Re:DuckDuckGo just launched a DDG branded XMPP service
by drdaeman on Friday May 13, 2011 @09:28AM
(#2544515)
Yes, but how they're going to access logs when connecting to XMPP service from multiple machines?
[ Parent
| on HN ]
Re:DuckDuckGo just launched a DDG branded XMPP service
by mike-cardwell on Friday May 13, 2011 @09:34AM
(#2544530)
By checking the logs on the machine the logs are on.
Besides, anyone who is tech savvy enough to mess with public key encryption is going to be using OTR anyway, making server side logs useless.
Re:DuckDuckGo just launched a DDG branded XMPP service
by drdaeman on Friday May 13, 2011 @10:01AM
(#2544629)
I'm using OTR, but only for conversations that are worth protecting. IMHO securing typical chat with friends (mostly consisting of funny/interesting link exchanges) is almost pointless.
But having the history is still useful ("remember that article I've sent you yesterday").
Re:DuckDuckGo just launched a DDG branded XMPP service
by mike-cardwell on Friday May 13, 2011 @10:12AM
(#2544671)
Not as pointless as most people intuitively think. What if the chat server you're using is compromised by a hacker trying to make a name for themselves and they publish all of the chat logs on bittorrent?
Some examples of comments in a private chat that might at first appear like they don't need encrypting, but might come back and bite you in the arse if they ever get published:
"God work is boring today. Need to update my CV/Resume"
"Bob was a bit of an idiot last night wasn't he"
"Thinking of skiving off work tomorrow."
"The wife has been nagging at me all afternoon. Fancy a pint later?"
Re:DuckDuckGo just launched a DDG branded XMPP service
by mnutt on Friday May 13, 2011 @04:07PM
(#2545980)
Depending on how secure you want to be, the existence of encrypted/non-encrypted information reveals things as well. Someone could infer something by just knowing that you turned on OTR at a certain time.