Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tox: secure messaging for everyone

tox.im

Post reply on HN
Print view View original

111–120 of 214 posts

Re: Tox: secure messaging for everyone

#111

Post by tptacek »

banachtarski wrote: post #98
tptacek wrote: post #92

Earlier quoted context omitted.

If you extrapolate my comment into points I wasn't trying to make, I think you'll find those arguments very easy to tear down. If that's a productive exercise for you, be my guest.

I don't really see the straw man here, but my larger point wasn't about this particular argument at all. Just the fickle commitment to the discussion.

I strongly disagreed that the concept was't unique and original. I'm clarifying though, not trying to give you flak; like I said, I don't much care about this leg of the thread.

Re: Tox: secure messaging for everyone

#112

Post by jwarkentin »

latitude wrote: post #95
Daiz wrote: post #89

Earlier quoted context omitted.

You don't actually seem to be using the logo anywhere, though. On your site you write that "I had (have) plans to write an Instant Messenger client with proper support for privacy. This was the logo concept for the project"[1], but this project does not actually seem to exist (at least not in any public manner). As such, why not just leave the logo of Tox in peace? Especially since it's a FOSS project with noble goal…

> As such, why not just leave the logo of Tox in peace? I have plans for it. It wasn't just an idle doodle.

Many people make plans, few carry them out. You posted that March 21, 2012. Now, 1 year and 4 months later, someone apparently independently created a similar logo and is actually doing something with it, not just planning to do so. If you do something with it as well then great! I don't see what the big deal is.

Re: Tox: secure messaging for everyone

#114

Post by foobarqux »

irungentoo wrote: post #10

Since you managed to kill the website: https://github.com/irungentoo/ProjectTox-Core Tox is a completely decentralized secure messaging service which aims to replace skype. It it still in heavy development. So far we have IM working almost perfectly but no completed GUI yet except for a basic ncurses interface used to test the core. For the detailed info on how everything works see: https://github.com/irungentoo/Proj…

Why didn't you make use of existing projects like SecurePhone and OTR?

Re: Tox: secure messaging for everyone

#115

Post by gohrt »

latitude wrote: post #47

Oh, I see you helped yourselves to my Secure Chat logo - http://dribbble.com/shots/479881-Secure-Chat http://logopond.com/gallery/detail/165288 https://www.google.ca/search?q=secure+chat+logo - first page hit too Not cool at all, "cool guys around the world". -- (edit) Regardless of whether this was copied, over-inspired or independently conceived (but let's be realistic here), the generally accepted rule of the game…

Both your logos might look nicer if the avatar moved up and to the left to make the chat bubble look more like a chat bubble.

Re: Tox: secure messaging for everyone

#116

Post by salad »

jessaustin wrote: post #73
Daiz wrote: post #54

Earlier quoted context omitted.

Honestly, I don't see the concept being so unique and original that someone else couldn't have come up with it independently, and frankly the Tox logo has a much nicer balance (in the Tox logo, the person/keyhole works much better, whereas in yours it doesn't really work as a "keyhole" in my opinion) than the versions you linked. EDIT: The logo was originally made in /gd/ (4chan's graphic design board), and since the…

Cool story bro. However, these links seem to prove GP's claim: that his design has priority.

What priority does his design have? People have similar ideas disconnectedly, and the evolution of the Tox logo is clear. There isn't even a trademark. He isn't even using it in a project. latitude can go back to Apple with this drivel.

Re: Tox: secure messaging for everyone

#117

Post by Craigpd »

gohrt wrote: post #115
latitude wrote: post #47

Oh, I see you helped yourselves to my Secure Chat logo - http://dribbble.com/shots/479881-Secure-Chat http://logopond.com/gallery/detail/165288 https://www.google.ca/search?q=secure+chat+logo - first page hit too Not cool at all, "cool guys around the world". -- (edit) Regardless of whether this was copied, over-inspired or independently conceived (but let's be realistic here), the generally accepted rule of the game…

Both your logos might look nicer if the avatar moved up and to the left to make the chat bubble look more like a chat bubble.

Then it would not look like a keyhole. :(

Re: Tox: secure messaging for everyone

#118

Post by dpenning »

irungentoo wrote: post #20
shin_lao wrote: post #15

Unconvinced. * Lossless UDP? Is there a reason not to do TCP? * There is no way to know if the public key is genuine, so the system is very sensitive to MITM. * The key exchange is inadequate. Why not do DH if it's just to have session keys? * The system is very easy to brute force as the acknowledgement is based on a known plain text. This is very bad . A quick glance at https://github.com/irungentoo/ProjectTox-Core…

>Lossless UDP? Is there a reason not to do TCP? Hole punching. >There is no way to know if the public key is genuine, so the system is very sensitive to MITM. If you want to add someone you need their public key (their id) which is 32bytes (It's small because we use ECC instead of RSA). Unless someone somehow replaces the key (your id) when you give it to your friend the system should be secure. >The key exchange is…

I'm not sure if you understood what MITM(man in the middle attacks) actually means.

I will give you a high level example of what he is talking about. your software displays a public key to perform encryption. what 'the NSA' can do is put a proxy (or use your isp) in between you and the person you are sending data to. Then they can pose as the person you are sending data to by hosting their own public key to both you and the person you want to send data to. now they can decrypt information that you send, and then encrypt it with their private key and send it to the other person. NOW THE NSA CAN SPY ON YOU USING YOUR APP.

man in the middle attacks can get much more complex than that, but this should help you understand what is going on.

If you are attempting to write security software you should really at least learn crypto AND networking. it seems like you have not accomplished either of these.

Re: Tox: secure messaging for everyone

#120

Post by dkhenry »

I hate to be the bearer of bad news, but if your intent is to get around NSA snooping this doesn't do that. All you have really done is made sure that your communications are target for closer scrutiny. Remember I don't care _what_ you say I care _who_ your saying it to. Once I know who is talking to who and which person might be a good source of information there are much easier ways to get that information then trying to break encryption[1]

1. http://xkcd.com/538/

Post reply on HN