Full Disclosure mailing list archives

Re: [tool] tc - anonymous and cyphered chat over Tor circuits in PGP


From: bo0od via Fulldisclosure <fulldisclosure () seclists org>
Date: Sat, 8 Jul 2023 11:18:00 +0000

I didnt see worst than this app to use for anonymity like this one:

- PGP is old bad stuff:

https://www.kicksecure.com/wiki/OpenPGP#Issues_with_PGP

- RSA/DSA old as well and has tons of security issues like side channel and timing attacks..etc (the researches about them everywhere)

use Post-Quantum cryptography or at least ECC.

- C code is again old and insecure (memory issues..etc), should be replaced with Rust

so yeah nice idea but trash work.

Alternatively the concept already exist check Ricochet v2 (Ricochet Refresh):

https://www.ricochetrefresh.net/

Thx!

0xf--- via Fulldisclosure:

Hello,

tc is a low-tech free software to chat anonymously and cyphered over
Tor circuits in PGP. Use it to protected your communication end-to-end
with RSA/DSA encryption and keep yourself anonymously reachable by
anyone who only know your .onion address and your public key. All this
and more in 2400 lines of C code that compile and run on BSD and Linux
systems with an IRC like GUI.

It's a minimal, easy to customize unix tool that I write to overcome
control, voyeurism and censorship avoiding platforms, logging and data
retention.

site: r4f5fajp2oiuhjqyass3nogu55sivxnc42fnwankiynf6o5jpno6exad.onion/tc.html
mirror: https://packetstormsecurity.com/files/172562/tc-Tor-Chat-Client.html

Good night and good luck,
f.
_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: https://seclists.org/fulldisclosure/

Attachment: OpenPGP_0xED4E3C19ACA54DD4.asc
Description: OpenPGP public key

Attachment: OpenPGP_signature
Description: OpenPGP digital signature

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: https://seclists.org/fulldisclosure/

Current thread: