3 ms·

I remember testing the plugin when it was first released for gaim. I certainly thought it was weird, and a bit buggy. Version 1 had plenty of holes. Later (inc

I remember testing the plugin when it was first released for gaim. I certainly thought it was weird, and a bit buggy. Version 1 had plenty of holes. Later (including when it was used by the author) version 2 had more holes. So I don't really buy the idea that "stirring the shit on Twitter" for a grand would be enough to get serious research done - and then published - to expose this fledgling protocol's newest bugs. It wasn't a weird recommendation for a cypherpunk, of course, which is what i'm really saying. It's a hipster messaging protocol.

tptacek 10y ago
I don't think this is a reasonable way to sum up OTR, and I also suspect you're conflating the security of the libotr C plugin itself with the security of the protocol. I don't think $1000 is a lot for a libotr bet, but from the caliber of people who submitted attempts to end the bet (almost all of which were libpurple problems), I'm satisfied that it got quite a bit of attention.