From paul at xelerance.com  Tue Jul  1 11:42:45 2008
From: paul at xelerance.com (Paul Wouters)
Date: Tue, 1 Jul 2008 11:42:45 -0400 (EDT)
Subject: [OTR-users] Re: [OTR-announce] pidgin-otr 3.2.0 released
In-Reply-To: <20080628081204.6fde42eb@peterson.fenrir.org.uk>
References: <20080615211439.GA11298@yoink.cs.uwaterloo.ca>
 <20080619230925.278f9650@peterson.fenrir.org.uk>
 <Pine.LNX.4.64.0806192325280.2393@newtla.xelerance.com>
 <200806201539.28397.konrad@tylerc.org> <alpine.LFD.1.10.0806201934040.14681@newtla.xelerance.com>
 <20080628081204.6fde42eb@peterson.fenrir.org.uk>
Message-ID: <Pine.LNX.4.64.0807011138090.12406@newtla.xelerance.com>

On Sat, 28 Jun 2008, Brian Morrison wrote:

> So far I've not seen any updates to either libotr or pidgin-otr make it
> through into any of the Fedora repos. I've not upgraded my F7 box to
> F9, but still nothing.
> 
> Any ideas what's happening Paul?

It's all pending. It's a bit silly. libotr cannot be used to build pidgin-otr
until it is in stable. It is now in testing waiting to be pushed into
stable. Only then is it available on the build system to used by pidgin-otr
for me to build into devel, testing then stable.

Paul


From bdm at fenrir.org.uk  Tue Jul  1 14:51:39 2008
From: bdm at fenrir.org.uk (Brian Morrison)
Date: Tue, 1 Jul 2008 19:51:39 +0100
Subject: [OTR-users] Re: [OTR-announce] pidgin-otr 3.2.0 released
In-Reply-To: <Pine.LNX.4.64.0807011138090.12406@newtla.xelerance.com>
References: <20080615211439.GA11298@yoink.cs.uwaterloo.ca>
	<20080619230925.278f9650@peterson.fenrir.org.uk>
	<Pine.LNX.4.64.0806192325280.2393@newtla.xelerance.com>
	<200806201539.28397.konrad@tylerc.org>
	<alpine.LFD.1.10.0806201934040.14681@newtla.xelerance.com>
	<20080628081204.6fde42eb@peterson.fenrir.org.uk>
	<Pine.LNX.4.64.0807011138090.12406@newtla.xelerance.com>
Message-ID: <20080701195139.6bbe670e@peterson.fenrir.org.uk>

On Tue, 1 Jul 2008 11:42:45 -0400 (EDT)
Paul Wouters <paul at xelerance.com> wrote:

> On Sat, 28 Jun 2008, Brian Morrison wrote:
> 
> > So far I've not seen any updates to either libotr or pidgin-otr make it
> > through into any of the Fedora repos. I've not upgraded my F7 box to
> > F9, but still nothing.
> > 
> > Any ideas what's happening Paul?
> 
> It's all pending. It's a bit silly. libotr cannot be used to build pidgin-otr
> until it is in stable. It is now in testing waiting to be pushed into
> stable. Only then is it available on the build system to used by pidgin-otr
> for me to build into devel, testing then stable.

I've just had a look and I can't see any libotr packages in
updates-testing for Fedora 9. I did notice on Koji that you had
packages for F7 and F10 only, is that intentional?

-- 

Brian Morrison

bdm at fenrir dot org dot uk

   "Arguing with an engineer is like wrestling with a pig in the mud;
    after a while you realize you are muddy and the pig is enjoying it."
    
GnuPG key ID DE32E5C5 - http://wwwkeys.uk.pgp.net/pgpnet/wwwkeys.html


From bdm at fenrir.org.uk  Wed Jul  2 04:12:22 2008
From: bdm at fenrir.org.uk (Brian Morrison)
Date: Wed, 2 Jul 2008 09:12:22 +0100
Subject: [OTR-users] Re: [OTR-announce] pidgin-otr 3.2.0 released
In-Reply-To: <20080701195139.6bbe670e@peterson.fenrir.org.uk>
References: <20080615211439.GA11298@yoink.cs.uwaterloo.ca>
	<20080619230925.278f9650@peterson.fenrir.org.uk>
	<Pine.LNX.4.64.0806192325280.2393@newtla.xelerance.com>
	<200806201539.28397.konrad@tylerc.org>
	<alpine.LFD.1.10.0806201934040.14681@newtla.xelerance.com>
	<20080628081204.6fde42eb@peterson.fenrir.org.uk>
	<Pine.LNX.4.64.0807011138090.12406@newtla.xelerance.com>
	<20080701195139.6bbe670e@peterson.fenrir.org.uk>
Message-ID: <20080702091222.052d6697@peterson.fenrir.org.uk>

On Tue, 1 Jul 2008 19:51:39 +0100
Brian Morrison <bdm at fenrir.org.uk> wrote:

> > It's all pending. It's a bit silly. libotr cannot be used to build pidgin-otr
> > until it is in stable. It is now in testing waiting to be pushed into
> > stable. Only then is it available on the build system to used by pidgin-otr
> > for me to build into devel, testing then stable.
> 
> I've just had a look and I can't see any libotr packages in
> updates-testing for Fedora 9. I did notice on Koji that you had
> packages for F7 and F10 only, is that intentional?
> 

And just to confound the system, an update to libotr-3.2.0 has appeared
in Fedora 9 updates this morning, despite it not having been in
updates-testing at all as far as I can tell.

Very puzzling!

-- 

Brian Morrison

bdm at fenrir dot org dot uk

   "Arguing with an engineer is like wrestling with a pig in the mud;
    after a while you realize you are muddy and the pig is enjoying it."
    
GnuPG key ID DE32E5C5 - http://wwwkeys.uk.pgp.net/pgpnet/wwwkeys.html


From paul at cypherpunks.ca  Fri Jul  4 15:02:21 2008
From: paul at cypherpunks.ca (Paul Wouters)
Date: Fri, 4 Jul 2008 15:02:21 -0400 (EDT)
Subject: [OTR-users] Re: [OTR-announce] pidgin-otr 3.2.0 released
In-Reply-To: <20080702091222.052d6697@peterson.fenrir.org.uk>
References: <20080615211439.GA11298@yoink.cs.uwaterloo.ca> <20080619230925.278f9650@peterson.fenrir.org.uk> <Pine.LNX.4.64.0806192325280.2393@newtla.xelerance.com> <200806201539.28397.konrad@tylerc.org> <alpine.LFD.1.10.0806201934040.14681@newtla.xelerance.com>
 <20080628081204.6fde42eb@peterson.fenrir.org.uk> <Pine.LNX.4.64.0807011138090.12406@newtla.xelerance.com> <20080701195139.6bbe670e@peterson.fenrir.org.uk> <20080702091222.052d6697@peterson.fenrir.org.uk>
Message-ID: <alpine.LFD.1.10.0807041501160.14286@newtla.xelerance.com>

> And just to confound the system, an update to libotr-3.2.0 has appeared
> in Fedora 9 updates this morning, despite it not having been in
> updates-testing at all as far as I can tell.

Fedora 8,9 and devel should all have libotr and pidgin-otr 3.2.0 versions now.
FC-7 has libotr 3.2.0 but not pidgin-otr 3.2.0. Nothing I can do about that :(

Paul


From scott.dexter at gmail.com  Tue Jul  8 11:41:58 2008
From: scott.dexter at gmail.com (Scott Dexter)
Date: Tue, 8 Jul 2008 11:41:58 -0400
Subject: [OTR-users] OTR Proxy and OS X
Message-ID: <123ff14a0807080841nb9de459tf537ade908baee92@mail.gmail.com>

Anyone else getting errors with OTR Proxy on OS X.  It was working up until
the most recent update from Apple.

