[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #7085 [Tor bundles/installation]: Integrate Cryptocat Browser Extension into Tor Browser Bundle
#7085: Integrate Cryptocat Browser Extension into Tor Browser Bundle
--------------------------------------+-------------------------------------
Reporter: kaepora | Owner: erinn
Type: enhancement | Status: new
Priority: normal | Milestone: TorBrowserBundle 2.2.x-stable
Component: Tor bundles/installation | Version: Tor: unspecified
Keywords: | Parent:
Points: | Actualpoints:
--------------------------------------+-------------------------------------
Comment(by mikeperry):
I would like to see the report. Have you heard anything from Dan Veditz?
I've also been wondering if your CSIS encounter counts as another code
review. I've been thinking about it quite a bit for the last few days..
Let's assume it was CSIS and not some random troll. Nobody told Ian that
he was endangering national security by publishing the pidgin-otr plugin..
I was able to come up with four explanations for this: 1). Ian is a
natural born Canadian citizen, and for some reason this makes him less of
a "threat". 2). Pidgin and/or libpurple is already so full of remote code
exec vulnerabilities (esp in its dependency libraries on platforms for
which it is built statically) that whatever crypto it thinks its doing is
not a threat to state-sized adversaries. 3). CryptoCat would be the first
usable implementation of mpOTR, which could be a game changer for
surveilling group chat. 4). OMG THAT'S EXACTLY WHAT they WANTED ME TO
THINK!11 (Pick your own values of 'that' and 'THEY').
I'm not sure which one to bet on. Too bad there are no futures markets for
these things... But in any case, for some reason I kind of want to say
'congratulations'? (Just don't tell THEM I said that...)
As soon as the TBB-stable FF17 transition is over, I think we can at least
try out CryptoCat in the next TBB-alpha and see what happens. If you never
hear from me again after this, assume you have my blessing ;).
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7085#comment:34>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs