News for hackers. Stuff that matters.

tinfoilhat

Re:Facebook on Thursday February 20, 2014 @01:58AM (#7269337)
> I can't think of any other service with that kind of engagement.

SMS ?

Re:From 0 to Skype in 9 Months on Friday July 12, 2013 @01:53AM (#6031154)
how exactly WebRTC going to solve raised questions regarding privacy ? in light of a fact that, for ICE to operate, you need STUN server and exchange ICE candidates (and SRTP keys) through WebRTC server
Re:Notifications and Usability: Skype on Friday September 14, 2012 @02:44AM (#4520397)
Tools / Options ... / Notifications / Notification Settings
Re:WebRTC is almost here, and it will change the web on Monday August 13, 2012 @11:58PM (#4379328)
from http://www.webrtc.org/running-the-demos#TOC-Demos : Justin Uberti (Chrome-webrtc team member) has sent in a App Engine based 1:1 video calling app. http://apprtc.appspot.com/ source code: http://code.google.com/p/webrtc-samples/source/browse/trunk/...

after source code reading (and chrome dev console output observing) you have to realize: 1. there is need of 'signaling server' 2. session encryption keys are exchanged through that server

yes, anyone could setup their small server and call through it an make sure tls / ssl cert of their server is intact etc. that will not be a case for avg Joe. not to mention tat browser itself will be an attack vector.

first, make yourself familiar with WebRTC. it will require server side signaling. demo by google: http://www.webrtc.org/running-the-demos#TOC-Demos sending srtp session keys over that signaling server sounds interesting
omg, I've just only now realized, my phone company can wiretap all my calls
Re:Bad News: Germany Can Borrow for Free. on Tuesday May 22, 2012 @02:45PM (#4009236)
at least Germany doesn't invade other countries for oil
Re:Chrome supports TCP & UDP sockets on Monday May 14, 2012 @02:33PM (#3972452)
xss + tcp and now udp websockets. match made in heaven.
session key agreement was explained in public security review paper, dated october 2005:

http://www.anagram.com/berson/skyeval.pdf