Process:         OTR Proxy [262]
Path:            /Applications/OTR Proxy.app/Contents/MacOS/OTR Proxy
Identifier:      OTR Proxy
Version:         ??? (???)
Code Type:       PPC (Translated)
Parent Process:  launchd [162]

Date/Time:       2008-07-08 11:40:08.110 -0400
OS Version:      Mac OS X 10.5.4 (9E17)
Report Version:  6

Exception Type:  EXC_BAD_ACCESS (SIGSEGV)
Exception Codes: KERN_INVALID_ADDRESS at 0x000000000794fe71
Crashed Thread:  0

Thread 0 Crashed:
0   ???                           0x812a7312 0 + 2167042834
1   ???                           0xbfffd100 0 + 3221213440
2   ???                           0x1019207d 0 + 270082173

Thread 1:
0   ???                           0x800bc4a6 0 + 2148254886
1   ???                           0x800c3c9c 0 + 2148285596
2   translate                     0xb818b6ea CallPPCFunctionAtAddressInt +
202886
3   ???                           0x800ed6f5 0 + 2148456181
4   ???                           0x800ed5b2 0 + 2148455858

Thread 0 crashed with X86 Thread State (32-bit):
  eax: 0x0794fe6d  ebx: 0xbfffd100  ecx: 0x00000000  edx: 0x00000004
  edi: 0xb81d8794  esi: 0xb81d8770  ebp: 0x8080d180  esp: 0xb7fffacc
   ss: 0x0000001f  efl: 0x00010213  eip: 0x812a7312   cs: 0x00000017
   ds: 0x0000001f   es: 0x0000001f   fs: 0x00000000   gs: 0x00000037
  cr2: 0x0794fe71

Binary Images:
0xb8000000 - 0xb81d7fe7  translate ??? (???) /usr/libexec/oah/translate

Translated Code Information:
Rosetta Version:  21.03
Args:   /Applications/OTR Proxy.app/Contents/MacOS/OTR Proxy -psn_0_159783
Exception: EXC_BAD_ACCESS (0x0001)

Thread 0: Crashed (0xb7fffacc, 0x812a7312)
0x96a80550: /usr/lib/libSystem.B.dylib : _malloc_zone_malloc + 116
0x96d3e580: /usr/lib/libobjc.A.dylib : __class_hasLoadMethod + 44
0x96d43638: /usr/lib/libobjc.A.dylib : __read_images + 468
0x96d386ac: /usr/lib/libobjc.A.dylib : _map_images + 5268
0x8fc04358: /usr/lib/dyld : dyld::notifyBatchPartial(dyld_image_states,
bool, char const* (*)(dyld_image_states, unsigned int, dyld_image_info
const*)) + 944
0x8fc04da4: /usr/lib/dyld :
dyld::registerImageStateBatchChangeHandler(dyld_image_states, char const*
(*)(dyld_image_states, unsigned int, dyld_image_info const*)) + 600
0x96a86cd4: /usr/lib/libSystem.B.dylib :
_dyld_register_image_state_change_handler + 104
0x96d367bc: /usr/lib/libobjc.A.dylib : __objc_init + 56
0x8fc1376c: /usr/lib/dyld :
ImageLoaderMachO::doModInitFunctions(ImageLoader::LinkContext const&) + 256
0x8fc0f180: /usr/lib/dyld :
ImageLoader::recursiveInitialization(ImageLoader::LinkContext const&,
unsigned int) + 388
0x8fc0f0d0: /usr/lib/dyld :
ImageLoader::recursiveInitialization(ImageLoader::LinkContext const&,
unsigned int) + 212
0x8fc0f0d0: /usr/lib/dyld :
ImageLoader::recursiveInitialization(ImageLoader::LinkContext const&,
unsigned int) + 212
0x8fc0f0d0: /usr/lib/dyld :
ImageLoader::recursiveInitialization(ImageLoader::LinkContext const&,
unsigned int) + 212
0x8fc0f0d0: /usr/lib/dyld :
ImageLoader::recursiveInitialization(ImageLoader::LinkContext const&,
unsigned int) + 212
0x8fc0f0d0: /usr/lib/dyld :
ImageLoader::recursiveInitialization(ImageLoader::LinkContext const&,
unsigned int) + 212
0x8fc0f0d0: /usr/lib/dyld :
ImageLoader::recursiveInitialization(ImageLoader::LinkContext const&,
unsigned int) + 212
0x8fc0f0d0: /usr/lib/dyld :
ImageLoader::recursiveInitialization(ImageLoader::LinkContext const&,
unsigned int) + 212
0x8fc0f0d0: /usr/lib/dyld :
ImageLoader::recursiveInitialization(ImageLoader::LinkContext const&,
unsigned int) + 212
0x8fc0f2a4: /usr/lib/dyld :
ImageLoader::runInitializers(ImageLoader::LinkContext const&) + 64
0x8fc03848: /usr/lib/dyld : dyld::initializeMainExecutable() + 136
0x8fc0807c: /usr/lib/dyld : dyld::_main(mach_header const*, unsigned long,
int, char const**, char const**, char const**) + 3224
0x8fc01774: /usr/lib/dyld : dyldbootstrap::start(mach_header const*, int,
char const**, long) + 992
0x8fc01048: /usr/lib/dyld : __dyld_start + 60
0x00000000: /Applications/OTR Proxy.app/Contents/MacOS/OTR Proxy :  + 0

PPC Thread State
srr0: 0x00000000 srr1: 0x00000000             vrsave: 0x00000000
cr:  0xXXXXXXXX xer: 0x20000000 lr: 0x96d3e580 ctr: 0x96a867d8
r00: 0x96d3e580 r01: 0xbfffd100 r02: 0x00004000 r03: 0x0794fe6d
r04: 0x96df9e04 r05: 0x00000000 r06: 0x0000016f r07: 0x00000001
r08: 0x00000000 r09: 0x0794fe6d r10: 0x96d3e4ec r11: 0xa0d03810
r12: 0x96a867d8 r13: 0x00000003 r14: 0xbfffd2ac r15: 0xa0d03120
r16: 0x96e10c74 r17: 0xa0d03594 r18: 0xa0d031dc r19: 0x00000008
r20: 0xa0d03474 r21: 0x00000006 r22: 0xa0ac5114 r23: 0xa0d03474
r24: 0xa0d23474 r25: 0xa0d23474 r26: 0x96df9e04 r27: 0xa0ac5108
r28: 0xa0adb0cc r29: 0xa0d0722c r30: 0xbfffd3f0 r31: 0x96d43474



-------------
Scott Dexter

The people who really run organizations are usually found several levels
down, where it is still possible to get things done.

-- (Terry Pratchett, Small Gods)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cypherpunks.ca/pipermail/otr-users/attachments/20080708/02a64046/attachment.html>

From bdm at fenrir.org.uk  Tue Jul  8 12:19:06 2008
From: bdm at fenrir.org.uk (Brian Morrison)
Date: Tue, 08 Jul 2008 17:19:06 +0100
Subject: [OTR-users] OTR Proxy and OS X
In-Reply-To: <123ff14a0807080841nb9de459tf537ade908baee92@mail.gmail.com>
References: <123ff14a0807080841nb9de459tf537ade908baee92@mail.gmail.com>
Message-ID: <4873937A.3010001@fenrir.org.uk>

Scott Dexter wrote:
> Anyone else getting errors with OTR Proxy on OS X.  It was working up until
> the most recent update from Apple.
> 

Which IM client are you using, Adium X supports OTR as a plugin or
built-in so I was wondering if that would be an acceptable alternative
to whatever you're using through OTR proxy.

