Why aren't you using the only instant messaging service that respects your privacy and your freedom, /g/?
Don't you have any friends, /g/?
we are.
stickers a best
>>51681016
> requires phone number
No
>>51681016
>falling for the botnet trap
Last time I tried it it asked me for a phone number.
>>51681016
>Don't you have any friends, /g/?
I for one, don't. Hell, I don't even have a smartphone.
nah, i prefer signal.
>>51681039
>>51681044
>not owning a cell phone
So, no friends?
Phone numbers are better than email addresses for authentication. You can't get locked out, authentication tokens take place of passwords, and it's less convenient to get a second one.
>using encrypted messaging software
>having friends
Pick one.
What is this OP ?
>>51681016
I do have friends, thats why Im stuck with Whatsapp
>>51681100
I here you, almost impossible to convince them to use something other than whatsapp.
>>51681163
Same, normies are dumbasses
>>51681016
You're shilling, I've seen some obvious shilling for this app on this board. You don't need to start a thread about it, just post the logo and make a thread about apps people on /g/ use.
>>51681150
This
telegram's crypto is fundamentally broken
>>51681079
>wanting to be tracked
best goy
>>51681065
we can hug if you want anon
>>51681150
>>51681163
>>51681245
>not having sufficient influence over your friends to cause them to switch
Are they really your friends?
>>51681016
Is it open source?
No.
So it's not free like in freedom.
>>51681264
I'd say so, but they simply don't care about these things. Not much you can do about it as non-autist other than re-reminding them regularly.
>>51681297
actuaddy, it'z called GNU/OpenZourze and I am triggered right now by your comment.
>>51681297
>lists the source code in the screenshot
Are you retarded?
>>51681297
All clients are free as in freedom. The server doesn't need to be, since you don't execute it on your machine.
>implying you get to choose what application you use
I still use SMS because it just werks
>>51681312
I made them get telegram by not usin watsapp
>>51681345
shit company that doesnt care about your privacy
>having friends
>>>/facebook/
>>51681249
eggsplain?
So, aside from shitposting, what is the best IM service /g/?
I've been using Viber so far, but I know well enough that it's not secure. What would you guise recommend?
I'll probably keep using Viber, but I've got a couple of friends that have gotten interested in free as in freedom
>>51681426
It's non-standard, and even though nobody has cracked it yet, they like to insist it's broken to fit into their autistic worldview.
>>51681441
Just use Telegram. I've been using it for over a year. Got all my friends to switch after Facebook Messenger kept breaking.
There's even a large 4chan community.
>>51681345
Euhm... The server stores your messages (by default)? If you switch devices you instantly have all your chats available and you say the server source doesn't matter? Bro...
>>51681457
It doesn't matter what software they use. It could be open source and they could still be tracking you. The source model doesn't matter, the integrity of the company does.
Pavel Durov has proven that he's pro-privacy, after leaving Russia altogether when the Russian government seized his previous company.
>Telegram
>respects your privacy and your freedom
lol, get a load of this tard
we are using it. join the /g/ group chat
https://telegram.me/joinchat/ANFp6AJ9-_8pWePq59leEQ
>>51681016
>and your freedom
>not fully open source
ummmmmmmm also it leaks some alarming metadata (google it)
>>51681426
>>51681442
www.cryptofails.com/post/70546720222/telegrams-cryptanalysis-contest
>>51681630
Isis used it
>>51681340
it only lists code for a couple of frontends
>>51681641
There's already a /g/ group.
Send "!join g" to @BotMeNot (up to eight times because of spam-prevention measures).
>>51681536
Of course the source model matters, as in seeing what the code does and starting your own server. And Pavel Durov + the Telegram privacy policy are both vague as shit.
>>51681453
thanks for the reply mate, I'm looking into it right now. Seems secure enough, although I'd like to see more info about how it encrypts the messages etc etc.
>>51681074
THIS
THIS
THIS
THIS
>>51681671
Argumentum ad populum. Telegram uses self invented crypto, which is always a huge red flag in the crypto world as you should always shun at the mere sight of unproven crypto. Moreover, it doesn't support encrypted group chats, only for one-on-one chats. Validation of key fingerprints is prone to human error. Manually comparing colours for that is retarded, use the actual fingerprint for comparison, simplify this with a QR code for all I care.
