News for hackers. Stuff that matters.
Re:DuckDuckGo just launched a DDG branded XMPP service by drdaeman on Friday May 13, 2011 @10:01AM (#2544629)
I'm using OTR, but only for conversations that are worth protecting. IMHO securing typical chat with friends (mostly consisting of funny/interesting link exchanges) is almost pointless.

But having the history is still useful ("remember that article I've sent you yesterday").

Re:DuckDuckGo just launched a DDG branded XMPP service by mike-cardwell on Friday May 13, 2011 @10:12AM (#2544671)
Not as pointless as most people intuitively think. What if the chat server you're using is compromised by a hacker trying to make a name for themselves and they publish all of the chat logs on bittorrent?

Some examples of comments in a private chat that might at first appear like they don't need encrypting, but might come back and bite you in the arse if they ever get published:

"God work is boring today. Need to update my CV/Resume"

"Bob was a bit of an idiot last night wasn't he"

"Thinking of skiving off work tomorrow."

"The wife has been nagging at me all afternoon. Fancy a pint later?"

Re:DuckDuckGo just launched a DDG branded XMPP service by mnutt on Friday May 13, 2011 @04:07PM (#2545980)
Depending on how secure you want to be, the existence of encrypted/non-encrypted information reveals things as well. Someone could infer something by just knowing that you turned on OTR at a certain time.