Meebo (remember them?) was also staying afloat with toolbar installs.
Same with BitTorrent Live...
In the beginning it was all amazing. But we all know we can't have nice things.
Proprietary software is fine for a lot of things, but anything concerning security and privacy absolutely requires the additional transparency and scrutiny offered by open-source.
I guess they are planning to market it to people who are worried about privacy but not tech-savvy enough to be able to understand these fundamental deficiencies of proprietary software, but that just seems really unsavory to me... But then again this is the same company that tried to sneak crypto-mining software as a value added offer to their installers so I can't really say I'm surprised.
http://2014.hackitoergosum.org/bittorrentsync-security-priva...
These concerns were amplified by the difficulty of auditing a closed-source product. Their argument that hashes are one-time secrets and not permanent keys is difficult to validate without access to the source.
Then You'll Love Bittorrent Bleep!
EDIT: I didn't say it was a good mindset. I just think Bittorrent is trying to leverage it's name into new markets, while alienating it's core users and promoters.
Every time a closed source nightmare reoccurs, we can just let newbies find the related open source alternative.
Also, if you don't trust the other to not want to log your conversation, don't send sensitive stuff. But then again people do seem to like snapchat and thelike, so I shouldn't judge too much there maybe.
You can say you make it harder to take screenshots but you cant promise a secure way to prevent people from saving the data you send them. That's unfeasible, its promotion of false security.
They claim to support "all major platforms" then completely skimp out on Linux and BSD.
Bleep isn't open source.
They claim to provide privacy, and their testimonials read:
Software Engineering at it's finest. If you haven't read
the blog post on this app then you need too. Once you see
how it works your gonna want it. Most secure messaging
I've seen yet.
Publish the git repository. Make it run on GNU/Linux and *BSD.
Or get the fuck out and stop making claims you cannot back up.
DDDD i t h TTTTT h i sss
D D ttttt ccc h T h s
D D i t c hhh T hhh i sss
D D i t c h h T h h i s
DDDD i tt ccc h h T h h i sss
BBBB U U L L SSSS H H I TTTTT !
B B U U L L S H H I T !
BBBB U U L L SSSS HHHH I T !
B B U U L L S H H I T
BBBB UUU LLLL LLLL SSSS H H I T !However, I think it's important that they open the source up for this project and even potentially offer the ability for me to install and run my own server. I think until they take those steps, it will be difficult for them to gain any kind of large following.
how do you think one client can find another? i hope you don't think it was a internet wide broadcast... :)
https://www.ftc.gov/news-events/press-releases/2014/05/snapc...
- Doesn't require your mobile phone number to use it
- Not dependant on google services on Android
Downsides:
- Cant beat Textsecures crypto - Not opensource
The last two points make this a no-go for me.
I wouldn't consider it a top 5 priority right now, but I do hope OWS takes into consideration making Signal P2P as well in the future (perhaps with some new technologies that may appear or mature by then).
My own priorities for what I want to see in Signal/Textsecure next:
1) integrated Android app
2) desktop client (ideally web/browser-based, but if that's not too secure, I could live with a native app, too, maybe one that works only through Windows 10's store for the sandbox security and digital signing benefit, as well as for the new auth features)
3) video-chat support
BitTorrent Inc is evidently scrambling to find a way to monetize the core technology having raised money and promised investors it would do that.
They just laid off a %age of their staff, which indicates to me the end of the road might be nearing and Bleep maybe one of the last attempts they have to pull something off.
I love Bram, but IMHO Bit Torrent should return to being a true open source technology developed by the community.
(The cynic in me thinks: Bleep 2 offers many new features, buy Bleep 2 Pro if you communicate with more than 10 contacts.)
1. Bleep
2- Tox
3. Ring (formerly SFLphone, DHT based authentication)Also very little information about how everything works on its website (the technical stuff, especially for security).
Just kidding, we know there are too many exhibits for even Unicode to enumerate.
Their response to using AES IGM? It's along the lines of "yeah this strange mode no one uses has issues but not in the way we use it so whatever. We've got math PhDs, so trust us."
I'm no expert, but I get a really bad feeling about them, since it's the totally wrong attitude to take.
I can't comment on the other arguments, but the client of Telegram is certainly FOSS [1]. Their service being open source is irrelevant, since you couldn't verify it anyway.