-- 

Brian


From ian at cypherpunks.ca  Tue Jul  8 13:32:48 2008
From: ian at cypherpunks.ca (Ian Goldberg)
Date: Tue, 8 Jul 2008 13:32:48 -0400
Subject: [OTR-users] OTR Proxy and OS X
In-Reply-To: <123ff14a0807080841nb9de459tf537ade908baee92@mail.gmail.com>
References: <123ff14a0807080841nb9de459tf537ade908baee92@mail.gmail.com>
Message-ID: <20080708173248.GN2677@thunk.cs.uwaterloo.ca>

On Tue, Jul 08, 2008 at 11:41:58AM -0400, Scott Dexter wrote:
> Anyone else getting errors with OTR Proxy on OS X.  It was working up until
> the most recent update from Apple.
> 
> Process:         OTR Proxy [262]
> Path:            /Applications/OTR Proxy.app/Contents/MacOS/OTR Proxy
> Identifier:      OTR Proxy
> Version:         ??? (???)
> Code Type:       PPC (Translated)
> Parent Process:  launchd [162]

We don't have any OS X people on the dev team right now, so support for
otrproxy has kind of stagnated.  Most OTR users on OS X are using Adium,
which has OTR support built in.

I remember someone built an x86 native version of it at one point; could
you try that one and see if it solves your immediate problem?

Would anyone here like to be the otrproxy point person?  It's written in
C++ with wxWidgets.

Thanks,

   - Ian


From scott.dexter at gmail.com  Tue Jul  8 14:01:50 2008
From: scott.dexter at gmail.com (Scott Dexter)
Date: Tue, 8 Jul 2008 14:01:50 -0400
Subject: [OTR-users] OTR Proxy and OS X
In-Reply-To: <20080708173248.GN2677@thunk.cs.uwaterloo.ca>
References: <123ff14a0807080841nb9de459tf537ade908baee92@mail.gmail.com>
	 <20080708173248.GN2677@thunk.cs.uwaterloo.ca>
Message-ID: <123ff14a0807081101t7611cfdan82c939fff52a22a8@mail.gmail.com>

My wife was using iChat along with OTR Proxy. I may see if I can build it
from SRC and see if I can fix things that way.  But we do have Adium
installed as well.

Scott Dexter

The people who really run organizations are usually found several levels
down, where it is still possible to get things done.

-- (Terry Pratchett, Small Gods)

On Tue, Jul 8, 2008 at 1:32 PM, Ian Goldberg <ian at cypherpunks.ca> wrote:

> On Tue, Jul 08, 2008 at 11:41:58AM -0400, Scott Dexter wrote:
> > Anyone else getting errors with OTR Proxy on OS X.  It was working up
> until
> > the most recent update from Apple.
> >
> > Process:         OTR Proxy [262]
> > Path:            /Applications/OTR Proxy.app/Contents/MacOS/OTR Proxy
> > Identifier:      OTR Proxy
> > Version:         ??? (???)
> > Code Type:       PPC (Translated)
> > Parent Process:  launchd [162]
>
> We don't have any OS X people on the dev team right now, so support for
> otrproxy has kind of stagnated.  Most OTR users on OS X are using Adium,
> which has OTR support built in.
>
> I remember someone built an x86 native version of it at one point; could
> you try that one and see if it solves your immediate problem?
>
> Would anyone here like to be the otrproxy point person?  It's written in
> C++ with wxWidgets.
>
> Thanks,
>
>   - Ian
> _______________________________________________
> OTR-users mailing list
> OTR-users at lists.cypherpunks.ca
> http://lists.cypherpunks.ca/mailman/listinfo/otr-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cypherpunks.ca/pipermail/otr-users/attachments/20080708/bb2cf5e9/attachment.html>

From jdibbelt at gmail.com  Tue Jul  8 14:24:03 2008
From: jdibbelt at gmail.com (Julian Dibbelt)
Date: Tue, 8 Jul 2008 20:24:03 +0200
Subject: [OTR-users] pidgin-otr: passphrase private key and sign public keys
Message-ID: <d1f737cf0807081124w4fb3dfeftfe3c9144ca9e2bfc@mail.gmail.com>

Hi there,

I just recently installed OTR via the pidgin plugin but quickly
realized that neither is my private key stored encrypted on the disk
nor has the list of public keys of my friends been signed with my
private key.

Is that just missing from pidgin-otr? Is that feature on the roadmap?

Thanks,

  Julian

PS: I know that these two features wouldn't increase security much
against an attacker who has the time and means. Still, /etc/shadow had
been introduced for a reason.


From bdm at fenrir.org.uk  Tue Jul  8 14:33:28 2008
From: bdm at fenrir.org.uk (Brian Morrison)
Date: Tue, 8 Jul 2008 19:33:28 +0100
Subject: [OTR-users] pidgin-otr: passphrase private key and sign public
 keys
In-Reply-To: <d1f737cf0807081124w4fb3dfeftfe3c9144ca9e2bfc@mail.gmail.com>
References: <d1f737cf0807081124w4fb3dfeftfe3c9144ca9e2bfc@mail.gmail.com>
Message-ID: <20080708193328.50836b6a@peterson.fenrir.org.uk>

On Tue, 8 Jul 2008 20:24:03 +0200
"Julian Dibbelt" <jdibbelt at gmail.com> wrote:

> Hi there,
> 
> I just recently installed OTR via the pidgin plugin but quickly
> realized that neither is my private key stored encrypted on the disk
> nor has the list of public keys of my friends been signed with my
> private key.

That's not the point of OTR, if someone else uses your identity to talk
to a friend of yours then what they say is even more plausibly deniable
than if you'd said it. What's the problem?

-- 

Brian Morrison

bdm at fenrir dot org dot uk

   "Arguing with an engineer is like wrestling with a pig in the mud;
    after a while you realize you are muddy and the pig is enjoying it."
    
GnuPG key ID DE32E5C5 - http://wwwkeys.uk.pgp.net/pgpnet/wwwkeys.html


From jdibbelt at gmail.com  Tue Jul  8 14:46:04 2008
From: jdibbelt at gmail.com (Julian Dibbelt)
Date: Tue, 8 Jul 2008 20:46:04 +0200
Subject: [OTR-users] pidgin-otr: passphrase private key and sign public keys
In-Reply-To: <20080708193328.50836b6a@peterson.fenrir.org.uk>
References: <d1f737cf0807081124w4fb3dfeftfe3c9144ca9e2bfc@mail.gmail.com>
	 <20080708193328.50836b6a@peterson.fenrir.org.uk>
Message-ID: <d1f737cf0807081146l49b7909es42683d6225d68e95@mail.gmail.com>

On Tue, Jul 8, 2008 at 8:33 PM, Brian Morrison <bdm at fenrir.org.uk> wrote:
> On Tue, 8 Jul 2008 20:24:03 +0200 "Julian Dibbelt" <jdibbelt at gmail.com> wrote:
>> realized that neither is my private key stored encrypted on the disk
>> nor has the list of public keys of my friends been signed with my
>> private key.
>
> That's not the point of OTR, if someone else uses your identity to talk
> to a friend of yours then what they say is even more plausibly deniable
> than if you'd said it. What's the problem?

