Silk Road forums

Discussion => Security => Topic started by: thelorax on December 05, 2012, 08:35 am

Title: cryptocat!? anyone use this?
Post by: thelorax on December 05, 2012, 08:35 am
anyone use this? safe?
just realized u can use it on tor.. and wondering if any of you guys use it as well..

let me know plus karma for anyone commenting
Title: Re: cryptocat!? anyone use this?
Post by: SelfSovereignty on December 05, 2012, 08:38 am
Um, can you be more detailed?
Title: Re: cryptocat!? anyone use this?
Post by: thelorax on December 05, 2012, 09:08 am
about what? im just wondering if anyone is using this to communicate on tor
is it safe as in does it hide ur identity well enough.. is there any bugs.. is there a problem with it?
do u think its ok to use for people to communicate about selling crack and heroin?
Title: Re: cryptocat!? anyone use this?
Post by: SelfSovereignty on December 05, 2012, 09:33 am
... Um, I don't know.  I'm going to say no.  I wouldn't touch it, personally, but I'm a little more cautious than most I think.  Maybe it'll work fine.  Maybe it won't.  I really don't recommend it though.
Title: Re: cryptocat!? anyone use this?
Post by: Shroomeister on December 05, 2012, 09:54 am
I have used it for non SR related nonsense.

There are a few "issues" if you are thinking about having fully anon conversation with it.

#1 Note it doesn't not say "anon" anywhere. It only says "encrypted". This is to say that your location (via IP) could be deduced.
#2 you could push your browser through a proxy (AKA Tor) and then your location would technically be obfuscated.
#3 Its browser based (at least it was...) That is way too limiting to me.
#4 is it java script? If so all the usual "Tor be-careful" rules apply. It could leak your real IP address/ location.
#5 Why not use "Torchat"?

...its a client that gives you all the benefits of Tor with the ability to IM.

I offer Torchat to my customers. I have my Torchat "ID" on my vendor profile....in case you need a friend.  ;)
Title: Re: cryptocat!? anyone use this?
Post by: tdk on December 05, 2012, 01:55 pm
Well there are two points.
1. Contents. You have no idea if Cryptocat is not currently controlled by FBI or whatever. Public key of the other side can be fake. So never share any personal info through it. When 3rdparty with its remote servers involved, there would always be a risk.
2. Anonymousity. Cryptocat does not hide the connection fact itself, so use it behind i2p/tor layer (xdtfje3c46d2dnjd.onion) only.

btw, as Shroomeister said, torchat is much safer, IMHO.
Title: Re: cryptocat!? anyone use this?
Post by: thelorax on December 05, 2012, 02:06 pm
thanks +1 for yall
Title: Re: cryptocat!? anyone use this?
Post by: Shroomeister on December 05, 2012, 03:12 pm
My Pleasure.
Title: Re: cryptocat!? anyone use this?
Post by: Xe on December 05, 2012, 08:17 pm
Cryptocat is a stylish cat. Good as an introduction into cryptoprivacy..