'Off-the-Record' Instant Messaging Tutorial (encryption, authentication, deniability, ..)

More information about OTR: http://vforvoluntary.com/otr

Websites:
http://www.cypherpunks.ca/otr/
http://www.jabber.org/
http://pidgin.im/

Wikipedia:
http://en.wikipedia.org/wiki/Off-the-Record_Messaging
http://en.wikipedia.org/wiki/Xmpp
http://en.wikipedia.org/wiki/Pidgin_(software)

--

Music:
Triplexity - Between Light and Shadow (feat. Moving Sand)
http://www.jamendo.com/en/album/16739
(CC BY-NC-SA)

--

off the record messaging otr

Category:

Science & Technology

Tags:

• off
• the
• record
• otr
• instant
• messaging
• im
• tutorial
• encryption
• authentication
• deniability
• jabber
• pidgin
• online
• safety

[mickstarify]

@M1scV1d Yeah you can still use skype, just use OTR on it.I can't find a better alternative for voice/video chat, plus all most of my friends use it. So i use OTR for my sensitive text chats to keep it secure

[M1scV1d]

@mickstarify

Too late to tell that, since Microsoft bought Skype, they made an intercepting tool, that will log everything, while it's still unencrypted, so, bye bye echhi calls..

[mickstarify]

@M1scV1d No!!!! Using TOR with skype is less secure than just using skype. Tor only makes it anonymous, but if your using skype it has your skype IM with the data anyway so it defeats the purpose of anonymity because you sending your identity anyway. Also skype is encrypted P2P by default. However its protocol is closed so im sceptical about its security, thats why we need plugins like OTR to secure the message just in case someones listening in on your chat. Also skype keeps logs

[M1scV1d]

What about Skype+Tor? Or is it better to use Pidgin+Tor+OTR to share private info? I need more info about Q&A system.. if there is no way to meet that person, but we have to authenticate each other, we need to share Q&A info.. where to do it?

[atphalix]

another alternative is to use chat using I2P darknet project, which offer both anonymity and encryption

[MaMuSlol]

Really well done video!

[WorBlux]

@Nielsio Also, Microsoft has taken a patent out on legal intercept tech, so it well be added into skype sooner or later.

[L1661N6]

Man, i have to think you for playing this music, and providing a link to their whole album, and its all on a website that promotes royalty free music. Man im so happy, never knew i could get great music like this for free, thats whats up!

[dromedaryspotter]

OTP offers: [deniability] - after a conversation it is v. hard to prove that it was you who were doing the chatting (because the encryption does not use a key unique to you, but uses a throw away key instead) [perfect forward secrecy] - after the chat the key gets thrown away, so if someone gets control of your computer they cannot find the key and use it to decrypt a 'recording' of the recorded chat

[L1661N6]

Wait, whats the reason behind all this, are you suggesting that we do all this in this video, in order to instant message anonymously, because these im programs originally allow our conversations to be read by anybody wanting to "wiretap" our conversations?