feasible? Oh and off-the-record was there on Hangouts/Gtalk before - I used it but the

That is awesome - now we also need to kill metadata collection. Is this feasible? Oh and off-the-record was there on Hangouts/Gtalk before - I used it but the chats were replicated across clients (e.g. Pidgin vs gmail.com) - so not really off-the-record (i.e. they lied).

akerro 10y ago
OWS apparently partners with NSA with metadata collection :>
- ThatGeoGuy 10y ago
  Is this sarcasm of some kind? Is there some joke in here about Whisper Systems vs. Open Whisper Systems? This comment seems baseless and unfounded at best. Is there context I am missing?
  - akerro 10y ago
    Yes. Singal and RedPhone require google apps on android device or using browser that is spying on you all the time, eg. downloads binary blob that turns on microphones, even when feature is disabled. NSA needs only metadata to send drone strikes on a village and Singal provides only metadata to Google services.
    - geofft 10y ago
      "Apparently partners with NSA" is very different from "for plausibly-legitimate reasons, runs only a platform that has an increased attack surface". That's like saying that Ubuntu partners with script kiddies because they're slow about fixing security bugs in LTSes. I understand the point you're trying to make, but no.
orblivion 10y ago
It's "Off The Record" in that they claimed not to store history. As I understand this is completely unrelated to the OTR encryption system.
- chinathrow 10y ago
  I got rate limited so here's my late reply: Yes, I labelled that incorrectly and I was not talking about the OTR encryption tech - Google still lied though in terms that they kept a conversation record and replicated it live and time-delayed across channels.
cyphar 10y ago
"Off The Record" is a technical term to describe a cryptographic scheme for allowing deniable authentication (meaning that only the two parties involved in a communication can be sure the other sent a message - they cannot prove to anyone else that the other person sent them a particular message). The Signal protocol is based off a similar system (Axolotl) which provides similar guarantees. It has nothing to do with "off the record" check boxes in some UI.
mrbiber 10y ago
Metadata-free chat exists already on the desktop with Ricochet (https://ricochet.im https://ricochet.im) and it will soon exist on mobile with Briar (https://briarproject.org https://briarproject.org). Both work through Tor hidden services - Briar also allows to exchange messages over Bluetooth and direct wifi.

akerro 10y ago

OWS apparently partners with NSA with metadata collection :>

ThatGeoGuy 10y ago
Is this sarcasm of some kind? Is there some joke in here about Whisper Systems vs. Open Whisper Systems? This comment seems baseless and unfounded at best. Is there context I am missing?
- akerro 10y ago
  Yes. Singal and RedPhone require google apps on android device or using browser that is spying on you all the time, eg. downloads binary blob that turns on microphones, even when feature is disabled. NSA needs only metadata to send drone strikes on a village and Singal provides only metadata to Google services.
  - geofft 10y ago
    "Apparently partners with NSA" is very different from "for plausibly-legitimate reasons, runs only a platform that has an increased attack surface". That's like saying that Ubuntu partners with script kiddies because they're slow about fixing security bugs in LTSes. I understand the point you're trying to make, but no.

orblivion 10y ago

It's "Off The Record" in that they claimed not to store history. As I understand this is completely unrelated to the OTR encryption system.

chinathrow 10y ago
I got rate limited so here's my late reply: Yes, I labelled that incorrectly and I was not talking about the OTR encryption tech - Google still lied though in terms that they kept a conversation record and replicated it live and time-delayed across channels.

cyphar 10y ago

"Off The Record" is a technical term to describe a cryptographic scheme for allowing deniable authentication (meaning that only the two parties involved in a communication can be sure the other sent a message - they cannot prove to anyone else that the other person sent them a particular message). The Signal protocol is based off a similar system (Axolotl) which provides similar guarantees. It has nothing to do with "off the record" check boxes in some UI.

mrbiber 10y ago

Metadata-free chat exists already on the desktop with Ricochet (https://ricochet.im https://ricochet.im) and it will soon exist on mobile with Briar (https://briarproject.org https://briarproject.org). Both work through Tor hidden services - Briar also allows to exchange messages over Bluetooth and direct wifi.