Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ricochet: Peer-to-peer instant messaging system built on Tor hidden services (2017)

github.com

Post reply on HN
Print view View original

31–36 of 36 posts

Re: Ricochet: Peer-to-peer instant messaging system built on Tor hidden services (2017)

#31

Post by johnisgood »

morganava wrote: post #14
johnisgood wrote: post #13

Earlier quoted context omitted.

Does Ricochet Refresh use Gosling right now? Thank you a lot for the write up! > This of course does imply that you need to trust you contacts aren't cops. What happens if you find it out after the fact? Just regenerate everything and re-add friends? How much would it compromise though to have a friend that turns out to be a cop?

> Does Ricochet Refresh use Gosling right now? It does not, but work is happening in a (currently local) alpha branch on this. Unfortunately it is not a simple task and is more akin to a complete re-write in scope. > What happens if you find it out after the fact? Just regenerate everything and re-add friends? Currently your only recourse is to stop using your compromised id, create a new one, and re-add all your tru…

You guys should make it easier to donate (GitHub, link to patreon, liberapay, etc.). I cannot find an obvious way to do so with low effort or not much friction.

Re: Ricochet: Peer-to-peer instant messaging system built on Tor hidden services (2017)

#32

Post by morganava »

johnisgood wrote: post #31
morganava wrote: post #14

Earlier quoted context omitted.

> Does Ricochet Refresh use Gosling right now? It does not, but work is happening in a (currently local) alpha branch on this. Unfortunately it is not a simple task and is more akin to a complete re-write in scope. > What happens if you find it out after the fact? Just regenerate everything and re-add friends? Currently your only recourse is to stop using your compromised id, create a new one, and re-add all your tru…

You guys should make it easier to donate (GitHub, link to patreon, liberapay, etc.). I cannot find an obvious way to do so with low effort or not much friction.

Ricochet-Refresh and Gosling are maintained by Blueprint For Free Speech (an Australia+Germany-based non-profit), and it looks like we've a donation page here:

- https://www.blueprintforfreespeech.net/en/donate

Re: Ricochet: Peer-to-peer instant messaging system built on Tor hidden services (2017)

#33

Post by johnisgood »

morganava wrote: post #32
johnisgood wrote: post #31

Earlier quoted context omitted.

You guys should make it easier to donate (GitHub, link to patreon, liberapay, etc.). I cannot find an obvious way to do so with low effort or not much friction.

Ricochet-Refresh and Gosling are maintained by Blueprint For Free Speech (an Australia+Germany-based non-profit), and it looks like we've a donation page here: - https://www.blueprintforfreespeech.net/en/donate

Unfortunately it is mostly cryptocurrencies. You guys would probably get more donations through PayPal or CC.

Re: Ricochet: Peer-to-peer instant messaging system built on Tor hidden services (2017)

#34

Post by marc_abonce »

immibis wrote: post #27
k__ wrote: post #18

Half-OT: How well do Onion services work with regular HTTP and DNS? Can I use Onion IDs use just like a regular domain?

Yes but only if you connect through the SOCKS or HTTP proxy service provided by the Tor daemon. There's no DNS when using a proxy. The proxy does DNS.

I just want to add a potential gotcha that bit me in the past:

At least with curl (or any library that uses curl under the hood) you have to be very careful to specify the scheme as socks5h:// with a letter h at the end, not just socks5. Otherwise the hostname lookup would happen directly through the client rather than the proxy.

https://curl.se/libcurl/c/CURLOPT_PROXY.html

Re: Ricochet: Peer-to-peer instant messaging system built on Tor hidden services (2017)

#35

Post by k__ »

morganava wrote: post #30
k__ wrote: post #28

Earlier quoted context omitted.

Do you happen to know how browsers like Brave do it?

So Tor Browser (fork of Firefox ESR with various custom patches and tor bundled in) sends all DNS requests over tor (presumably Brave does the same thing if they're doing their jobs right) via tor's SOCKS5 interface. This means if you make a request for a clearnet service (e.g. example.com), that request goes to the daemon, which forwards it through the tor network to the exit node. That node sends a DNS request to w…

Thanks for this through explanation!

I'm asking because I have a web server that uses dynamic subdomains for sandboxing websites and I'm thinking about letting it run as onion service. However, the server needs to know the domain it's hosted on, which would be an .onion domain.

Re: Ricochet: Peer-to-peer instant messaging system built on Tor hidden services (2017)

#36

Post by morganava »

k__ wrote: post #35
morganava wrote: post #30

Earlier quoted context omitted.

So Tor Browser (fork of Firefox ESR with various custom patches and tor bundled in) sends all DNS requests over tor (presumably Brave does the same thing if they're doing their jobs right) via tor's SOCKS5 interface. This means if you make a request for a clearnet service (e.g. example.com), that request goes to the daemon, which forwards it through the tor network to the exit node. That node sends a DNS request to w…

Thanks for this through explanation! I'm asking because I have a web server that uses dynamic subdomains for sandboxing websites and I'm thinking about letting it run as onion service. However, the server needs to know the domain it's hosted on, which would be an .onion domain.

Happy to hep :3
Post reply on HN