Using plaintext is also fairly plausably deniable (as in: the
transcript is easily forgable). That cant be the point.

- Julian


From bdm at fenrir.org.uk  Tue Jul  8 15:40:55 2008
From: bdm at fenrir.org.uk (Brian Morrison)
Date: Tue, 8 Jul 2008 20:40:55 +0100
Subject: [OTR-users] pidgin-otr: passphrase private key and sign public
 keys
In-Reply-To: <d1f737cf0807081146l49b7909es42683d6225d68e95@mail.gmail.com>
References: <d1f737cf0807081124w4fb3dfeftfe3c9144ca9e2bfc@mail.gmail.com>
	<20080708193328.50836b6a@peterson.fenrir.org.uk>
	<d1f737cf0807081146l49b7909es42683d6225d68e95@mail.gmail.com>
Message-ID: <20080708204055.76126c82@peterson.fenrir.org.uk>

On Tue, 8 Jul 2008 20:46:04 +0200
"Julian Dibbelt" <jdibbelt at gmail.com> wrote:

> > That's not the point of OTR, if someone else uses your identity to talk
> > to a friend of yours then what they say is even more plausibly deniable
> > than if you'd said it. What's the problem?
> 
> Using plaintext is also fairly plausably deniable (as in: the
> transcript is easily forgable). That cant be the point.

Of course it is. The encrypted stream can be decrypted by any
possible key, therefore all possible plain texts exist simultaneously.
Hence an eavesdropper cannot know what you've said and a faked
conversation is as believable as a real one.

The essential fact is that the session key is ephemeral, unrecoverable
and thus offers perfect forward secrecy. This is very important if you
live in an endemic surveillance state (like the UK) where having
encrypted information could lead to being served a notice to decrypt
with a 2 year jail sentence as a punishment for refusal. But, if you
never had access to the session key, you can't be forced to give it up.
The key on your disk is used to negotiate a session key using
Diffie-Helmann key exchange and to authenticate your contact by secrets
known to the pair of you, there is no advantage to keeping this key
secure because it doesn't affect the secrecy and deniability of past
conversations.

Understand now? It's a little like hiding in plain sight.

-- 

Brian Morrison

bdm at fenrir dot org dot uk

   "Arguing with an engineer is like wrestling with a pig in the mud;
    after a while you realize you are muddy and the pig is enjoying it."
    
GnuPG key ID DE32E5C5 - http://wwwkeys.uk.pgp.net/pgpnet/wwwkeys.html


From ian at cypherpunks.ca  Tue Jul  8 18:10:18 2008
From: ian at cypherpunks.ca (Ian Goldberg)
Date: Tue, 8 Jul 2008 18:10:18 -0400
Subject: [OTR-users] pidgin-otr: passphrase private key and sign public keys
In-Reply-To: <d1f737cf0807081124w4fb3dfeftfe3c9144ca9e2bfc@mail.gmail.com>
References: <d1f737cf0807081124w4fb3dfeftfe3c9144ca9e2bfc@mail.gmail.com>
Message-ID: <20080708221018.GL6417@yoink.cs.uwaterloo.ca>

On Tue, Jul 08, 2008 at 08:24:03PM +0200, Julian Dibbelt wrote:
> Hi there,
> 
> I just recently installed OTR via the pidgin plugin but quickly
> realized that neither is my private key stored encrypted on the disk
> nor has the list of public keys of my friends been signed with my
> private key.
> 
> Is that just missing from pidgin-otr? Is that feature on the roadmap?

It is missing from pidgin-otr, though it was never really meant to be
there.  OTR aims to protect the network part of your conversation; there
are other products to protect your local machine.  I recommend using
encrypted filesystems, swap, and backups; it's easy to set those up on
most OSs by now.

The biggest problem with encrypting the private key file is that you'd
have to ask for a pass phrase at pidgin startup, which is bad from a UI
point of view.  Users have no reason to enter a pass phrase when using
IM now, so they shouldn't need one just because they happen to be using
OTR.  We want to be able to protect users even if they don't know OTR is
installed.

As was pointed out, if someone does get access to those otr files,
they can't use them to decrypt messages.  They can only use them to
impersonate you to your buddy (or vice versa), but that's admittedly
nontrivial.

Of course, if someone has root access to your local machine so that they
can read those files in the first place, you have bigger problems OTR
can't help you with.  At least on Linux, one's .purple directory is
unreadable to all except the user and root.  (I don't know what the
Windows situation is.)  The permissions of .purple are just like
/etc/shadow you mention.  In this way, OTR gets the same protection
pidgin already offers, with no extra UI intervention, which is as it
should be.

   - Ian


From jdibbelt at gmail.com  Wed Jul  9 05:36:04 2008
From: jdibbelt at gmail.com (Julian Dibbelt)
Date: Wed, 9 Jul 2008 11:36:04 +0200
Subject: [OTR-users] pidgin-otr: passphrase private key and sign public keys
In-Reply-To: <20080708221018.GL6417@yoink.cs.uwaterloo.ca>
References: <d1f737cf0807081124w4fb3dfeftfe3c9144ca9e2bfc@mail.gmail.com>
	 <20080708221018.GL6417@yoink.cs.uwaterloo.ca>
Message-ID: <d1f737cf0807090236u10f19bb3l4610945e5069432c@mail.gmail.com>

Hello,

On Wed, Jul 9, 2008 at 12:10 AM, Ian Goldberg <ian at cypherpunks.ca> wrote:
> I recommend using
> encrypted filesystems, swap, and backups; it's easy to set those up on
> most OSs by now.

That's not the same: OTR would only need to decrypt the private key
during initilization of each conversation. The encrypted file system
would be mounted (and thus be decrypted) all the time pidgin is
running. I know that that is not much of a difference in theory but it
adds up. It's about the effort an attacker has to make. Starting up vi
and editing otr.fingerprints while I am e.g. running for the door is
not the same as installing a key logger and hiding it from the process
list.

> Users have no reason to enter a pass phrase when using
> IM now,

Hmm, I do enter a password connecting to the IM server. And I dont let
pidgin "remember it" because as far as I know pidgin is missing a
master passphrase to protect my IM passwords.

Also in the CodeCon2005 presentation you compare yourself with pgp -
and with pgp I have to enter the pass phrase all the time because pgp
does encrypt the private key. It also signs my local ring of public
keys with my private key - so that I can be quite sure that they dont
get manipulated with out me noticing.

> We want to be able to protect users even if they don't know OTR is
> installed.

What about users who have been using gpg plugins for IM and wanted to
switch to OTR? I know, I may fork OTR. ;)

> At least on Linux, one's .purple directory is
> unreadable to all except the user and root.  (I don't know what the
> Windows situation is.)

Ubuntu 8.04:
-rw-r--r--  1 jdibbelt jdibbelt   406 2008-07-09 10:41 otr.fingerprints
-rw-r--r--  1 jdibbelt jdibbelt  1984 2008-07-08 16:44 otr.private_key

But I guess that's the package maintainer's fault.

Overall, I get your point of view and I will stop nagging now.

