Live data from Hacker News

Tox: A simple, distributed, free, secure Skype replacement. Now alpha with A/V

news.ycombinator.com

41–50 of 147 posts

Re: Tox: A simple, distributed, free, secure Skype replacement. Now alpha with A/V

#41
post #20

Earlier quoted context omitted.

Are IP addresses encrypted in the DHT?

Instead of doing things like encrypting ips, peers have temporary DHT public keys. The only way to get the ip of someone from their Tox id is by knowing their public DHT key which they will only send you if they are your friend. How this works is described in detail: https://github.com/irungentoo/toxcore/blob/master/docs/Preve...

So basically, everybody who gives out their Tox ID on 4chan is also giving out their IP address. Great.

Re: Tox: A simple, distributed, free, secure Skype replacement. Now alpha with A/V

#44

Earlier quoted context omitted.

Cool. Is this direct connection from peer to peer or does the communication bounce from one node to another as a TOR communication would do ? (I'm guessing direct for obvious latency reasons when using audio / video)

Direct connection when possible. Connection routed over one TCP node when direct connections are impossible due to NAT issues.

What if I don't want a direct connection for security/anon reasons?

Re: Tox: A simple, distributed, free, secure Skype replacement. Now alpha with A/V

#45

Earlier quoted context omitted.

Instead of doing things like encrypting ips, peers have temporary DHT public keys. The only way to get the ip of someone from their Tox id is by knowing their public DHT key which they will only send you if they are your friend. How this works is described in detail: https://github.com/irungentoo/toxcore/blob/master/docs/Preve...

So basically, everybody who gives out their Tox ID on 4chan is also giving out their IP address. Great.

No.

They have to be friends with you.

Re: Tox: A simple, distributed, free, secure Skype replacement. Now alpha with A/V

#46

For those that don't already know, this project comes from 4chan's technology board. While there's a lot of inane trash, there are also some real gems if you're patient enough. I find lots of really cool stuff there that doesn't seem to be anywhere else. More technically-capable people are always welcome to help drown out the inanity. :) http://boards.4chan.org/g/catalog

Interesting development: http://boards.4chan.org/g/thread/43340418/its-official-bitto...

Re: Tox: A simple, distributed, free, secure Skype replacement. Now alpha with A/V

#47
post #20

Earlier quoted context omitted.

Are IP addresses encrypted in the DHT?

Instead of doing things like encrypting ips, peers have temporary DHT public keys. The only way to get the ip of someone from their Tox id is by knowing their public DHT key which they will only send you if they are your friend. How this works is described in detail: https://github.com/irungentoo/toxcore/blob/master/docs/Preve...

[deleted]

Re: Tox: A simple, distributed, free, secure Skype replacement. Now alpha with A/V

#48

Earlier quoted context omitted.

So basically, everybody who gives out their Tox ID on 4chan is also giving out their IP address. Great.

No. They have to be friends with you.

But you don't have to actually know them. If they posted their Tox ID on 4chan, which happens all the time, and they accept my friend request, I would have their IP address, correct?

Re: Tox: A simple, distributed, free, secure Skype replacement. Now alpha with A/V

#49
NB: the tox project website is unusable w/o JS enabled. Please fix that.

https://tox.im/

While we're at it, the rest of the suggestions may be useful: http://www.reddit.com/r/dredmorbius/comments/27d5xr/please_f...

From the FAQ, this I like:

"The goal of this project is to create a configuration-free P2P Skype replacement. Configuration-free means that the user will simply have to open the program and without any account configuration will be capable of adding people to his or her's friends list and start conversing with them. There are many so-called Skype replacements and all of them are either hard to configure for the normal user or suffer from being way too centralized."

A lot.

(Emphasis added).

Post reply on HN