6 ms·
Cryptocat, Now on iPhone
- deleted 13y ago[deleted]
- WellDressed 13y agoDownloaded it, but have no one to chat with. I created a room called: hackernews Its group fingerprint is: BBD398AA E131E1644 6EF77D4E A2CDC074 F497ED37 I'm not sure the group fingerprint is required. I've noticed if you logout and login with the same room name, it generates a different fingerprint.
- Gnewt 13y agoI joined, but the fingerprint is different... :/
- ZoF 13y agoA unique fingerprint is issued to each individual.
- magikarp 13y agoFingerprints are for verifying your own identity in the group chat context. They confirm your own identity to others. It's hard for new users to understand this — the blog post mentions that Cryptocat is trying to make cryptographic authentication less confusing.
- iambot 13y agob here, well worth a look, buddies list seems to be crashy, but very well designed with minimal features. worth checking out.
- justin66 13y agomagikarp, you're hellbanned. Apparently after your last comment about HN censorship, so... a little irony there I guess.
- Torgo 13y agoI went through this while experimenting with cryptocat, it's confusing as hell. the group fingerprint is your fingerprint, in that chatroom, for that session. I peeked at some of the issues on Github and it looks like they're adding challenge-response for OTP verification so you can have a way to prove identity without an active out of band channel.
- 13throwaway 13y agoFor everyone looking for a chatroom try "lobby".
- pinko 13y agoHelp me understand why I should rely on the privacy of this app, if the OS on which it's running is untrusted. Wouldn't it be trivial for Apple (or iOS malware) to record keystrokes?
- georgemcbay 13y agoShort of a serious undisclosed bug in iOS, malware should not be able to record keystrokes from other apps. But you are right in that if you don't trust the OS manufacturer not to be snooping on you, you can't trust the app. In addition to logging keystrokes they could be logging the contents of UI text controls as they are set. Even if you implement your own custom keyboard and UI controls and your own encryption prior to sending anything over a socket they could still be snapshotting the phone's framebuffer regularly. There's no way to reliably hide data that you can see visually (or data that has to be unencrypted in memory at some point, even if you don't see it) from the lowest levels of the OS. Having said all of that, they probably aren't doing any of this, but they could.
- britta 13y agoFrom a week ago, a proof of concept of this kind of bug, "Background Monitoring on Non-Jailbroken iOS 7 Devices": http://www.fireeye.com/blog/technical/2014/02/background-monitoring-on-non-jailbroken-ios-7-devices-and-a-mitigation.html http://www.fireeye.com/blog/technical/2014/02/background-mon... > iOS7 provides settings for "background app refresh". Disabling unnecessary app's background refreshing contributes to preventing the potential background monitoring. However, it can be bypassed. For example, an app can play music in the background without turning on its "background app refresh" switch. Thus a malicious app can disguise itself as a music app to conduct background monitoring.
- zeckalpha 13y agoI doubt this would get into the App store, but that's not the point, is it?
- 13y ago
- bullfight 13y agoSuper simple interface, I like it. However it seems to be lacking an obvious way to leave your current conversation and enter a new one.
- mokitaco 13y agoNot very secure if anyone can just waltz into your chat room.
- lclarkmichalek 13y agoI can never remember, is this the one that tptacek likes, or is that the other one?
- tricolon 13y agoYou're thinking of TextSecure by Open WhisperSystems.
- tptacek 13y agoI like what Whisper is doing, and deeply respect the crypto talent that went into building it. Personally, I think the soundness of the cryptography is the most important attribute of a cryptographically secure chat application. Other people think other things.
- sillysaurus3 13y agoThinking correct things is more valuable than thinking popular things. They'll come around to your point of view in time.
- czr80 13y ago"The market can stay irrational longer than you can stay solvent"
- cpach 13y agoHow is that relevant in this discussion?
- czr80 13y agoQuoting the post I was replying to: > They'll come around to your point of view in time. The quote from Keynes was merely a slightly whimsical way to make the point that people can hold false beliefs for a very long time, and that it's probably better not to personally invest in the idea that they will come around by themselves in any specific timeframe.
- Fasebook 13y agoWhy does anyone still care about Cryptocat?
- Mizza 13y agoAlternately: https://chatsecure.org https://chatsecure.org