Sources of ICQ desktop client by mail.ru
github.com
Sources of ICQ desktop client by mail.ru
1–10 of 78 posts
Re: Sources of ICQ desktop client by mail.ru
#2With private key for Sparkle updates signing: https://github.com/mailru/icq-desktop/blob/master/mac/ICQ/ds...
Facepalm.
Re: Sources of ICQ desktop client by mail.ru
#3With private key for Sparkle updates signing: https://github.com/mailru/icq-desktop/blob/master/mac/ICQ/ds... Facepalm.
Newbie here. Could you elaborate?
Re: Sources of ICQ desktop client by mail.ru
#4There is more
// TODO : change it after testing const static std::string flurry_key = "KYVQVW38PB2SP8CRJJ9R"; // test ICQ const static std::string flurry_url = "https://data.flurry.com/aah.do";
Source: https://github.com/mailru/icq-desktop/blob/master/core/stati...
Re: Sources of ICQ desktop client by mail.ru
#5With private key for Sparkle updates signing: https://github.com/mailru/icq-desktop/blob/master/mac/ICQ/ds... Facepalm.
Newbie here. Could you elaborate?
Sparkle is an open source update framework for osx.
I guess the private key is for signing the updates, so the user knows that the update is legit.
Re: Sources of ICQ desktop client by mail.ru
#6Earlier quoted context omitted.
Newbie here. Could you elaborate?
Sparkle is an open source update framework for osx. I guess the private key is for signing the updates, so the user knows that the update is legit.
Correct. Sparkle is an open source updater framework used by many Mac applications for built-in updates. When a vendor publishes an update, it signs it with a private key (which should be kept secret). When the app downloads the update, it verifies the signature using the public key distributed with the app, and proceeds with update if the signature is correct. Publishing private key breaks this trust: anyone can now sign updates, pretending to be the vendor of ICQ.
Edit: I just checked and their updater endpoint is served over unencrypted HTTP connection. If you use ICQ and update it, anyone who can MiTM your connection can install software on your Mac. PR: https://github.com/mailru/icq-desktop/pull/3
For ICQ for Mac users the best way to protect against this is to use Mac App Store version.
Re: Sources of ICQ desktop client by mail.ru
#7A thing to keep in mind that ICQ used to be insanely huge in Russia and neighboring countries. Back in late 90s people would know their own ICQ ID by heart (which are numerical) and exchange them instead of phone numbers. You also could buy vanity 4-5 digit ICQ numbers for anywhere between few hundred dollars to few thousands. Don't know if things changed now, they probably have.
Re: Sources of ICQ desktop client by mail.ru
#8A thing to keep in mind that ICQ used to be insanely huge in Russia and neighboring countries. Back in late 90s people would know their own ICQ ID by heart (which are numerical) and exchange them instead of phone numbers. You also could buy vanity 4-5 digit ICQ numbers for anywhere between few hundred dollars to few thousands. Don't know if things changed now, they probably have.
They have, people moved to VK for messenging en masse when it hit, and whatsapp/viber is definitely used too.
No idea if many people are still on ICQ. Don't bother to find client to check.
Re: Sources of ICQ desktop client by mail.ru
#9A thing to keep in mind that ICQ used to be insanely huge in Russia and neighboring countries. Back in late 90s people would know their own ICQ ID by heart (which are numerical) and exchange them instead of phone numbers. You also could buy vanity 4-5 digit ICQ numbers for anywhere between few hundred dollars to few thousands. Don't know if things changed now, they probably have.
21747XX Still remember mine from the late 90's despite not having used ICQ in 12-ish years. Somehow it just stuck in your head.
Re: Sources of ICQ desktop client by mail.ru
#10Is this a leak or a release?
Anyway, it seems like 5-10 years too late. I remember when I was in school (till 2003) that ICQ was huge. People knew their ICQ numbers by heart, and it was as important as e.g. WhatsApp or Facebook is today. It even anticipated microblogging - you could set a custom "status message", and people would check each others messages to see what others were doing. They had a lot of features that were not to different from what Facebook has today - you had Flash based minigames, a personal homepage-like area etc.. And of course they had a huge network advantage. I really wonder how they dropped the ball...