Re:Show HN: Watch strangers talk on Omegle with a MitM attack
by vilhelm_s on Thursday August 06, 2015 @07:40PM
(#10020174)
I guess actually using this program would be blatantly illegal. But it's an interesting problem--how to defend against this? One way is to compute a fingerprint of the Diffie-Hellman shared secret, and then have the chat participants vocally compare it (I think one of the "secure chat" programs do this?). That should be secure as long as the attacker can not imitate voices, but it's rather heavy-handed.
[ Parent
| on HN ]
Re:Show HN: Watch strangers talk on Omegle with a MitM attack
by StavrosK on Friday August 07, 2015 @03:24PM
(#10024445)
What you describe is standard ZRTP. You don't really have to imitate voices if it's someone the participants have never ever seen before, but you do have to get the lipsync right. Does Omegle have sound?
Re:Show HN: Watch strangers talk on Omegle with a MitM attack
by unimpressive on Thursday August 06, 2015 @10:49PM
(#10020718)
>That should be secure as long as the attacker can not imitate voices,
EDIT: Messed up reading. I think the major problem with this idea is that it makes the barrier to entry for using omegle much higher, suddenly you need a microphone.
Original post below the cut:
---
They can.
Re:Show HN: Watch strangers talk on Omegle with a MitM attack
by vilhelm_s on Thursday August 06, 2015 @10:54PM
(#10020725)
Hm, did you paste the right URLs? I don't see how they are related to this thread.
Re:Show HN: Watch strangers talk on Omegle with a MitM attack
by unimpressive on Thursday August 06, 2015 @10:55PM
(#10020728)
They seem to point to the right place on my computer. The first should be a post I made about how this works, in the second somebody talks about doing it and how he could imitate peoples voices.
EDIT: OHHH, vocally. I did a misread ignore me.