101–110 of 110 posts
Earlier quoted context omitted.
Do you (or does anyone) know if the wire protocol is open source as well? I see from their website that some of the apps are...but not sure of the protocol...? Because if so, then "someone" could technically retrofit it to "allow decentralization someday".
Check out https://github.com/wireapp/proteus/
Earlier quoted context omitted.
> If you have 5 devices linked, tox would behind the scenes send the message to 5 different destinations. I dislike existing systems that implement this kind of model since it is too easy for a ghost device to be getting copies of everything. My phone transitioning to different UX clients with notifications/verifications of transitions on its own UX is better.
I agree that I dont like that system (and may be the reason that it hasnt been done), but I'm not fully sure of alternatives either. But, I dont think a client should transition from one to the other either. I often just get up and walk away from my computer with chats in the background. I wouldnt want to have to tell it to transition.
If you treat multiple devices equally (even when you routinely leave them unatended) then things quickly fall apart and no paranoia helps.
You could look at kerberos for an example of this style of loaning limited tickets for credentials.
Does it still use 1GB of network traffic per day when idle?
FYI: https://en.wikipedia.org/wiki/Tox_(protocol)
It seems robust, but I do worry about the client. Has the client been audited properly? I hope the track record's not like Pidgin's https://pidgin.im/news/security/
Earlier quoted context omitted.
"that kind of privacy". So which 'kind' of privacy does it try to improve on? I've been thinking of switching to a different application for messaging and Signal came by a few times but I don't know a lot about it. Would you care to elaborate?
Moxie tries to provide privacy that protects everyone against the normal police, or hackers, or other adversaries – but it does and can not provide any protection against the NSA, or the FBI, and is not intended to do so.
Be warned, Tox claims to protect users from "governments", which is a huge claim. Yet, it's written in C, it hasn't had a security audit, it does not publish a list of security risks and mitigations, and, regarding its roots in 4chan, see for yourself: https://github.com/irungentoo/toxcore/issues/1186
List of security risks and Tox-ic ( BDUM-KSSH ) community are worrying, as is the lack of security audits. As for the fact that it's written in C, GPG, Tor, Psyc, and many other pieces of security software that you trust are written in C. It's dangerous, but writing secure apps isn't impossible.
My point exactly. It's dangerous and if it's not paired with many good security practices, it's better not to advertise it as "protect you from XYZ".
Right now I'm not really bothered about end-to-end encryption. If a government wants to track me, they will find a way. I'm more concerned about Facebook/Google/Microsoft/Apple tracking me, reading my private conversations, and selling my data to the highest bidder. I'd like an open source, decentralised messaging platform, that has good mobile apps. Are suggestions?
"If a government wants to track me, they will find a way." So just hand the data right to them? "I'm more concerned about Facebook/Google/Microsoft/Apple tracking me, reading my private conversations, and selling my data to the highest bidder." End-to-end encryption is the only solution to that problem. Open source software and decentralization is nice and all but to become a mobile app it'll have to be compiled and…
I don't want something that is perfectly secure, I want something I can run on servers I control, so that every message I send doesn't go through, and be stored on, servers controlled by the big four.
TOX is a great example, as all the services like this try too hard to be perfectly secure, rather than trying to be user friendly. Most people just want something that lets them easily message their friends, and are willing to sacrifice privacy (quite possibly because they are oblivious to it) to have that.
Even OTR + ICQ/AOL/MSN Messenger were better than what we have now in terms of security and privacy, but people gave those up for simplicity.
Right now I'm not really bothered about end-to-end encryption. If a government wants to track me, they will find a way. I'm more concerned about Facebook/Google/Microsoft/Apple tracking me, reading my private conversations, and selling my data to the highest bidder. I'd like an open source, decentralised messaging platform, that has good mobile apps. Are suggestions?
riot.im [1] (which is based on matrix.org) seems a good, decentralized, open messaging app. They have relatively nice mobile apps and they promise to soon release end-to-end encryption based on the OLM [2] ratchet which is similar to the Signal encryption. In contrast to Tox, Matrix relies on federated servers. Tox is pure P2P which, in my experience, never works very well on mobile devices. [1] https://riot.im/ [2]…