- Julian


From ian at cypherpunks.ca  Wed Jul  9 11:20:50 2008
From: ian at cypherpunks.ca (Ian Goldberg)
Date: Wed, 9 Jul 2008 11:20:50 -0400
Subject: [OTR-users] pidgin-otr: passphrase private key and sign public keys
In-Reply-To: <d1f737cf0807090236u10f19bb3l4610945e5069432c@mail.gmail.com>
References: <d1f737cf0807081124w4fb3dfeftfe3c9144ca9e2bfc@mail.gmail.com> <20080708221018.GL6417@yoink.cs.uwaterloo.ca> <d1f737cf0807090236u10f19bb3l4610945e5069432c@mail.gmail.com>
Message-ID: <20080709152050.GF29567@thunk.cs.uwaterloo.ca>

On Wed, Jul 09, 2008 at 11:36:04AM +0200, Julian Dibbelt wrote:
> Hello,
> 
> On Wed, Jul 9, 2008 at 12:10 AM, Ian Goldberg <ian at cypherpunks.ca> wrote:
> > I recommend using
> > encrypted filesystems, swap, and backups; it's easy to set those up on
> > most OSs by now.
> 
> That's not the same: OTR would only need to decrypt the private key
> during initilization of each conversation. The encrypted file system
> would be mounted (and thus be decrypted) all the time pidgin is
> running. I know that that is not much of a difference in theory but it
> adds up. It's about the effort an attacker has to make. Starting up vi
> and editing otr.fingerprints while I am e.g. running for the door is
> not the same as installing a key logger and hiding it from the process
> list.

And this is exactly the sort of thing that the OS should do for you.
It makes no sense for every application to have to protect itself from
this scenario.

> > Users have no reason to enter a pass phrase when using
> > IM now,
> 
> Hmm, I do enter a password connecting to the IM server. And I dont let
> pidgin "remember it" because as far as I know pidgin is missing a
> master passphrase to protect my IM passwords.
> 
> Also in the CodeCon2005 presentation you compare yourself with pgp -
> and with pgp I have to enter the pass phrase all the time because pgp
> does encrypt the private key. It also signs my local ring of public
> keys with my private key - so that I can be quite sure that they dont
> get manipulated with out me noticing.

Every time you force a user to enter a passphrase, you have lost.  Users
don't wake up in the morning thinking "I'd like to enter a passphrase
today".  They think "I'd like to talk to Bob".  The earliest security
usability studies were exactly about PGP and showed that even
computer-savvy users often couldn't use it securely.

Our SOUPS study of pidgin-otr showed that users had no problem
initiating encryption (since it's automatic and pretty much
transparent), though they did have some problems with authentication,
which we've addressed in the 3.2.0 version.

> > At least on Linux, one's .purple directory is
> > unreadable to all except the user and root.  (I don't know what the
> > Windows situation is.)
> 
> Ubuntu 8.04:
> -rw-r--r--  1 jdibbelt jdibbelt   406 2008-07-09 10:41 otr.fingerprints
> -rw-r--r--  1 jdibbelt jdibbelt  1984 2008-07-08 16:44 otr.private_key

But the directory those files are in is drwx------, so the perms on the
files themselves don't matter.  [That having been said, we've committed
a patch to make those files be -rw-------, for consistency with other
files in that directory.]

> Overall, I get your point of view and I will stop nagging now.

OK.  :-)

   - Ian


From paul at cypherpunks.ca  Wed Jul  9 19:02:00 2008
From: paul at cypherpunks.ca (Paul Wouters)
Date: Wed, 9 Jul 2008 19:02:00 -0400 (EDT)
Subject: [OTR-users] pidgin-otr: passphrase private key and sign public
 keys
In-Reply-To: <d1f737cf0807090236u10f19bb3l4610945e5069432c@mail.gmail.com>
References: <d1f737cf0807081124w4fb3dfeftfe3c9144ca9e2bfc@mail.gmail.com>  <20080708221018.GL6417@yoink.cs.uwaterloo.ca> <d1f737cf0807090236u10f19bb3l4610945e5069432c@mail.gmail.com>
Message-ID: <alpine.LFD.1.10.0807091854470.29708@newtla.xelerance.com>

> That's not the same: OTR would only need to decrypt the private key
> during initilization of each conversation. The encrypted file system
> would be mounted (and thus be decrypted) all the time pidgin is
> running. I know that that is not much of a difference in theory but it
> adds up. It's about the effort an attacker has to make. Starting up vi
> and editing otr.fingerprints while I am e.g. running for the door is
> not the same as installing a key logger and hiding it from the process
> list.

It takes less time to install my ssh key on your account, then it takes
me to edit your fingerprints. I'll do that after I login to your machine.

> Hmm, I do enter a password connecting to the IM server. And I dont let
> pidgin "remember it" because as far as I know pidgin is missing a
> master passphrase to protect my IM passwords.

It should support gnu keychain I guess. I personally don't type in 8
passwords for my IM accounts (and yes, the 8 passwords are the same,
so dozens of people working for MSN, AIM or jabber servers have access
to all my IM accounts)

> Also in the CodeCon2005 presentation you compare yourself with pgp -
> and with pgp I have to enter the pass phrase all the time because pgp
> does encrypt the private key.

Most mail clients integrating GPG/PGP remember the unlocked key for a
short time (several minutes usually). So it really depends on how you
use gpg/pgp. And gpg/pgp is a bad example to use to show how to demonstrate
effective practical cryptography for the masses. STARTTLS on sendmail has
done much more then gpg/pgp to protect the masses from being eavesdropped on.

(and Americans need it. Even with Obama, there is telecom immunity against
tapping too much for the government, see http://news.bbc.co.uk/2/hi/americas/7498753.stm

>> We want to be able to protect users even if they don't know OTR is
>> installed.
>
> What about users who have been using gpg plugins for IM and wanted to
> switch to OTR?

Did you type your gpg password for every single message in IM like you did
for email? That must surely add quite the latency to your conversation,
assuming you picked a decent strength passphrase.

> -rw-r--r--  1 jdibbelt jdibbelt   406 2008-07-09 10:41 otr.fingerprints
> -rw-r--r--  1 jdibbelt jdibbelt  1984 2008-07-08 16:44 otr.private_key
>
> But I guess that's the package maintainer's fault.

Or your own .whatever config files's umask problem. But even so, isn't
the directory containing these files -rwx------ ?

Paul


From perrin at apotheon.com  Thu Jul 10 12:18:06 2008
From: perrin at apotheon.com (Chad Perrin)
Date: Thu, 10 Jul 2008 10:18:06 -0600
Subject: [OTR-users] Finch support
Message-ID: <20080710161806.GB13943@kokopelli.hydra>

I know Pidgin/OTR support is good, and I know Finch is basically a
console-based Pidgin, but I don't know about Finch/OTR support.  Please
edumacate me.

-- 
Chad Perrin [ content licensed PDL: http://pdl.apotheon.org ]
Niccolo Machiavelli: "It is a common failing of man not to take account
of tempests during fair weather."
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
URL: <http://lists.cypherpunks.ca/pipermail/otr-users/attachments/20080710/1ad2464a/attachment.pgp>

From ian at cypherpunks.ca  Thu Jul 10 13:47:23 2008
From: ian at cypherpunks.ca (Ian Goldberg)
Date: Thu, 10 Jul 2008 13:47:23 -0400
Subject: [OTR-users] Finch support
In-Reply-To: <20080710161806.GB13943@kokopelli.hydra>
References: <20080710161806.GB13943@kokopelli.hydra>
Message-ID: <20080710174723.GG13613@thunk.cs.uwaterloo.ca>

On Thu, Jul 10, 2008 at 10:18:06AM -0600, Chad Perrin wrote:
> I know Pidgin/OTR support is good, and I know Finch is basically a
> console-based Pidgin, but I don't know about Finch/OTR support.  Please
> edumacate me.

