6 ms·
TorChat: p2p instant messenger with a completely decentralized design.
- JoachimSchipper 16y agoCute, but I'm not so sure that using the same ID for all people you want to talk with is all that clever. It's also vulnerable to traffic analysis, but then so all are all real-time mix networks like Tor.
- cosgroveb 16y agoThis uses Tor's hidden services. The project page says each client makes 3 "random hops" and meet in the middle to create a secure tunnel. The communications never leave the Tor network so, I could be wrong, but I don't think traffic analysis applies here.
- evgen 16y agoTor has random hops, but no cover traffic, so black-box traffic analysis is trivial if you cast a wide-enough net.
- RickRoll 16y agoTor has cover traffic.
- evgen 16y agoIf by "cover traffic" you mean there are other users on the system then you are correct. If by "cover traffic" you mean internally generated traffic that can be used to obscure traffic between any two links (e.g. keep a fixed size bandwidth pipe full even when not in use) then you are incorrect. The former is of little value in thwarting traffic analysis and the latter is costly in terms of already limited system performance and imposes costs on participants that few are willing to bear.
- JoachimSchipper 16y agoYes, it uses hidden services; I won't know x23ff...sds is you. However, the most plausible link between me and evgen is HN, so x23ff...sds appears on both of our contact lists, it's likely to be a HN user. More widespread analysis of contact lists can probably tell us who you are. (So you know evgen and me, but not RickRoll? That gives me a good idea of who you are...) This is one reason why it'd be good to use different IDs for chatting with different people. Unfortunately, Tor wasn't designed to work that way, so you may need to run multiple clients or something similarly annoying to get this to work.
- va_coder 16y agoThis would make an awesome android app
- forgotusername 16y ago"completely decentralized" is a strong claim when depending on a network that relies on a canonical directory of relays (at least during client bootstrap?), unless I'm missing something.
- stipes 16y agoWell, as true decentralized bootstrapping is still an open problem (as far as I know), I'll give them a bit of a pass on that. It's an interesting idea, but I'd agree that there are possible ramifications of repeated pseudonymous communication over Tor.
- adulau 16y agoWhy not running TorChat over OTR? or multi-party OTR? http://www.cypherpunks.ca/otr/ http://www.cypherpunks.ca/otr/ It would limit some kind of traffic analysis.
- schindyguy 16y agoWhile I think tor and something like torchat is good in theory, its big negative in reality is that the speed makes it unusable most of the time. Not to mention if you are altruistic and plan to run a node, you also run the risk of the FBI knocking on your door for someone who used your (exit) node to upload their kitty porn (the exit is not encrypted). And if you do run that exit node, you can sniff what people are doing (so there goes the anon part).
- gwern 16y agoTor was pretty bad for web browsing - latency and pages requiring multiple resources meant that pages took forever to render. But how much is being transfered or rendered with chat? Not very much. IRC is usable even over atrocious connections. I rather imagine that textual chat over Tor would work fine. and I say this as someone who ran a Tor relay on his Xbox to get 1 hop out of the way