2011-02-11

Pirate Software, week 6: Pidgin + OTR

I was never into IRC for direct chat in the early days of the net. For me the whole concept started with ICQ in 1996, and then with Yahoo Messenger in 1999. These products used proprietary protocols for communication, and were never secure. They also quickly became bloatware and painful to use since they tried to expand into being much more than "lowly" chat.

But chat will never go away, as we value direct conversations. Today many people mostly use Skype for chat, which is a bad idea for many reasons:
  1. It doesn't use an open protocol, so it is very hard, almost impossible, to put Skype to use except through the official Skype client.
  2. Your messages aren't encrypted between you and your chat partner, so your conversation can (and in some cases probably is) monitored. Remember that Skype offers phone calls to normal phones, and to be allowed to connect with the public phone system, they have to comply with lots of government regulation, of which machinery for wire-tapping by police is one.
  3. It isn't open source, so it is unclear how things works.
  4. Also Skype has become bloatware.
A very good alternative is Pidgin, which is an open source chat client with which you can connect to IRC, ICQ, Yahoo Messenger, the open protocol XMPP and many many more. It works with Windows, Mac and many versions of Linux.

Plus it supports OTR, which is an easy to install plugin that offers (quoting directly from the website):
  • Encryption - No one else can read your instant messages.
  • Authentication - You are assured the correspondent is who you think it is.
  • Deniability - The messages you send do not have digital signatures that are checkable by a third party. Anyone can forge messages after a conversation to make them look like they came from you. However, during a conversation, your correspondent is assured the messages he sees are authentic and unmodified.
  • Perfect forward secrecy - If you lose control of your private keys, no previous conversation is compromised.
So, install Pidgin and OTR and see if it works well for you. You can try out OTR with me if you like. My ICQ id is 309394, and my Yahoo id is mats_henricson.

If you are curious about chat in general, EFF has a very good page.

5 comments:

  1. You might want to check out this software, for untraceable digital cash:

    WHAT IS 'Open Transactions' ?

    It's a solid, easy-to-use, FINANCIAL CRYPTO and DIGITAL CASH LIBRARY.
    Including an operational API, SERVER and CLIENT.

    Diagrams:
    Architecture Overview: http://opentransact.nevermeta.com/OT%20Diagram.jpg
    Fully-Anonymous (cash only): http://opentransact.nevermeta.com/OT-Anon-CashOnly.jpg
    Pseudo-Anonymous (using accounts): http://opentransact.nevermeta.com/OT-Pseudonym-Instruments.jpg

    Featuring:
    -- Untraceable Digital Cash (real blinded tokens)
    -- Anyone An Issuer (Ricardian-style Contracts)
    -- Bearer-only, Fully-Anonymous (when used cash-only)
    -- Pseudonymous User Accounts (user account == PGP key)
    -- No Account History (asset account == the last receipt)
    -- Many Financial Instruments (cheques, cash, vouchers, invoices...)
    -- Basket Currencies (10 "baskets" == 5 gold, 3 silver)
    -- Markets with Trades (stop, fill-or-kill, limit orders...)
    -- Payment Plans
    -- Native API for Java, Ruby, Python, PHP, Perl, C,
    C++, Objective-C, C#, Tcl, and LISP
    -- XmlRpc/HTTP transport layer (build option)
    -- Soon: Stocks that pay dividends, Bonds that pay interest,
    and even Collateralized Debt Obligations.
    -- Soon: 2-D Barcodes to make possible 'Any screen a cash
    register' and 'Any camera phone a customer.'

    Please see the Project page:
    http://github.com/FellowTraveler/Open-Transactions/wiki

    Use Cases:
    http://github.com/FellowTraveler/Open-Transactions/wiki/Use-Cases

    FAQ:
    http://github.com/FellowTraveler/Open-Transactions/wiki/FAQ

    Business Cases:
    http://github.com/FellowTraveler/Open-Transactions/wiki/Business-Cases

    Release Notes:
    http://github.com/FellowTraveler/Open-Transactions/wiki/Release-Notes


    "Seeking developers to contribute by writing client software and
    doing other integrations! I will support you on the OT API. Let's
    make this happen!" -Fellow Traveler

    ReplyDelete
  2. this one is very impressive plus instructive software development group

    ReplyDelete
  3. This is the precise weblog for anybody who needs to seek out out about this topic. You notice so much its almost arduous to argue with you. You positively put a brand new spin on a subject that's been written about for years. Nice stuff, simply nice!

    ReplyDelete
  4. Hey keep posting such good and meaningful articles.

    ReplyDelete
  5. Hi, Really great effort. Everyone must read this article. Thanks for sharing.

    ReplyDelete