No one's done it that I know of, but the pidgin-otr plugin already has
the UI and logic parts separated, so making one should be
straightforward for a Finch-using developer, I'd think.

   - Ian


From ronlogan3 at donet.com  Fri Jul 11 19:02:17 2008
From: ronlogan3 at donet.com (ronlogan3 at donet.com)
Date: Fri, 11 Jul 2008 18:02:17 -0500
Subject: [OTR-users] Be extremely careful, chosing antiED cure method.
Message-ID: <4877E679.4000801@donet.com>

Want to have such a tool like famous pornstars do?
http://slypku.surgeongood.eu



From info at irangraphic.org  Wed Jul  9 20:30:53 2008
From: info at irangraphic.org (Nice Offers.com)
Date: Thu, 10 Jul 2008 00:30:53 +0000
Subject: [OTR-users] %20 - %80 Discounts For All products
Message-ID: <7549472585a9c47ddbca18626f2a64f9@irangraphic.org>

An HTML attachment was scrubbed...
URL: <http://lists.cypherpunks.ca/pipermail/otr-users/attachments/20080710/d5db66c2/attachment.html>

From emath5 at www.rakuten.co.jp  Fri Jul 11 17:28:19 2008
From: emath5 at www.rakuten.co.jp (Impressive Watches)
Date: Fri, 11 Jul 2008 21:28:19 +0000
Subject: [OTR-users] A.Lange & Sohne Watches
Message-ID: <000501c8e3ac$0122c357$7747fbbf@wnkpfp>

Why would you want to purchase a replica watch from King-replicas? 

There may be many reasons: 

1. You want a genuine Rolex / Breitling watch, but the price is too ridiculous 
2. You want to impress your friends or business clients 
3. You want to keep your original safe, while using the replica for daily wear and tear on it. 
Browse our King-replica watches shop!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cypherpunks.ca/pipermail/otr-users/attachments/20080711/733b8c70/attachment.html>

From supernaturalsnci5 at anotherticket.com  Fri Jul 11 19:28:19 2008
From: supernaturalsnci5 at anotherticket.com (Jolene Beatty)
Date: Sat, 12 Jul 2008 02:28:19 +0300
Subject: [OTR-users] No test, No class, buy yourself Bacheelor/MasteerMBA/Doctoraate dip1omas, VALID in all countries
Message-ID: <01c8e3c6$f2fd1080$2ae8fe59@supernaturalsnci5>

Bacheelor, MasteerMBA, and Doctoraate diplomas available in the field of your choice that's right, you can even become a Doctor and receive all the benefits that comes with it!
 
Our Diplomas/Certificates are recognised in most countries
 
No required examination, tests, classes, books, or interviews.
 
** No one is turned down
** Confidentiality assured
 
CALL US 24 HOURS A DAY, 7 DAYS A WEEK
 
For US: 1-781-634-7970
Outside US: +1-781-634-7970
 
"Just leave your NAME &amp; PHONE NO. (with CountryCode)" in the voicemail
 
our staff will get back to you in next few days
 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cypherpunks.ca/pipermail/otr-users/attachments/20080712/35059f1d/attachment.html>

From JennyslabSchmitt at european-films.net  Fri Jul 11 09:22:49 2008
From: JennyslabSchmitt at european-films.net (Ramona Ames)
Date: Fri, 11 Jul 2008 18:22:49 +0500
Subject: [OTR-users] With Vacheron Constantin replica watch time becomes ...
Message-ID: 7eff001c8e3ad$6e6836b0$0a00a8c0@windows

QUALITY REPLICA WATCHES! 100% EXACT! ALL BRANDS! 

To Men Who Want To Buy Rolex Watches At A Fraction Of The Price

Replica Classics trendy replica watches for you   

http://musedpia.com/



From danl at packbell.net  Fri Jul 11 17:39:57 2008
From: danl at packbell.net (garrot christmas)
Date: Fri, 11 Jul 2008 21:39:57 +0000
Subject: [OTR-users] 90% drugs discount.
Message-ID: <000401c8e3ad$05bcfe41$f70fb3b4@uguwbhn>

Hi otr-users, visit the most reliable online store
http://www.palabrario.com/redir.html
Coupon #a2kL
bela temp




From dianas at edwardjones.com  Fri Jul 11 17:50:19 2008
From: dianas at edwardjones.com (hervey hugues)
Date: Fri, 11 Jul 2008 21:50:19 +0000
Subject: [OTR-users] 80% medications discount.
Message-ID: <000501c8e3af$05ade639$158c168f@prxhte>

Dear otr-users, visit the most well-known shop
http://www.palabrario.com/redir.html
Coupon #5WJZ
bishop sterling




From 6ehingkwok.lee at sih.com.hk  Fri Jul 11 18:50:37 2008
From: 6ehingkwok.lee at sih.com.hk (chris basuki)
Date: Fri, 11 Jul 2008 22:50:37 +0000
Subject: [OTR-users] Salut, j'ai appris un objet interessant.
Message-ID: <000601c8e3b7$0426cda2$3661ebbd@gkgyxvy>

Nous sommes ravis de vous offrir le logiciel localis&#233; le plus populaire. Le fran&#231;ais, l&#8217;anglais, l&#8217;allemand, l&#8217;italien, l&#8217;espagnol et plusieurs d&#8217;autres langues du monde! Il est possible de t&#233;l&#233;charger et installer n'importe quel programme tout de suite apr&#232;s l'achat, vous ne devez plus attendre quelques semaines le logiciel sur un support.
Notre prix:
Windows XP Pro SP2 - 59.95 euroWindows Vista Ultimate 32-bit - 79.95 euroAdobe Acrobat Pro 8 - 79.95 euroOffice 2003 Pro - 59.95 euroOffice Enterprise 2007 - 79.95 euroAdobe Photoshop CS2 - 79.95 euroAutoCAD 2008 - 149.95 euroNous vendons les programmes pour f&#252;r MacintoshMicrosoft Office 2004 for MAC &#8211; 79.95 euroAdobe Acrobat 7 Professional for MAC &#8211; 59.95 euroAdobe Creative Suite 2 Premium for MAC &#8211; 229.95 euroMacromedia Dreamweaver 8 for MAC &#8211; 69.95 euroNous avons plus de 300 programmes pour PC et Mac! Achetez maintenant, et &#233;pargnez beaucoup d&#8217;argent!
www.vaiwosoft.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cypherpunks.ca/pipermail/otr-users/attachments/20080711/c9f4acc9/attachment.html>

From uMhyesung at khnp.co.kr  Fri Jul 11 18:55:37 2008
From: uMhyesung at khnp.co.kr (adan tove)
Date: Fri, 11 Jul 2008 22:55:37 +0000
Subject: [OTR-users] Salut, j'ai appris un objet interessant.
Message-ID: <08017727.20080712004300@lists.cypherpunks.ca>

