Could anybody explain what ZRTP hash is and why it's insecure?
This might help: http://blog.cryptographyengineering.com/2012/11/lets-talk-ab...
Ghost Call – Secure, Encrypted, Anonymous Calling
61–70 of 73 posts
Re: Ghost Call – Secure, Encrypted, Anonymous Calling
#62Earlier quoted context omitted.
I think you are confusing anonymity with something else. Bitcoin is entirely anonymous, but all transactions are public. You can create as many wallets and keys as you want, and you don't have to tell anyone you own them.
Bitcoin is NOT anonymous, it is pseudonymous [1], unless you use complicated things like Bitcoin mixers. [1] http://yro.slashdot.org/story/14/11/26/2121214/bitcoin-is-no...
A pseudonym that can be changed after every use is anonymous.
Re: Ghost Call – Secure, Encrypted, Anonymous Calling
#63Earlier quoted context omitted.
I think you are confusing anonymity with something else. Bitcoin is entirely anonymous, but all transactions are public. You can create as many wallets and keys as you want, and you don't have to tell anyone you own them.
You identify yourself as the owner of a Bitcoin address every time you transfer funds into or out of a currency with which you can pay food and rent.
Obviously, but you can buy digital goods anonymously.
Re: Ghost Call – Secure, Encrypted, Anonymous Calling
#64Earlier quoted context omitted.
Every computer has logs. If you interact with a server, you can't avoid it. Until we have decentralized apps, trust on this is unavoidable. ZRTP and the sign-up process means it will be hard to connect the little metadata they have, so they've narrowed down the amount they're trusted with by a large margin
Which is exactly my point. There shouldn't be anything for a 'server' to 'log'. If there is, then it's not anonymous, not 'secure' either depending on the definition you use, and it should not be advertised as such. At best, it's pseudonymous.
No. Wrong. I'm not affiliated but clearly they are keeping the logs around for 24h during the beta-testing of the service in order to troubleshoot any bugs founds. That would be a lot harder to do without logs.
But they're not claiming to offer anonymity during the beta period I imagine, once the service is out of beta then they claim their service to be secure and anonymous.
You're either splitting hairs or being uncharitable.
Re: Ghost Call – Secure, Encrypted, Anonymous Calling
#65Hmmmm?
1st: Ghost Call recommends ZRTP media encryption
2nd: ZRTP hash allows a MITM (Man In The Middle) and creates a risk of decryption.
Why recommend it then? Am I missing something?
Re: Ghost Call – Secure, Encrypted, Anonymous Calling
#66Hm. I'm not sure I get it. (from the Google cache) > Q: Can I call any number I want? > A: No. Ghost Call can only call other Ghost Call numbers. > Q: How can we contact you? > A: You can email us at info@ghostcall.io, or Ghost Call us: (490)-628-2381 So it's a ZRTP SIP provider that uses regular phone number format as the identifier? It strikes me as rather much like OSTN/OSTel, but using a phone-number-looking iden…
"You can do this with open source, X, Y and Z" is the classic initial criticism of successful companies. What critics forget to consider is that 99.9% of people do not enjoy doing complicated things. If private calls were as easy as public calls, why wouldn't someone make a private call? I think there is even an XKCD for this phenomenon.
In these situations I'm always reminded of this answer to the "Show HN: Dropbox" (https://news.ycombinator.com/item?id=9224):
For a Linux user, you can already build such a system yourself quite trivially by getting an FTP account, mounting it locally with curlftpfs, and then using SVN or CVS on the mounted filesystem. From Windows or Mac, this FTP account could be accessed through built-in software
Re: Ghost Call – Secure, Encrypted, Anonymous Calling
#67Hm. I'm not sure I get it. (from the Google cache) > Q: Can I call any number I want? > A: No. Ghost Call can only call other Ghost Call numbers. > Q: How can we contact you? > A: You can email us at info@ghostcall.io, or Ghost Call us: (490)-628-2381 So it's a ZRTP SIP provider that uses regular phone number format as the identifier? It strikes me as rather much like OSTN/OSTel, but using a phone-number-looking iden…
Seems better than Skype.
"Better" is a broad claim. Have you compared SIP/Skype call quality and reliability.
Re: Ghost Call – Secure, Encrypted, Anonymous Calling
#68Earlier quoted context omitted.
How do you propose we clean the slate?
I don't think we can clean it. Any redistributive attempt to do so would involve coercive force. It sucks, but it means that for most societies, talking about property as sacred is ultimately a fantasy.
OK, we might just be talking about different senses of "sacredness". I'm certainly not talking about, say, a glowing aura surrounding a piece of property that dims when the property is every taken illegally. I just mean that taking someones stuff is a very bad thing to do, to be compared with (depending on the severity) physically assaulting them.
Re: Ghost Call – Secure, Encrypted, Anonymous Calling
#69So by registrating I get (1) a number, (2) a password, and (3) a country code. What do I enter as username etc. in Linphone?
username = phone number (sans international prefix), domain = call.ghostcall.io, transport = tls.
Re: Ghost Call – Secure, Encrypted, Anonymous Calling
#70Have gone through the setup for Android, manage to make calls but they're not secured, TLS and ZRTP enabled, STUN server correct.....