>>51681074
This.
>>51681699
Didnt work mane
>>51682150
Send it more, refer to >>51681641 this group for help.
Speaking of respecting privacy, what's the best alternative to Dropbox?
>>51682213
setup own cloud or SFTP
I don't own a phone any website that I can use for mobile
>>51681016
Better than most? Yes
Only? No
Best? No
I use it and like it but don't spread misinformation about it, that's how we end up without privacy or freedom.
>>51682224
Oh... just saw a swiss site but apparently they're being shut down
>>51682270
I found a site people have been using for telegram waiting on verification code now
>>51682213
>privacy
This is like asking for a bus with only one seat
Lack of privacy is a key feature of cloud storage.
Either host it yourself, or encrypt it before uploading.
ok I logged into a phone site, logged into telegram and it was someone elses account so I added two step verification and a password also terminated all other sessions am I good?
>>51681699
i can only send messages to mutual contact :(
>>51682415
stop harassing people then
>>51682434
I used a website since I don't have a phone
>supporting ISIS
>Signal
>no trustworthy apk from their website
>only from Jewgle BotStore
ok kid
I use whatsapp but have telegram installed, just need more people on it.
>>51681016
I have converted everyone around me thanks to its dank memes stickers and porn bots.
>>51681074
>needs proprietary google apps installed to work, apps which get special privileges on your android device
only the messages have been made to work without it, not the calls
Dead On Arrival until this stupid dependency is fixed.
>>51682213
Owncloud
Syncthing
>>51681016
>Why aren't you using the only instant messaging service that respects your privacy and your freedom, /g/?
Because it's total shit.
>>51682578
It's on F-Droid you fool.
>>51681039
this
>>51681345
>The server doesn't need to be
I use it though, anon. It's great.
>>51681039
/thread
Everyone here using Telegram has been mislead to trust pseudo security.
>>51681074
>needs your phone number
>needs google apps
trash.jpg
>>51685148
In turn you get proper end-to-end encryption, unlike Telegram offers.
>>51681016
>Don't you have any friends, /g/?
No, that's why I'm here.
>>51681016
>Don't you have any friends, /g/?
Yes and that's why I just use Facebook Messenger.
>>51684632
no it aint
Shit I just installed signal, is Telegram better?
>>51681016
>respects your privacy
Saves all your messages on their servers and refuses to use better encryption instead of their insecure trash.
That being said, as long as you realize it's basically plaintext then it's probably the best multiplatform IM out there at the moment.
>Whatsapp is Facebook bullshit
>All the secure IMs have no users
>Line has ridiculous arbitrary restrictions such as only one "smart" device per account and giant UIs that you can't change
>>51685286
>Not having enough storage for both to find out
>>51681016
But I am already using Signal. On the desktop, even.
>>51681074
This.
>>51681223
Fucking this, jesus. I know you have a marketing team, Telegram, I just wish you'd fix your shit first.
>>51681249 >>51681442
I know what I'm doing in this field. (Perhaps even enough to know when I shouldn't do certain things myself.)
Telegram's authors very obviously don't. Telegram's MTProto is bizarre, nonsensical, bat-shit insane retarded-level stuff. It has serious flaws - when it uses any crypto at all (most of the time it's fucking cleartext!). Like Matthew Green said in a conversation with me: it's like they'd heard of a cake, never seen one, and tried to bake one with thumbtacks and iron filings - yeah, MAYBE it won't kill you, but I'm not going to give it a fucking Michelin star or let my friends eat it.
>>51681100
Ha ha, OPTIC NERVE is looking at all your boob/dick pics.
>>51681150
That's precisely why Moxie got them to use a little bit of the same (Axolotl/TextSecure) code too. It's not as good (server can substitute keys without you noticing), and it's not on all platforms, but it's a start - and look at the government's response. Ha.
>>51681039
It's a phone app. That it requires a phone number is a pity, but it helps normies do all their contact stuff. Stopping trivial mass surveillance is priority #1, that means giving normies powerful crypto they don't even need to think about.