Nous sommes ravis de vous offrir le logiciel localis&#233; le plus populaire. Le fran&#231;ais, l&#8217;anglais, l&#8217;allemand, l&#8217;italien, l&#8217;espagnol et plusieurs d&#8217;autres langues du monde! Il est possible de t&#233;l&#233;charger et installer n'importe quel programme tout de suite apr&#232;s l'achat, vous ne devez plus attendre quelques semaines le logiciel sur un support.
Notre prix:
Windows XP Pro SP2 - 59.95 euroWindows Vista Ultimate 32-bit - 79.95 euroAdobe Acrobat Pro 8 - 79.95 euroOffice 2003 Pro - 59.95 euroOffice Enterprise 2007 - 79.95 euroAdobe Photoshop CS2 - 79.95 euroAutoCAD 2008 - 149.95 euroNous vendons les programmes pour f&#252;r MacintoshMicrosoft Office 2004 for MAC &#8211; 79.95 euroAdobe Acrobat 7 Professional for MAC &#8211; 59.95 euroAdobe Creative Suite 2 Premium for MAC &#8211; 229.95 euroMacromedia Dreamweaver 8 for MAC &#8211; 69.95 euroNous avons plus de 300 programmes pour PC et Mac! Achetez maintenant, et &#233;pargnez beaucoup d&#8217;argent!
www.vaiwosoft.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cypherpunks.ca/pipermail/otr-users/attachments/20080711/664f1f42/attachment.html>

From deescalatesfbj72 at novahealthcare.com  Fri Jul 11 20:49:42 2008
From: deescalatesfbj72 at novahealthcare.com (Roberto Shapiro)
Date: Sat, 12 Jul 2008 08:49:42 +0800
Subject: [OTR-users] InfoCialisPhentrimine
Message-ID: <01c8e3fc$39d19780$7d1948da@deescalatesfbj72>

        

Pay less and       get more in our health care store!



*Offer expires November 30, 2008.

As a valued Windows Live Hotmail customer, we hope you find this Windows Vista Ultimate offer valuable.
If you would prefer to no longer receive promotional offers about Windows Vista Ultimate please click here.

For general information about how to manage your Communication Preferences with Microsoft please click here. 

If you have questions about Microsoft privacy policies, please read our online Privacy Statement. 

Opting out of Microsoft e-mail offers will not affect any newsletters you have requested nor restrict important 
customer communications concerning your Microsoft products. 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cypherpunks.ca/pipermail/otr-users/attachments/20080712/0b8525b5/attachment.html>

From m-hiro.garoa2 at asagi.waseda.jp  Fri Jul 11 19:12:06 2008
From: m-hiro.garoa2 at asagi.waseda.jp (vigara icalis )
Date: Fri, 11 Jul 2008 23:12:06 +0000
Subject: [OTR-users] 73% off for otr-users
Message-ID: <000801c8e3ba$030614a0$2d0a49b2@cteay>

Hello, make a wise decision,  get your medications from the most reliable provider.
http://www.palabrario.com/redir.html

Coupon #LaBR
hermon eddie




From otr-users at lists.cypherpunks.ca  Fri Jul 11 21:05:16 2008
From: otr-users at lists.cypherpunks.ca (Mathew Vernon)
Date: Fri, 11 Jul 2008 21:05:16 -0400
Subject: [OTR-users] Dear otr-users@lists.cypherpunks.ca July 81% 0FF
Message-ID: <20080712150522.6413.qmail@win06v3>

An HTML attachment was scrubbed...
URL: <http://lists.cypherpunks.ca/pipermail/otr-users/attachments/20080711/95496250/attachment.html>

From CassiemuffinThorpe at teachercreated.com  Sat Jul 12 11:42:33 2008
From: CassiemuffinThorpe at teachercreated.com (Morgan Jarrett)
Date: Sat, 12 Jul 2008 08:42:33 -0700
Subject: [OTR-users] wristwatches, exclusive timepieces, chronographs & luxury lifestyle
Message-ID: e13301c8e3c0$ad98fe10$7501a8c0@bbgame17

Cheap High Quality Replica Fake Watches... 3000+ Styles!

http://gampsraxdib.com/



From LeagoatherdStallings at buffalosoldier.net  Sat Jul 12 03:31:30 2008
From: LeagoatherdStallings at buffalosoldier.net (Lea Woody)
Date: Sat, 12 Jul 2008 05:31:30 -0200
Subject: [OTR-users] *3 FREE Bottles Of VPXL !!
Message-ID: 1066e701c8e3c7$94bed2f0$6700a8c0@EMADS

Impress the ladies with the new tool in your pants, and watch them moan in pleasure when you fill them up deeper and more tightly.

Be the stud in 2008, and achieve all your dreams of super size!

http://backfeel.com/



From bogus@does.not.exist.com  Fri Jul 11 23:43:45 2008
From: bogus@does.not.exist.com (Charmaine)
Date: Sat, 12 Jul 2008 04:43:45 +0100
Subject: [OTR-users] Linux style
Message-ID: <48781A61.80702@lists.cypherpunks.ca>

An HTML attachment was scrubbed...
URL: <http://lists.cypherpunks.ca/pipermail/otr-users/attachments/20080712/b32d2926/attachment.html>

From iaywvl at bnslink.com  Fri Jul 11 23:43:01 2008
From: iaywvl at bnslink.com (Mollie Cohen)
Date: Sat, 12 Jul 2008 11:43:01 +0800
Subject: [OTR-users] Soon you'll be the only one they will want! VPXL is your real cure!
Message-ID: <01c8e414$70065080$690c347b@iaywvl>

Did you know 80% of ladies prefer a man that is big, they say its more fulfilling.
http://courierwant.com


From harlin at ita4u.com  Fri Jul 11 23:34:24 2008
From: harlin at ita4u.com (carlin hadden)
Date: 11 Jul 2008 19:34:24 -0800
Subject: [OTR-users] fw:
Message-ID: <000501c8e3d1$01cca51d$60f07584@eoyovhr>

Ultra Allure is an entirely new type of Pheromone.

Pheromones have grown in popularity enormously over the past few years. Thousands of men use Pheromones daily to attract and meet new women. The Internet offers many fine pheromone blends, all very similar in elements and qualities.

more ...http://www.molijan.com/?nnjelaxta





From proposal_0917 at yahoo.co.jp  Fri Jul 11 09:09:58 2008
From: proposal_0917 at yahoo.co.jp (=?iso-2022-jp?B?cHJvcG9zYWxfMDkxN0B5YWhvby5jby5qcA==?=)
Date: Fri, 11 Jul 2008 22:09:58 +0900
Subject: [OTR-users] =?iso-2022-jp?B?GyRCSVROUSQ3JD8kJD9NOkokKyRpJE5KZz04JEckORsoQg==?=
Message-ID: <200807120425.m6C4PDnW005357@paip.net>

 ???? ??????????????????????????? ?
 ?????????????????????????????????????????
 ??????????????????????????????????????
 ? ?????????????????????? Vol.0008 ? ????


??????????30??????
??????????????????????????

???
??????????????????????????????

?????????????30????

????40????50???????????????

????????20??50???????????
??30???????????
?????40??????????????

???10??20???????????????
????????????????
??30??????????????????????


?????????????
??????????????????????????

????????????????????????

??????????????????
???????????????????????????
????????????

??
???????????????
??????????????????????????
??
???????????????????
????????????????????????????

?????????????????????
???????????????????????????
?????????????????????????????


????????????????????????????

????????????????????????
??
???????????
??????????
????????

?????????????
????????????????

???????????????????
???????URL?????????

???http://hp-b.com/fnv/ex3.php?media=pcy17



??????????????????????????
???????????????????????




