Off-the-Record Messaging ::: Encryption, Authentication, Deniability ::: PGP Based

Discussion in 'Linux, BSD and Other OS's' started by Impotence, Jul 17, 2006.

  1. Impotence

    Impotence May the source be with u!

    Likes Received:
    6
    Trophy Points:
    38
    "Off-the-Record Messaging" Is a plugin for GAIM instant messenger.

    Project Homepage: Off-the-Record Messaging

    What is it?

    Update: Now works with the gaim beta​

    How Do i Install?


    Source Code is available and there are RPM's for Fedora and Mandrake [x86 and x86_64]. Debian Users can install the plugin with apt-get (or compile the source themselves, its a personal choice). There are also Windows Binaries available if anybody cares [:p].

    Code:
    sudo apt-get install gaim-otr
    
    How do I set it up?

    Once the Plugin is installed, Start GAIM and open the Preferences.

    1. Enable the OTR Plugin.
      [​IMG]
    2. Generate The Keys For Your account/s. If You select the "require Private Messaging" option you will not be able to talk to people without the OTR Plugin on that account.
      [​IMG]
    3. Start a conversation with a buddy who has the OTR plugin installed, Click the "OTR: Not Private" Button which has appeared since enabling the plugin.
      [​IMG]
    4. Accept That You have received a unknown Finger Print.
      [​IMG]
    5. The Conversation is now encrypted, but you have not verified your buddy's public key.
      [​IMG]
    6. Open the Preferences Again, select "Off-The-Record Messaging" under plugins. Select your buddy from the list and click "Verify Fingerprint".
      [​IMG]
    7. Call your Buddy and get him to read out his public key, Select "I have" in the menu of the pop-up box that appears if they match.
      [​IMG]
    8. Congratulations, You now have a PGP encrypted Conversation!
      [​IMG]

    [Please not the "using old protocol Version 1" warning was due to an out of date OTR client on a Macintosh Box using Adium]

    But Why??? I Don't have anything to Hide!

    Whoever you are, you have a right to privacy. whether you believe the government is secretly watching you or not, this is worth doing.

    Its Fun, why not! [Well... I had Fun]

    The Government Might not be watching us now, but things are heading that way... Mass Surveillance is a mass breach of privacy. I have no problem with governments monitoring criminals, but i am no criminal. secondly, if Every IM conversation used PGP then a government would only have the resources to monitor those who they suspect, not an entire country.

    Also, If your using somebody else's network (Friends, Works, Airport etc), anybody could be reading your conversation! [The classic story is a nerd with a laptop in a cafe, looking for personality hints on how to approach the women!]

    License

    Off-the-Record Messaging Library has been licensed under version 2.1 of the GNU Lesser General Public License.

    Shoutz
    I would like to thank "pyr0phr34k", He's on the other end of the IM windows in the Images... And would like to apologise to Waffle for rambling on about government conspiracys while writing this at 2am!
     
  2. Addis

    Addis The King

    Likes Received:
    91
    Trophy Points:
    48
    I really couldn't care less about someone knowing what time we arrange to play football. You wouldn't really do anything over IM that was of a sensitive nature. But maybe a useful tool none the less for people whom this concerns.

    Isn't that what its like now? This would also make tracking criminals (if they actually used IM, which any smart organisation wouldn't) even more difficult. Not against PGP though, just me rambling on as well.
     
  3. Tango Down

    Tango Down Geek Trainee

    Likes Received:
    0
    Trophy Points:
    0
    Off-the-Record Messaging ::: Encryption, Authentication, Deniability ::: PGP Base

    I have used a program Called Anon-IM for a while now. IT uses Tor-park onion routers to forward your AIM connection and messages. Be warned however, that alot of communications from known open proxies are banned, and you may have to try several times to get the danm thing to solidly connect. Also it has the PGP plugin.

    P.S.
    Yes, Emacs does suck, but is VIM any better?
    __
    -Goodluck, Godspeed.
     
  4. Anti-Trend

    Anti-Trend Nonconformist Geek

    Likes Received:
    118
    Trophy Points:
    63
    Off-the-Record Messaging ::: Encryption, Authentication, Deniability ::: PGP Base

    Yes, yes it is. Try using both emacs and vim SSH'd over a slow WAN link sometime, you'll see what I mean.
     
  5. Tango Down

    Tango Down Geek Trainee

    Likes Received:
    0
    Trophy Points:
    0
    Off-the-Record Messaging ::: Encryption, Authentication, Deniability ::: PGP Base

    I was simply refering to it's useability. I have used emacs over a slow connection through SSH, and it is tedious. At least Xemacs is, the emacs proper is not that bad unless your on 56K or something. I just don't like VIM, I tried using it a few times but never figured out the command to bring up help.....
    __
    -Goodluck, Godspeed.
     
  6. Anti-Trend

    Anti-Trend Nonconformist Geek

    Likes Received:
    118
    Trophy Points:
    63
    Off-the-Record Messaging ::: Encryption, Authentication, Deniability ::: PGP Base

    Try one of the following:
    Code:
    man vim
    info vim
    vimtutor
    FYI, "man" and "info" are both standard POSIX-UNIX ways of getting info about an installed piece of software. The 'man' command usually is a fairly brief manual, while 'info' is more verbose. Incidentally, vim also comes with a tutorial (vimtutor). VIM's worth learning, since it's light, fast, powerful, and available by default on any real *nix operating system.
     

Share This Page