Metadata is still a thing, so the next step is making even better tools for crypto nerds, like agl's Pond, or something else based on garlic routing, DC-nets, verifiable shuffles, and so on. Tor works well today, but isn't designed for a global passive adversary, let alone a global active adversary. Messaging in that scenario is, you might be surprised to hear, an open research problem.
>>51684603
Most normies have that. Marshmallow is a bitch to keep working during Deep Sleep without it. GcmCore works as an open-source replacement, experimentally.
Any company based on the US or allies that claims to be "encrypted" and is allowed to exists is already being tapped by the NSA.
>>51685385
>Signal
Doesn't even have a desktop client. Dropped
>>51685480
Telegram's encryption has been mocked since it was first announced.
>>51681016
>Respects my privacy
>needs phone number
>Has my location
Very private indeed
Is cryptocat still garbage or did they sub out the worthless crypto?
>>51685184
They're both shit and should be avoided.
Seriously, why the fuck does an internet messaging app need to be tied to your phone?
>>51685601
>They're both shit and should be avoided.
They're not, one is. I'll leave you to think about which one.
Use email with PGP if you don't like IM on your phone.
>>51685654
>Use email with PGP if you don't like IM on your phone.
I like IM anywhere.
Signal is a shit.
>>51685484
Just entered public beta: a Chrome extension/app for Signal that links to your Android phone. https://whispersystems.org/blog/signal-desktop/
Would a native desktop version have worked better, I wonder? Maybe, but Signal replaces texting and calling now. That's for later messengers with stronger models, perhaps, more distribution, more features, metadata protection.
>>51685480
No-one's going to be filing PRISM requests or NSLs with Moxie, if that's what you mean. They're not that stupid. If it's even remotely possible to tap any communication tool, it's more likely GCHQ are going to give it a try no matter where they are.
I lament that I'm English myself and GCHQ are about to get a huge Christmas present from our war-happy, 1984-esque Parliament: you couldn't say it about the US, actually, but soon you will be able to say it about me, unless I move, which I might. Or just make all my stuff as verifiable as possible, which has the advantage it also catches when I fuck up by accident, which is much more likely.
Signal's crypto is sound and provable; its code, auditable and pretty nice; its compiles, verifiable to the extent that they can be. It does not deliver metadata protection - that's an Open Research Problem, even private contact discovery techniques currently in the lexicon unfortunately don't scale up well enough - and it cannot protect against things like your phone being rooted by baseband exploits, which is the kind of thing that happens when an intelligence agency takes a personal interest in you. But Signal is the best you can currently get for message confidentiality against mass surveillance.
>>51685286
Telegram... has... stickers? Which is pretty cool. Every messenger should steal that idea (from LINE). Other than that, it's dog-shit compared to Signal.
i dont remember, do we trust moxie marlinspike or not
>What is Yahoo Messenger
>>51685698
>a Chrome extension
>>51685688
That's email, anon. It's the most universal and omnipresent means of digital communication out there.
>>51685763
Signal is a fucking joke.
Keep this normie facebook tier shit out of /g/.
>>51681016
>Don't you have any friends, /g/?
I do, but I doubt normal friends would use Telegram. Sadly, mine (and those of most others) use the NSA honeypot called Skype.
>>51685763
Yeah, as you may have gathered, I'm not a massive fan of that approach either, but it exists.
I'm considering getting a little practice porting it to Rust instead, but I think if I went in that direction I'd remove the phone dependency and end up with something that looks like Threema ate Pond and I2P. File transfers, syncing/updates, all that stuff. I2P can do things with a global passive adversary that Tor can't... a global active adversary, however, like a Nation State Adversary (ahem) is a pretty fucking big challenge and there are a whole group of open research problems.
If you wanted, I could do it all today, if you wanted 100KB/s transfers and 20 seconds' latency on your messages. But even if I don't know who you are, I can sense you wouldn't pay that price - so, more research is required.
This, and things like Tor, help now. There's a huge value in telling the NSA/GCHQ/etc to fuck of as best we can with what we have now while people like me make plans ready for dystopia future where they step up their game.
