[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: TorChat is a security hazard

To: or-talk@xxxxxxxxxxxxx
Subject: Re: TorChat is a security hazard
From: Ansgar Wiechers <tor@xxxxxxxxxxxxxxxx>
Date: Wed, 24 Feb 2010 13:07:02 +0100
Delivered-to: archiver@xxxxxxxx
Delivered-to: or-talk-outgoing@xxxxxxxx
Delivered-to: or-talk@xxxxxxxx
Delivery-date: Wed, 24 Feb 2010 07:14:50 -0500
In-reply-to: <45309.14216.qm@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
References: <45309.14216.qm@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
Reply-to: or-talk@xxxxxxxxxxxxx
Sender: owner-or-talk@xxxxxxxxxxxxx
User-agent: Mutt/1.5.18 (2008-05-17)

On 2010-02-23 Paul Campbell wrote:
> "TorChat" is an inofficial chat client for the Tor network.  I like
> the idea behind "TorChat": easy to use, usb-stick portable and runs on
> Windows 98.
> 
> These are the problems I see with "TorChat":
> 
> 1. No authentication.  There is no way you can know for sure that the
> person you are chatting with is the person you chatted with yesterday.
> Tor's hidden services don't make any such guarantees about incoming
> connections. The clients stay anonymous.

Which, if you think about it, is the whole point of anonymizing
software.

Regards
Ansgar Wiechers
-- 
"Avoid third party code whenever possible.
Take the time and reinvent the damn wheel."
--The Peon's Guide To Secure System Development
***********************************************************************
To unsubscribe, send an e-mail to majordomo@xxxxxxxxxxxxxx with
unsubscribe or-talk    in the body. http://archives.seul.org/or/talk/

Follow-Ups:
- Re: TorChat is a security hazard
  - From: Paul Syverson

References:
- TorChat is a security hazard
  - From: Paul Campbell

Prev by Author: Re: Access from a local file
Next by Author: Searching for "good" ISPs
Previous by thread: TorChat is a security hazard
Next by thread: Re: TorChat is a security hazard
Index(es):
- Author
- Thread