Interest Check: XMPP live chat

[Gale]

Hi there,

I would like to start a private XMPP chat server made accessible only through tor. This will give us the ability to chat securely in realtime.


There would be bans for poor OPSEC.

Let me know what you all think

 

[cubesquare]

I both like and dislike this idea.
How would you identify poor opsec?
Chat servers have to have copies of messages stored on them unlike point to point chat clients.
Most users of DN forums etc are used to asynchronous comms.
It would be cool to be able to share a 1time chat link to facilitate an active conversation and then lose all traces of it when its finished.
It would be even cooler to have encryption built into it - zero unencrypted comms...

Would this not be easier standing up a mastodon server?

 

[Gale]

I both like and dislike this idea.
How would you identify poor opsec?
Chat servers have to have copies of messages stored on them unlike point to point chat clients.
Most users of DN forums etc are used to asynchronous comms.
It would be cool to be able to share a 1time chat link to facilitate an active conversation and then lose all traces of it when its finished.
It would be even cooler to have encryption built into it - zero unencrypted comms...

Would this not be easier standing up a mastodon server?

cubesquarePoor opsec meaning people saying things like where they live around or anything that will potential dox them


I ask because some of the highest level vendors around like to use xmpp for communication, I wont mention names. XMPP seemed to be the chat method of choice. I own the server, maybe it would be suitable for an invite only thing / referal

 

[cubesquare]

Poor opsec meaning people saying things like where they live around or anything that will potential dox them


I ask because some of the highest level vendors around like to use xmpp for communication, I wont mention names. XMPP seemed to be the chat method of choice. I own the server, maybe it would be suitable for an invite only thing / referal

GaleCould well be suitable for referral only. That way there will be a level of trust about you passed from one member to another. I, for one, wouldn't join a server that I had zero confidence in and have conversations that could jail me, if there wasn't a trusted party telling me it was safe.

To be fair, I have not done a full security review of XMPP so don't even have a handle on how accessible exploits and holes are.

The big kicker is always - how do people communicate in ways that are easy to get to from burners, with no attention being drawn when the burner gets picked up by LE.