6 ms·
Cryptocat security audit results
- deleted 13y ago[deleted]
- rfw 13y agoHuh, looking at https://github.com/cryptocat/cryptocat/issues/581 https://github.com/cryptocat/cryptocat/issues/581: "Ciphertext retrieval by joining from non-Cryptocat clients" -- isn't that just expected behavior, or am I missing something here?
- computer 13y agoYou missed the word "invisibly"-- they can join/watch without showing up in the Cryptocat client as being present.
- rfw 13y agoAh thanks, that makes a lot more sense.
- Fasebook 13y agoWell, it's not like some hypothetical 3rd party would ever be able to decrypt it.
- mcintyre1994 13y agoFrom what I understand of Cryptocat, if said hypothetical third party could decrypt it, wouldn't the entire security model be broken with respect to said hypothetical third party?
- p4bl0 13y agoWhat is the difference between that and someone listening on the network with a tool such as wireshark? It may be a little to get the ciphered text easier, but it doesn't weaken the security in any way.
- daeken 13y agoIs there anything public as to methodology, coverage, and other test info? I'd really like to see how this test was performed and what was achieved during that time, for curiosity's sake.
- e12e 13y agoI keep confusing this project with the old cryptcat (netcat+twofish encryption). http://cryptcat.sourceforge.net/info.php http://cryptcat.sourceforge.net/info.php