30 ms·

just like ... Skype?

imurray 12y ago
Hopefully not (although possibly) just like Skype: https://en.wikipedia.org/wiki/Skype_security#Eavesdropping_by_design https://en.wikipedia.org/wiki/Skype_security#Eavesdropping_b... Presumably the encryption of open source SIP clients and Firefox hello are more trustworthy(?).
- derf_ 12y ago
  https://news.ycombinator.com/item?id=8683593 https://news.ycombinator.com/item?id=8683593
mironathetin 12y ago
Skype? Microsoft has systematically ruined skype. It used to be a great service, though.
Aoyagi 12y ago
Skype is getting more and more useless with every iteration. Encryption is gone, file transfer first stopped to recognize direct LAN connection between clients and now some of the files get stored "in the cloud", the design is just atrocious, advertisements annoying (thank gods for workarounds). And yesterday my 5.9 installation stopped working, so I have to put up with that.
- userbinator 12y ago
  Encryption is gone Do you have a link to that? The last time I looked at the news, Skype was using SSL to servers so Microsoft could see the data transferred, and while that's not ideal, it's still very different from your implication that everything in the protocol is now transmitted in the clear.
  - Mandatum 12y ago
    I think he's talking about government backdoors, whereas a service like MegaChat could potentially offer true end-to-end chat.. However this doesn't seem to be the case as A. you're unable to upload your own public key, and B it's still client-side JS. A subpoena would force them to pass on your session logs, encryption keys, etc.
  - Aoyagi 12y ago
    Sure, first websearch result [1] , although I was talking about EFF's evaluation [2]. Of course there is -some- encryption, not plaintext, but it was better before Microsoft came in, or so I hear. But I worded the original post poorly, sorry about that. [1] http://arstechnica.com/security/2013/05/think-your-skype-messages-get-end-to-end-encryption-think-again/ http://arstechnica.com/security/2013/05/think-your-skype-mes... [2] https://www.eff.org/secure-messaging-scorecard https://www.eff.org/secure-messaging-scorecard

Hopefully not (although possibly) just like Skype: https://en.wikipedia.org/wiki/Skype_security#Eavesdropping_by_design https://en.wikipedia.org/wiki/Skype_security#Eavesdropping_b... Presumably the encryption of open source SIP clients and Firefox hello are more trustworthy(?).

derf_ 12y ago
https://news.ycombinator.com/item?id=8683593 https://news.ycombinator.com/item?id=8683593

mironathetin 12y ago

Skype? Microsoft has systematically ruined skype. It used to be a great service, though.

Aoyagi 12y ago

Skype is getting more and more useless with every iteration. Encryption is gone, file transfer first stopped to recognize direct LAN connection between clients and now some of the files get stored "in the cloud", the design is just atrocious, advertisements annoying (thank gods for workarounds). And yesterday my 5.9 installation stopped working, so I have to put up with that.

userbinator 12y ago
Encryption is gone Do you have a link to that? The last time I looked at the news, Skype was using SSL to servers so Microsoft could see the data transferred, and while that's not ideal, it's still very different from your implication that everything in the protocol is now transmitted in the clear.
- Mandatum 12y ago
  I think he's talking about government backdoors, whereas a service like MegaChat could potentially offer true end-to-end chat.. However this doesn't seem to be the case as A. you're unable to upload your own public key, and B it's still client-side JS. A subpoena would force them to pass on your session logs, encryption keys, etc.
- Aoyagi 12y ago
  Sure, first websearch result [1] , although I was talking about EFF's evaluation [2]. Of course there is -some- encryption, not plaintext, but it was better before Microsoft came in, or so I hear. But I worded the original post poorly, sorry about that. [1] http://arstechnica.com/security/2013/05/think-your-skype-messages-get-end-to-end-encryption-think-again/ http://arstechnica.com/security/2013/05/think-your-skype-mes... [2] https://www.eff.org/secure-messaging-scorecard https://www.eff.org/secure-messaging-scorecard