Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: ChatSecure iOS v3.0 (OTR + Tor + XMPP)

chatsecure.org

Post reply on HN
Print view View original

11–20 of 29 posts

Re: Show HN: ChatSecure iOS v3.0 (OTR + Tor + XMPP)

#11

Post by chrisballinger »

ex3ndr wrote: post #9

We in Actor.im tried to build tor-enabled messaging (on better and faster protocol), but for working tor engine need to download 1-3mb files every 4 hour period. So, this became useless in mobile environment. Tor need to do step forward to mobile before we can really use it.

I was excited about the possibility of federated XMPP over mobile hidden services, mainly because of the built-in NAT traversal. It could make creating a "good enough" XMPP server as simple as buying a cheap Android phone, installing an app, and keeping it plugged in somewhere.

Re: Show HN: ChatSecure iOS v3.0 (OTR + Tor + XMPP)

#12

Post by LeoPanthera »

tyrion wrote: post #7

If you are so concerned about privacy and security, why use an iOS device at all? Note: I am not trolling. It is a serious question. I mean, probably no one would be using ChatSecure if it were not Free Software, rightly, because nobody could audit its source code, but then isn't it a security/privacy issue using it on top of a completely closed platform?

Even if you don't use iOS, you may wish to communicate (relatively) securely with those who do.

Re: Show HN: ChatSecure iOS v3.0 (OTR + Tor + XMPP)

#13

Post by acdha »

tyrion wrote: post #7

If you are so concerned about privacy and security, why use an iOS device at all? Note: I am not trolling. It is a serious question. I mean, probably no one would be using ChatSecure if it were not Free Software, rightly, because nobody could audit its source code, but then isn't it a security/privacy issue using it on top of a completely closed platform?

1. You are using the device you already have

2. You know that for non-experts the free software distinction is pointless because almost nobody actually audits the installed binaries either way

3. You value the security benefits from iOS's more restrictive app sandbox and mandatory code auditing.

(That last is not an Android slam – both policies have their merits but the net effect is that Android has more malware than iOS because there are multiple ways to get code onto the device and the vast majority of users can't meaningfully make security decisions)

Re: Show HN: ChatSecure iOS v3.0 (OTR + Tor + XMPP)

#15

Post by avree »

tyrion wrote: post #7

If you are so concerned about privacy and security, why use an iOS device at all? Note: I am not trolling. It is a serious question. I mean, probably no one would be using ChatSecure if it were not Free Software, rightly, because nobody could audit its source code, but then isn't it a security/privacy issue using it on top of a completely closed platform?

Because there's a tradeoff between 'privacy and security' and 'convenience', and most people like to fall somewhere in the middle.

It's like locking your doors on your house. Sure, a burglar could break the door down, smash a window, follow you around and steal your keys, etc., but it adds a level of security and precaution that keeps some of the bad guys out while not being insanely inconvenient.

I care about the privacy and security of my home, but I'm not going to live in a bunker.

Re: Show HN: ChatSecure iOS v3.0 (OTR + Tor + XMPP)

#19

Post by chrisballinger »

higherpurpose wrote: post #16

Would it be possible for TextSecure and ChatSecure to interoperate (at least with chats)? Or would that create too much pain for both groups to support each other as they (possibly) diverge in features?

I'd love to make this happen, but it won't be possible unless they support open federation, which is currently impossible when using your phone number as the identifier. I do plan to support Axolotl in conjunction with our provider-agnostic push solution, which could potentially provide a bridge between the two platforms.

Re: Show HN: ChatSecure iOS v3.0 (OTR + Tor + XMPP)

#20

Post by chrisballinger »

xxdesmus wrote: post #18
foobarqux wrote: post #17

Why not use Signal?

Signal doesn't do messaging on iOS right now, only phone calls.

It will soon! After playing around with their latest Signal 2.0 beta that integrates TextSecure support, I honestly would recommend using Signal unless you specifically need Tor/OTR or want to host your own XMPP infrastructure.
Post reply on HN