Hackers Build a Skype That’s Not Controlled by Microsoft

Re:Hackers Build a Skype That’s Not Controlled by Microsoft by sitkack on Monday September 01, 2014 @02:10PM (#8254042)

This is on the same level of security as OpenSSL and CryptoCat.

[ Parent | on HN ]

Re:Hackers Build a Skype That’s Not Controlled by Microsoft by makomk on Monday September 01, 2014 @02:32PM (#8254133)

The crypto appears to be fairly standard - it uses NaCl's crypto_box to encrypt and decrypt almost everything, with a per-session keypair authenticated by the user's long-term key. Code quality is a bit OpenSSL-esque though.

[ Parent | on HN ]

Re:Hackers Build a Skype That’s Not Controlled by Microsoft by kachnuv_ocasek on Monday September 01, 2014 @02:25PM (#8254103)

And, in fact, as any other piece of software.

[ Parent | on HN ]

Re:Hackers Build a Skype That’s Not Controlled by Microsoft by lawnchair_larry on Monday September 01, 2014 @06:32PM (#8254959)

Nothing about what you just said makes sense.

[ Parent | on HN ]

Re:Hackers Build a Skype That’s Not Controlled by Microsoft by TehCorwiz on Monday September 01, 2014 @02:26PM (#8254105)

How so?

[ Parent | on HN ]

Re:Hackers Build a Skype That’s Not Controlled by Microsoft by matt4711 on Monday September 01, 2014 @08:15PM (#8255178)

I think he is probably referring to these discussions:

- https://github.com/irungentoo/toxcore/issues/121

- https://github.com/irungentoo/toxcore/issues/578

where the devs are quite defensive about their choices to (1) reinvent the wheel (2) use technologies that are (according to the comments) not secure (3) not audit their proposed crypto/security architecture by experts.

[ Parent | on HN ]