Live data from Hacker News

Introducing Keybase Chat

keybase.io

161–170 of 201 posts

Re: Introducing Keybase Chat

#161
post #121

Warning to all OS X users: The Keybase Chat desktop app does a number of shady things that ultimately led me to delete it from my system. I am writing this purely as a public service announcement, to those who worry about installing unknown apps on their Macs. The Keybase Chat app: (1) Requires administrator privileges to launch on first run, to install a "Helper Tool". The app does not explain what this tool does, w…

I'm not qualified or interested enough to investigate this but I can tell you that on Windows Trend Micro have blocked keybase as potential malware. It's reported on github and keybase have requested an exception but reading your post one starts to wonder why Trend Micro would get that idea.

I suspect this is because of the kb.io filesystem

Re: Introducing Keybase Chat

#162

Earlier quoted context omitted.

https://keybase.io/inv/1c385d4ff6

https://keybase.io/inv/72ee2e6801 I have a lot more, message me if you want one.

Likewise - I have a handful left. Anyone that wants an invite, find me on Twitter if you want one!

Re: Introducing Keybase Chat

#164
It seems that this app and Slack are hugely influenced from the iPad style of app design. Why can't we have a window per chat session on the desktop and why do desktop users get wrapped apps? Is this an indication of the lack of perceived importance of the desktop?

Re: Introducing Keybase Chat

#165

OP here! I had to trim the post down for brevity, but I thought the HN community in particular might be interested in the API side of things. Undocumented in the post: you can invent channels for app-to-app communication from the JSON API. For example, it's possible with Keybase chat to have a program posting encrypted messages for another person or program, without cluttering up the visual chat interface. Also - to…

Are ya'll going to post a SHA checksum for the downloadable dmg alongside the download?

Re: Introducing Keybase Chat

#166

I disagree with the idea of allowing backup/restore of conversations defeats forward secrecy. There's a big difference between decrypting past conversations and decrypting chat logs. I have full control over my chat logs, I can choose to delete them, not store them with some people, encrypt them with a different password and rotate them monthly, etc. Even Signal and other apps store all your messages on your device,…

I said the same thing! https://news.ycombinator.com/item?id=13605810 Worst case, make PFS without sync the default, but include a native feature for pasting into a shared document (Etherpad style, hosted by Keybase) for whatever your want to keep. Then you've got two spaces with different expectations, matching their capabilities. And for attached files, they'd be displayed in a list while the chat is active, asking…

That's an interesting idea. I think ultimately you need to trust the people you talk to though if you're discussing something private with them.

There's no technical solution to copying and pasting the conversation - try as you may, someone can always get a hook in there and dump the raw text out. Any technical measure you take against this is just as effective as DRM - a total half measure, vulnerable to everything from reverse engineering to the analog hole. The only solution is a social one.

Re: Introducing Keybase Chat

#167
post #90

This is the last time I spam a Keybase thread with invite codes :) https://keybase.io/inv/6953921e2f https://keybase.io/inv/637bfd5d42 https://keybase.io/inv/20be67f672

I have about 15 invites available. Let me know if anyone wants codes.

Re: Introducing Keybase Chat

#168
post #32

Umm has anyone read the lisc. for this application? https://keybase.io/docs/terms When providing Keybase or the Service with content, such as your name, username, photos, social media names, data or files, or causing content to be posted, stored or transmitted using or through the Service (“Your Content”), including but not limited to the Registration Data and any other personal identification information that you pr…

Does this mean that you are giving them the right to use any data transmitted through the service? Including your own personal messages?

No, from what I can tell it is them asking not to be sued to for providing the service they signed up for. That is, looking at your social media profiles to verify your identity across profiles.

Even if it did mean that, it would be of 0 use to them because they are fully end-to-end encrypted

Re: Introducing Keybase Chat

#170
post #121

Warning to all OS X users: The Keybase Chat desktop app does a number of shady things that ultimately led me to delete it from my system. I am writing this purely as a public service announcement, to those who worry about installing unknown apps on their Macs. The Keybase Chat app: (1) Requires administrator privileges to launch on first run, to install a "Helper Tool". The app does not explain what this tool does, w…

The feeling that the app is shady (because of permission overreach) may stem from the notion that Keybase is a chat app. It is, perhaps in the same sense that a browser running Slack is a chat app. It also includes crytographic key management and message handling via both GUI and command line (the core product), as well as a FUSE-based file system interface that allows transparent encryption/decryption with other users (Keybase FS). Viewed in that light, the installation footprint might be considered more reasonable.
Post reply on HN