5 ms·

> Cryptocat did not give those warnings. Cryptocat said it was secure. This is just not true. There are ample warnings on the front page of the website as well

> Cryptocat did not give those warnings. Cryptocat said it was secure. This is just not true. There are ample warnings on the front page of the website as well as on the login screen on the app. Cryptocat has never said it's completely secure.

anu_gupta 13y ago
The warnings, hidden away behind a link (unlike the stuff about journalists and LGBTQ activists) > What Cryptocat Doesn't Do > While Cryptocat aims to offer strongly encrypted, private Instant Messaging, it's important to note what Cryptocat does not protect you against: > Cryptocat does not anonymize you: While your communications are encrypted, your identity can still be traced since Cryptocat does not mask your IP address. For anonymization, we highly recommend using Tor. > Cryptocat does not protect against key loggers: Your messages are encrypted as they go through the wire, but that doesn't mean that your keyboard is necessarily safe. Cryptocat does not protect against hardware or software key loggers which might be snooping on your keyboard strokes and sending them to an undesired third party. > Cryptocat does not protect against untrustworthy people: Parties you're conversing with may still leak your messages without your knowledge. Cryptocat aims to make sure that only the parties you're talking to get your messages, but that doesn't mean these parties are necessarily trustworthy.
- antihero 13y ago
  None of those seem to relate to the crypto itself.
- blablabla123 13y ago
  Wow, so you rely on heavy encryption but you do not read through the website of that encryption? Anyways, if I relied on super secure encryption, I wouldn't use such uncirculated software anyway. I would really only on stuff like OpenSSH, OpenVPN or GPG. These tools enable you to use UNIX talk, or tunnel into a network doing messaging there or whatever.
  - anu_gupta 13y ago
    Who is the "you" that you are referring to? I don't use CryptoCat at all. I merely pointed out that the usage stories are presented on the home page without needing a click, but the warnings are hidden behind a click and don't even refer to the crypto. Not sure what the relevance of your final paragraph is.

anu_gupta 13y ago

The warnings, hidden away behind a link (unlike the stuff about journalists and LGBTQ activists) > What Cryptocat Doesn't Do > While Cryptocat aims to offer strongly encrypted, private Instant Messaging, it's important to note what Cryptocat does not protect you against: > Cryptocat does not anonymize you: While your communications are encrypted, your identity can still be traced since Cryptocat does not mask your IP address. For anonymization, we highly recommend using Tor. > Cryptocat does not protect against key loggers: Your messages are encrypted as they go through the wire, but that doesn't mean that your keyboard is necessarily safe. Cryptocat does not protect against hardware or software key loggers which might be snooping on your keyboard strokes and sending them to an undesired third party. > Cryptocat does not protect against untrustworthy people: Parties you're conversing with may still leak your messages without your knowledge. Cryptocat aims to make sure that only the parties you're talking to get your messages, but that doesn't mean these parties are necessarily trustworthy.

antihero 13y ago
None of those seem to relate to the crypto itself.
blablabla123 13y ago
Wow, so you rely on heavy encryption but you do not read through the website of that encryption? Anyways, if I relied on super secure encryption, I wouldn't use such uncirculated software anyway. I would really only on stuff like OpenSSH, OpenVPN or GPG. These tools enable you to use UNIX talk, or tunnel into a network doing messaging there or whatever.
- anu_gupta 13y ago
  Who is the "you" that you are referring to? I don't use CryptoCat at all. I merely pointed out that the usage stories are presented on the home page without needing a click, but the warnings are hidden behind a click and don't even refer to the crypto. Not sure what the relevance of your final paragraph is.