>>51681297
The source code for the files is on github and released under the GPL
>>51685995
Why not help with Tox development?
As an IM, it seems better than Signal in every way. (granted, the crypto might not have been audited properly yet)
>>51685253
>>51684632
there is an older fork on fdroid before the merge, but not signal itself.
>>51681749
Use Signal
>>51685811
You're a joke if you can't even support your statement why Signal is a joke. There are numerous posts here refuting your beloved Telegram.
>>51686689
It's a joke because it needs a phone and google apps to even work. Telegram is a joke too.
Why the fuck are we even talking about these shitty apps.
>>51685811
You need normies, anon. Normies are your anonymity set when things go south. They are the honest nodes that keep your network up when under attack, and the reason people won't ban your network.
>>51686049
I've been following Tox with idle curiosity so far: I've been working on systems like this for... well, put it like this, I was around for Freenet, the original IIP, and I2P. I've been working on my current project for slightly over 5 years, so when I say "open research problem", I really mean it.
I have not yet audited Tox's cryptography, but as a baseline start, NaCl is reasonable if used properly (and is deliberately hard to use wrong - although as Telegram demonstrates, it's quite possible to start with fairly reasonable, well-known things like AES and RSA and easily end up with an absolute shit-cake). It is not as good as Signal's Axolotl, which is absolutely best-in-class for the kind of partially-offline messaging that phones do. It's also not as good as Trevor Perrin's other, more recent protocol-in-development, Noise, which is worth looking into as long as you know someone who has enough cryptographic chops to know exactly why hashing the transcript helps a proof in the standard model, and when you do and don't need contributory behaviour.
More widely, like Signal, Tox doesn't try to provide metadata protection, its simple DHT would have big problems if a large attacker mounted a Sybil attack, and it isn't as deliberately opaque on-the-wire as my protocols are. It might be more reasonable right now, but I'm focused on designing a strong protocol for the future, not just the present. Sometimes bits of my research filter through into more practical present-day systems.
>>51685815
Skype's... basically just MSN now. I did my fair share of reversing it back in the day, and it was disquieting at the time - and it turns out this was before the NSA actually had PRISM. You do not use RC4 like that... in fact, you do not use RC4, thank-you-very-much.
>>51686749
>It needs a phone
>>51685654
>depends on gapps
>>51685184
Google's got nothing you.
Hello CH23
>>51686815
What the fuck is your point?
An IM should not require a phone. That's just stupid.
>>51686890
My point is that you don't require a phone.
>no none even mentions textsecure which is on fdroid and doesn't need your phone number
but i already use mcabber with OTR perfect forward secrecy on my self hosted jabber server.
Just need some friends now. Any day. Any day now.
>>51687018
>GnuTLS
>XMPP
>OTR
Good anon, you'll find some.
>>51687009
>TextSecure
That's Signal now.
>No phone number
PGP.
>>51687177
Yeah meant Chatsecure, it's on the guardian project repo
>>51687266
Ah, I'm aware. You'd do well not to confuse them though. They're hardly the same, as I'm sure you know.
>>51687006
>you don't require a phone.
With a shitty "IM" like Signal/Telegram, you do.
>>51687297
These are not your only options, as I've already told you, anon.
>>51681249
this
>>51687297
Just pick any OTR IM application, cry baby.
>>51681442
it's cracked :)
>>51687292
Yeah always get the names mixed up for a reason, chatsecure is pretty nice together with torbot or the i2p app. Google will still creep on you but small state adversaries won't have it easy.
![20151204235926[1].png](https://i.imgur.com/2tDKaTF.png "20151204235926[1].png")
My phone have build in support for XMPP, so why I should use something else?
>implying I have friends who would IM me
Ha! Silly baka gaijin this must be your first day on 4chins
>>51681016
Sorry OP, it seems you uploaded the wrong logo. Here you go.
People was confused that you were talking about Telegram instead of Signal.
>>51687604
is that sailfish?
>>51685739
You don't have to trust him, since the crypto is open and verified to be secure by pretty much everyone who knows their shit. Unlike telegram.
