Hello to the members of this forum,
Recently someone sold https://qtox.github.io 0-day RCE for windows https://github.com/Zoxcore/qTox_enhanced/issues/6.
It is yet unpatched in the original because qtox development has been stopped. Most users of this forum has been using this instant messenger.
Other tox clients- https://tox.chat/clients.html are unmaintained as well, except few like Toxic (cli client for unix-like system) and aTox for android.
If you look at tox chat https://toktok.ltd core/protocol development itself https://github.com/TokTok/c-toxcore
, the code is forked from original developer and it is yet unaudited which presents heavier security risk. Also there are some development issues due to lack of resources (developers, time and money) and some issues in the protocol itself such as https://github.com/TokTok/c-toxcore/issues/426 and group-chat issues.
Developer said most part of code is needs to be refactored and protocol needs to be rewritten, which is going to take very long time. Anonymity and meta-data resistant is out of scope for this project. However, in modern times government all over the world are outlawing privacy and bringing laws to backdoor clients (China already does). They are already monitoring internet through wires, corelating users and censoring specific protocols, it becomes very important to have anonymity and privacy.
They are already able to indentify your IP regardless of if you use tor network or not. Examples: https://www.team-cymru.com/post/inside-the-icedid-backconnect-protocol, https://www.team-cymru.com/post/inside-the-v1-raccoon-stealer-s-den, https://www.team-cymru.com/post/darth-vidar-the-aesir-strike-back
There are some alternative to tox messenger.
cwtch.im - https://git.openprivacy.ca/cwtch.im, https://news.ycombinator.com/item?id=17692521, https://news.ycombinator.com/item?id=27643171
- The protocol is extension to well-known ricochet.im to support group chat.
- It is p2p like tox but attached with tor network.
- It has been audited.
- Active development, clients available for windows, linux/unix
- It is metadata resistant.
I think it well fits my purpose, and thinking to move to cwtch very soon. please leave your suggestions.
admin
Recently someone sold https://qtox.github.io 0-day RCE for windows https://github.com/Zoxcore/qTox_enhanced/issues/6.
It is yet unpatched in the original because qtox development has been stopped. Most users of this forum has been using this instant messenger.
Other tox clients- https://tox.chat/clients.html are unmaintained as well, except few like Toxic (cli client for unix-like system) and aTox for android.
If you look at tox chat https://toktok.ltd core/protocol development itself https://github.com/TokTok/c-toxcore
, the code is forked from original developer and it is yet unaudited which presents heavier security risk. Also there are some development issues due to lack of resources (developers, time and money) and some issues in the protocol itself such as https://github.com/TokTok/c-toxcore/issues/426 and group-chat issues.
Developer said most part of code is needs to be refactored and protocol needs to be rewritten, which is going to take very long time. Anonymity and meta-data resistant is out of scope for this project. However, in modern times government all over the world are outlawing privacy and bringing laws to backdoor clients (China already does). They are already monitoring internet through wires, corelating users and censoring specific protocols, it becomes very important to have anonymity and privacy.
They are already able to indentify your IP regardless of if you use tor network or not. Examples: https://www.team-cymru.com/post/inside-the-icedid-backconnect-protocol, https://www.team-cymru.com/post/inside-the-v1-raccoon-stealer-s-den, https://www.team-cymru.com/post/darth-vidar-the-aesir-strike-back
There are some alternative to tox messenger.
cwtch.im - https://git.openprivacy.ca/cwtch.im, https://news.ycombinator.com/item?id=17692521, https://news.ycombinator.com/item?id=27643171
- The protocol is extension to well-known ricochet.im to support group chat.
- It is p2p like tox but attached with tor network.
- It has been audited.
- Active development, clients available for windows, linux/unix
- It is metadata resistant.
I think it well fits my purpose, and thinking to move to cwtch very soon. please leave your suggestions.
admin
Последнее редактирование: