Re: [tor-talk] pidgin and tor

2015-10-12 Thread coderman
On 10/12/15, sh-expires-12-2...@quantentunnel.de wrote: > ... > Thats what you fail to grasp, imho. i appreciate education in all forms :) > I am not sure, what "rogue remote execution" is, please elaborate. > Sounds like an assassin sniper to me. ;) i should have been more clear. specifical

Re: [tor-talk] pidgin and tor

2015-10-12 Thread sh-expires-12-2...@quantentunnel.de
On Thu, Oct 08, 2015 at 07:53:02PM -0700, coderman wrote: > "security vs. usability", as ever... Thats not what the discussion is about any longer, the discussion is about security and convenience. Thats what you fail to grasp, imho. > consider the Tor Browser PDF exploit that accessed $HOME for

Re: [tor-talk] pidgin and tor

2015-10-08 Thread coderman
On 10/8/15, sh-expires-12-2...@quantentunnel.de wrote: > > One of the major problems is the design of Pidign, which tries > to build a convenient IM client before it takes security into > consideration "security vs. usability", as ever... > Still, it is possible to a achieve a high degree

Re: [tor-talk] pidgin and tor

2015-10-08 Thread sh-expires-12-2...@quantentunnel.de
On Mon, Oct 05, 2015 at 04:00:36PM -0700, coderman wrote: > the primary problem with Pidgin is libpurple [ > https://pidgin.im/news/security/ ] and a more appropriate mitigation > would be Qubes isolation, perhaps Whonix-Qubes on new 3.0. :) One of the major problems is the design of Pidign, which

Re: [tor-talk] pidgin and tor

2015-10-06 Thread aka
Malte wrote: > On Monday 28 September 2015 21:51 mtsio wrote: >> Hello everyone, >> >> Is it safe to use pidgin over tor? > > As an alternative there is https://dist.torproject.org/tormessenger/0.1.0b1/ > > I could not find a release annoncement for the beta but the "don't use it > except for te

Re: [tor-talk] pidgin and tor

2015-10-06 Thread Malte
On Monday 28 September 2015 21:51 mtsio wrote: > Hello everyone, > > Is it safe to use pidgin over tor? As an alternative there is https://dist.torproject.org/tormessenger/0.1.0b1/ I could not find a release annoncement for the beta but the "don't use it except for testing purposes" disclaimer

Re: [tor-talk] pidgin and tor

2015-10-05 Thread coderman
On 9/29/15, Tempest wrote: > ... > another option to consider is whonix. https://whonix.org. it's a good > mitigation platform against potentially leaky aps. the primary problem with Pidgin is libpurple [ https://pidgin.im/news/security/ ] and a more appropriate mitigation would be Qubes isolatio

Re: [tor-talk] pidgin and tor

2015-09-29 Thread Tempest
k...@jondos.de: > You have to compile Pidgin by self without "libjingle", because the > Interactive Connectivity Establishment (ICE) of "libjingle" will breakout > the proxy in case of a audio or video call. > > A small tutorial to compile a Tor-save Pidgin for Linux (only in German): > https://

Re: [tor-talk] pidgin and tor

2015-09-29 Thread sh-expires-12-2...@quantentunnel.de
On Mon, Sep 28, 2015 at 09:51:30PM +, mtsio wrote: > Is it safe to use pidgin over tor? It depends on which protocols you use, since pidgin is a mulitprotocol instant messaging client and behaves quite different depending on protocols used/involved. With Tor, TLS[1], XMPP[2] and OTR[3] it get

Re: [tor-talk] pidgin and tor

2015-09-29 Thread aka
Pidgin on Windows by default isn't compiled with libjingle support. k...@jondos.de wrote: > Hi, > >> Is it safe to use pidgin over tor? > > You have to compile Pidgin by self without "libjingle", because the > Interactive Connectivity Establishment (ICE) of "libjingle" will breakout > the proxy

Re: [tor-talk] pidgin and tor

2015-09-29 Thread kn
Hi, > Is it safe to use pidgin over tor? You have to compile Pidgin by self without "libjingle", because the Interactive Connectivity Establishment (ICE) of "libjingle" will breakout the proxy in case of a audio or video call. A small tutorial to compile a Tor-save Pidgin for Linux (only in Ger

Re: [tor-talk] pidgin and tor

2015-09-29 Thread sajolida
mtsio: > Is it safe to use pidgin over tor? Some people are concerned about the quality of the Pidgin code base but we've been using Pidgin in Tails for ages as we don't yet have a better alternative. -- tor-talk mailing list - tor-talk@lists.torproject.org To unsubscribe or change other settings

[tor-talk] pidgin and tor

2015-09-28 Thread mtsio
Hello everyone, Is it safe to use pidgin over tor? -- tor-talk mailing list - tor-talk@lists.torproject.org To unsubscribe or change other settings go to https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk