How are you guys going to get Cryptocat on the iPhone app store? Apple rejects GPL-licensed apps.
Cryptocat for iPhone and Android – Call for Review
51–60 of 84 posts
Re: Cryptocat for iPhone and Android – Call for Review
#52Earlier quoted context omitted.
> "Nobody is going to die." This isn't accurate, e.g. http://cryptome.org/2012/07/chile-comments.htm . Bad crypto is actually much more dangerous than a single rogue dentist.
Bad crypto doesn't kill, people/organizations with a fucked up agenda do. I thought this past year taught us that no information is safe. To expect that any system is entirely secure and ever will be is pure egotism.
Then what's the point?
Re: Cryptocat for iPhone and Android – Call for Review
#53And why the hell should i use a app that is written by know poeple that prooven they have no clue about crypto? Why shouldn't i use one of the many apps that support OTR?
Please tell me something that even approaches these conditions: 1. Implements OTR / Isn't a roll your own flawed cryptosystem like telegram? 2. Can be used by non technical users 3. Can be used on linux, osx, windows, ios and android? 4. Does not crash all the time (ios's chatsecure) 5. Is open source? So far, unable to find it. It's easy to be a critic. Cryptocat and textsecure are the only two contenders, and right…
https://chat.echoplex.us
I'm the primary developer of this. I feel like it fulfills a lot of the points that you argue, please feel free to take a look :)
Re: Cryptocat for iPhone and Android – Call for Review
#54You know that using a .cat domain for something not related to Catalan culture or language is not allowed by the conditions established by ICANN and Fundació puntCAT? You have only translated the main page (with Google Translator...) to make it look like you have some Catalan content there. That's naughty. "In order to be granted a .cat domain, one needs to belong to the Catalan linguistic and cultural community on t…
I've always wondered what is so special about catalan? Why do they deserve a special three letter domain nobody else has? Who should I address a letter to request for the wayuu culture to have a .way tld?
ICANN.
Re: Cryptocat for iPhone and Android – Call for Review
#55You know that using a .cat domain for something not related to Catalan culture or language is not allowed by the conditions established by ICANN and Fundació puntCAT? You have only translated the main page (with Google Translator...) to make it look like you have some Catalan content there. That's naughty. "In order to be granted a .cat domain, one needs to belong to the Catalan linguistic and cultural community on t…
I've always wondered what is so special about catalan? Why do they deserve a special three letter domain nobody else has? Who should I address a letter to request for the wayuu culture to have a .way tld?
The thing is, the Catalan community has a very strong presence on the Internet.
As an example, the Catalan version of Wikipedia currently has +400.000 articles, being the 17th biggest.
To make clear what this means, you have to know that Catalan isn't even under the 100 most spoken languages worldwide (it has about 7 million speakers). So there is 1 article for every 17.5 people. Compared to the English version (4.4 million articles, 700 million speakers = 1 article every 159 people), or the Spanish one (1 million articles, 460 million speakers = 1 article every 460 people!), it is quite impressive.
So why would they want an own .cat domain? Because as a non-independent country / nationality, they are not allowed to have a two letter domain. Still, they wanted to be represented on the net so there was the PuntCAT foundation which did a huge effort in order to obtain the three letter .cat domain, but as it was sponsored, I imagine that they decided to restrict the usage of it to websites that have something to do with Catalan culture, or at least are written in Catalan.
I must say the Catalan culture and political movement is a pretty interesting topic itself, but I didn't want to make this post political, but rather interesting for "teh techies".
Re: Cryptocat for iPhone and Android – Call for Review
#56Easy to be snarky about this. But I admire their persistence. In the face of the extensive criticism they could have just given up. Instead they have acknowledged making mistakes, didn't give up, learnt from the mistake and changed their subsequent behavior. This is admirable.
Compare them to underground dentists - Bob has no medical training, but has a dremel and practiced on a pig head. He offers to do a filling for his pal. He makes a bit of a botch of it, but he larns from his mistake and carries on. Dentistry is important so it's admirable that Bob ignores the criticism. Bob's first pal is currently fighting off a severe infection, but Bob uses that as a learning experience. Bob will…
Are there any other dentists around who would work on Bob's pal? If so, are they actually better dentists than Bob? If so, is it possible for Bob's pal to find, enter, and understand their places of business, well enough to receive the care she requires?
Cryptocat would never be used by Glenn Greenwald, but that's because he is privileged to have access to better crypto.
Re: Cryptocat for iPhone and Android – Call for Review
#57Earlier quoted context omitted.
I can surely help you translate the homepage. Just give me a contact mail.
nadim@crypto.cat
Would you consider making the APK for Android available? I'm on Cyanogenmod without Gapps (including Google Play). You teaming up with https://f-droid.org/ would be even better. Cheers!
Re: Cryptocat for iPhone and Android – Call for Review
#58Earlier quoted context omitted.
Please tell me something that even approaches these conditions: 1. Implements OTR / Isn't a roll your own flawed cryptosystem like telegram? 2. Can be used by non technical users 3. Can be used on linux, osx, windows, ios and android? 4. Does not crash all the time (ios's chatsecure) 5. Is open source? So far, unable to find it. It's easy to be a critic. Cryptocat and textsecure are the only two contenders, and right…
https://chat.echoplex.us I'm the primary developer of this. I feel like it fulfills a lot of the points that you argue, please feel free to take a look :)
Doesn't have mobile integration and push notifications. I can't use it as a chat client on my iOS or Android device. There are many mature OTR chat clients for the desktop. Cool product although.
Re: Cryptocat for iPhone and Android – Call for Review
#59You know that using a .cat domain for something not related to Catalan culture or language is not allowed by the conditions established by ICANN and Fundació puntCAT? You have only translated the main page (with Google Translator...) to make it look like you have some Catalan content there. That's naughty. "In order to be granted a .cat domain, one needs to belong to the Catalan linguistic and cultural community on t…
Right, shadow.cat's approach to solving this was to talk to Barcelona's perl mongers group and get them to translate some introductory perl documentation; they eventually decided they'd prefer to take payment in books rather than money if memory serves, but the point basically is "your community should allow you to find enthusiatic and affordable translators with very little difficulty." I was, frankly, pleasantly amazed by how well it went for us.
Re: Cryptocat for iPhone and Android – Call for Review
#60Easy to be snarky about this. But I admire their persistence. In the face of the extensive criticism they could have just given up. Instead they have acknowledged making mistakes, didn't give up, learnt from the mistake and changed their subsequent behavior. This is admirable.
Thank you very much for that comment. I believe that we've been truly open source, transparent and accountable for our code since day one. There are other projects who are currently similarly open and transparent (I respect TextSecure for this,) but I can't say this is the standard in this field. We've always solicited and compensated feedback from security enthusiasts, hobbyists and world-famous cryptographers alike…
> I can't but resent the continued accusation that after three years at this, myself and all other volunteers (a wide range) working on this haven't matured enough to know what we're doing, and haven't proven that we care very much to do it right.
The thing is, in the case of a significant percentage of people attempting crypto, it's not that they don't care, it's that they simply aren't capable of it. Jumblefucks like the telegram launch (which was too disorganised to be a clusterfuck, frankly) keep that fact fresh in everybody's mind.
What's interesting to note, though, is that people are now largely complaining about the fact that vulnerabilities have been found, rather than your response to them. I think maybe that's a more useful metric for how competently you're dealing with it than pure positive/negative response is, under the circumstances.