Tagged Questions

Instant messaging (IM) is a form of communication over the Internet, that offers quick transmission of text-based messages from sender to receiver

learn more… | top users | synonyms

-1
votes
2answers
144 views

Why no one makes a message application like whatsapp using RSA keys?

I'm really new and I may sound like a noob so please forgive me. Since gnupg is avaible for android, why does no one makes an app that encrypts every message using a rsa key and just swap the keys ...
2
votes
1answer
59 views

How to establish a random OTR remote party as a specific individual?

In reading Glenn Greenwald's 2014 book No place to hide, one thing stood out to me as a bit odd. Greenwald details how Edward Snowden was insistent that Greenwald install PGP in order to communicate ...
5
votes
2answers
769 views

Are Telegram secret chats secure assuming MTProto isn't?

For those who don't know: Telegram is a partially open source Whatsapp alternative (Server is closed source) which offers secret chats and normal chats. Secret chats are encrypted with Diffie-Hellman ...
3
votes
3answers
476 views

Asymmetric Key Encryption in Group Chat

I am working on a chat application which supports both single user chat as well as group chat. We planned to encrypt messages in single user chat by public key of receiver and decrypt it using ...
1
vote
0answers
94 views

Instant Messaging End-to-End

I plan to create an application for secure instant messaging, now I don't know whether or not I want to implement the encryption by myself. This project is also mainly for educational purpose so I ...
1
vote
1answer
381 views

Are WhatsApp or Telegram secure enough to use for office communication?

We are thinking about switching from e-mail to instant messaging. Do you think, Apps like WhatsApp or Telegram provide enough security for that?
1
vote
0answers
118 views

Does Diffie-Hellmann (DH) key exchange protocol lower Off-The-Record protocol (OTR) security level?

Off-the-Record protocol employes Diffie-Hellman key exchange protocol (DH). DH protocol does not provide authentication of the communicating parties and, according to many sources, is vulnerable to ...
1
vote
2answers
503 views

Is there any documentation or reviews about LINE messenger security?

I tried to find any documentation about the security of LINE messenger, but I couldn't. Is there any documentation or reviews about the communication protocol it uses, and whether or not it uses ...
27
votes
4answers
28k views

Is Telegram secure?

There is a new WhatsApp-killer application called Telegram. They said that it's open source and that it has a more secure encryption. But they store all the messages in their servers and WhatsApp ...
1
vote
1answer
191 views

xmpp ssl cipher negotiation

Does anyone know how ssl ciphers are nogitiated via the xmpp protocol. When I capture packets, I see: <starttls xmlns='urn:ietf:params:xml:ns:xmpp-tls'/> There is no hello server/client or ...
6
votes
2answers
753 views

How is OTR messaging with Socialist Millionaire Protocol (SMP) protected from Man In The Middle?

So imagine the next situation: Alice wants to initiate OTR instant messaging session with Bob but Joe is Man In The Middle. Alice negotiates a shared secret 'X' with Joe (thinking he is Bob) using ...
9
votes
5answers
13k views

Can Skype chat be protected from snooping? Are there safe alternatives?

I use Skype a lot. With all of my clients, staff, contractors and friends, however, the acquisition by Microsoft worries me, as two of my clients are direct MS competitors, and I often work on long ...
1
vote
0answers
343 views

OTR and/or SecureIM library for C# .NET [closed]

I'm looking for implementations (or even wrappers) for OTR or SecureIM encrypted chat protocols usable from C#. Currently I found none, and considering porting Java OTR library and/or wrapping ...
1
vote
1answer
2k views

How does wireshark detects online-messenger traffic?

I have been working on how to find use of online messenger (e.g imo.im, ebuddy) using wireshark. I'm doing , as i need to build SIEM (security information event management) use-cases which detects ...
1
vote
2answers
126 views

How can I catch an Instant Messenger Identity Thief?

Here is the scheme. The identity thief logs in as my American friend in the instant messaging program QQ. (Did he steal her password or use some other exploit? I don't know.) The thief contact's ...
15
votes
2answers
6k views

The inner workings of iMessage security?

This is a very interesting article about the iMessage technology used in Apple's very popular communication devices. So far, there has not been much technical details released by Apple. Hopefully ...
10
votes
5answers
2k views

Can voice chat be spied?

I wonder if voice chat (via public services like yahoo, google talk, skype, etc) is practically secure? Is it possible for the ISP or any middle point? I do not consider hacking the computers, but ...
5
votes
5answers
1k views

Most Efficient way of Encrypted Chat

I'm creating a server where people can come and talk to each other. I'm mostly doing it for a fun project, here's my question. I'm using RSA for encryption/decryption, so only the clients will know ...
3
votes
1answer
226 views

What project is a good SILC substitute?

As time has marched on, it would appear that the Secure Internet Live Conferencing (SILC) client/toolkit have lost a bit of steam, I can't find any current mailing lists, their website doesn't seem to ...
5
votes
2answers
11k views

Does chatting over Skype expose my IP address?

Is there a way to identify a person's IP address in Skype, when you're chatting with them? Does this depend on their Skype settings? And if you've recorded chat messages, can they lead to the actual ...
2
votes
0answers
165 views

Does OtR require than IM applications remember multiple keys per contact? [closed]

I noticed the Guardian Project has developed a converter to move your off-the-record messaging keys between different IM applications. I'm curious what happens if your using multiple off-the-record ...
1
vote
0answers
149 views

Are there any instant messaging systems that offer resistance to traffic analysis? [closed]

I'm happily using off-the-record messaging now, but I'd enjoy exploring more traffic analysis resistant options? It appears the most visible ones like Tor chat are rather stagnant, or at least don't ...
0
votes
3answers
1k views

Which real time cross-platform chat applications exist with end-to-end encryption?

I am looking for an instant messaging / chat application which can be used securely across different platforms, eg Windows, Linux, BSD! Do any exist?
8
votes
1answer
546 views

What are the main issues and best practice security controls when exposing SIP and H.323 to the Internet?

What are the main issues and recommended controls when exposing SIP and H.323 to the Internet (could be for voice, video, and instant messaging traffic or all three)? Specifically I'm looking for ...
10
votes
5answers
2k views

Is Skype secure enough to transmit passwords?

Is it considered "secure" to send a password in a skype message and delete the message after the recipient remembered the password?
15
votes
7answers
18k views

Which Instant Messaging services use or allow secure protocols, and what do those protocols cover?

We all know there's a myriad of Instant Messaging (IM) services out there. But, which of these services uses or permits protocols that actually secure your communications? For those that do, what ...