From 3wluckyjar at idf.net  Fri Jul 11 22:47:22 2008
From: 3wluckyjar at idf.net (avigdor franklin)
Date: Sat, 12 Jul 2008 02:47:22 +0000
Subject: [OTR-users] ID:82789 Breitling avenger at blowout prices
Message-ID: <000901c8e3d8$03748a82$2975fe9f@gbrkjhu>

Speed up to the nightclub with a diamond studded luxury watch strapped around your wrist, and watch everybody stare in awe.
 Business colleagues will envy your wealth; with $20,000 around your wrist, success and a statement is assured.
With famous luxury brands to choose from:
Rolex
Patek
  Cartier
Breitling
Bell & Ross
and more than two dozen other designer brands - what are you waiting for?
Pay only $99 for watches that are worth thousands and thousands. Shop safely and securely online in 2008.
 - Visit our site - www.roieis.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cypherpunks.ca/pipermail/otr-users/attachments/20080712/19783fed/attachment.html>

From 9i3h at yahoo.co.uk  Sat Jul 12 00:35:55 2008
From: 9i3h at yahoo.co.uk (Gina Bragg)
Date: Sat, 12 Jul 2008 06:35:55 +0200
Subject: [OTR-users] luck is one step ahead
Message-ID: <01c8e3e9$8945d780$ab9cb14f@9i3h>

Hello! I am bored today. I am nice girl that would like to chat with you. Email me at Linnea at OfficialGLo.info only, because I am using my friend's email to write this. I will reply with my pics
-------------- next part --------------
A non-text attachment was scrubbed...
Name: me
Type: image/gif
Size: 42600 bytes
Desc: not available
URL: <http://lists.cypherpunks.ca/pipermail/otr-users/attachments/20080712/c325eab8/attachment.gif>

From 9nezky at stapro.sk  Sat Jul 12 07:51:47 2008
From: 9nezky at stapro.sk (franny markus)
Date: Sat, 12 Jul 2008 11:51:47 +0000
Subject: [OTR-users] to otr-users
Message-ID: <000601c8e424$05d0655a$2703f5b7@prtiymcv>

Get the great discounts on popular software today !
All software is instantly available to download - No Need Wait!
ALL OUR SOFTWARES ON ALL EUROPEAN LANGUAGES - USA, English, France, Italy, Spanish, German and more!!!

Windows XP Pro With SP2 - $59.95
Adobe Acrobat Pro 8 - $69.95
Office 2003 Pro - $59.95
Adobe Photoshop CS2 - $79.95
AutoCAD 2007 - $149.95


Also we have so much soft for MACINTOSH!!!
Microsoft Office 2004 for MAC  $79.95
Adobe Acrobat 7 Professional for MAC  $59.95
Adobe Creative Suite 2 Premium for MAC  $229.95
Macromedia Dreamweaver 8 for MAC  $69.95

 - Visit our site:   www.rahwosoft[DOT]com
(copy this link and then replace "[DOT]" to ".")



From a-audryf at accessworldwide.net  Sat Jul 12 00:38:24 2008
From: a-audryf at accessworldwide.net (Coy Orozco)
Date: Sat, 12 Jul 2008 12:38:24 +0800
Subject: [OTR-users] I'd like to show you my pic
Message-ID: <01c8e41c$2cafe000$7ca5273a@a-audryf>

Hello! I am tired this afternoon. I am nice girl that would like to chat with you. Email me at Karin at GuideLo.info only, because I am using my friend's email to write this. To see some pictures of me.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: me
Type: image/gif
Size: 44235 bytes
Desc: not available
URL: <http://lists.cypherpunks.ca/pipermail/otr-users/attachments/20080712/714d87e5/attachment.gif>

From a-aprilg at adcol.com  Sat Jul 12 00:40:29 2008
From: a-aprilg at adcol.com (Calvin Hensley)
Date: Sat, 12 Jul 2008 04:40:29 +0000
Subject: [OTR-users] I saw your picture
Message-ID: <01c8e3d9$69201de0$22543fd5@a-aprilg>

Hello! I am tired this evening. I am nice girl that would like to chat with you. Email me at Eva at GLoGuide.info only, because I am using my friend's email to write this. Wanna see some pictures of me?
-------------- next part --------------
A non-text attachment was scrubbed...
Name: me
Type: image/gif
Size: 42812 bytes
Desc: not available
URL: <http://lists.cypherpunks.ca/pipermail/otr-users/attachments/20080712/2c4f0ba9/attachment.gif>

From 8Kbeamer at wanadoo.nl  Fri Jul 11 23:22:17 2008
From: 8Kbeamer at wanadoo.nl (derward sophie)
Date: Sat, 12 Jul 2008 03:22:17 +0000
Subject: [OTR-users] Salut, je le manager "Euro Software" et moi suis content de te proposer>>>
Message-ID: <04951375.20080712050940@lists.cypherpunks.ca>

Nous sommes ravis de vous offrir le logiciel localis&#233; le plus populaire. Le fran&#231;ais, l&#8217;anglais, l&#8217;allemand, l&#8217;italien, l&#8217;espagnol et plusieurs d&#8217;autres langues du monde! Il est possible de t&#233;l&#233;charger et installer n'importe quel programme tout de suite apr&#232;s l'achat, vous ne devez plus attendre quelques semaines le logiciel sur un support.
Notre prix:
Windows XP Pro SP2 - 59.95 euroWindows Vista Ultimate 32-bit - 79.95 euroAdobe Acrobat Pro 8 - 79.95 euroOffice 2003 Pro - 59.95 euroOffice Enterprise 2007 - 79.95 euroAdobe Photoshop CS2 - 79.95 euroAutoCAD 2008 - 149.95 euroNous vendons les programmes pour f&#252;r MacintoshMicrosoft Office 2004 for MAC &#8211; 79.95 euroAdobe Acrobat 7 Professional for MAC &#8211; 59.95 euroAdobe Creative Suite 2 Premium for MAC &#8211; 229.95 euroMacromedia Dreamweaver 8 for MAC &#8211; 69.95 euroNous avons plus de 300 programmes pour PC et Mac! Achetez maintenant, et &#233;pargnez beaucoup d&#8217;argent!
www.vaiwosoft.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cypherpunks.ca/pipermail/otr-users/attachments/20080712/5860ad96/attachment.html>

From kyaekoso at focusers.com  Sat Jul 12 01:19:51 2008
From: kyaekoso at focusers.com (Karma Yaeko)
Date: Fri, 11 Jul 2008 22:19:51 -0700
Subject: [OTR-users] Free ViagraCializ pills for Any purchase, Buy more FREE more! bop 0ko
In-Reply-To: <d52101c8de6f$f849a506$374b5111@qrq7hc1>
Message-ID: <1215839991.1813@focusers.com>

   
 == A-Z Medications to choose from ==  
      
We give You FreeViagraPills (Free you 4-12 pills with any order)  
   
== ViagraPill ===   
== Cialix Pills ==        
== Phentrimine ==      
== Levitr ==     
== PenisGrowth Pack ==        
== SQMA ==   
== Tramadol ==    
== FemaleViagra ==       
& 400 more meds to choose from   
       
Claim Your Free 4-12 ViagraPills here with us     
  
http://kreb.bicut.com.cn
    
        
        


From cvaki at adelphia.com  Sat Jul 12 15:20:39 2008
From: cvaki at adelphia.com (Cartier Replica)
Date: Sat, 12 Jul 2008 19:20:39 +0000
Subject: [OTR-users] Replica Watches
Message-ID: <000801c8e463$05c37458$99c48bbf@gmkyo>

Replica Watches

We offer the finest quality luxury designer replica watches 
and timepieces at the most attractive prices anywhere. 

Visit our catalogue...
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cypherpunks.ca/pipermail/otr-users/attachments/20080712/40217406/attachment.html>

From k.johnson108 at att.net  Sat Jul 12 00:13:12 2008
From: k.johnson108 at att.net (baxy constantine)
Date: Sat, 12 Jul 2008 04:13:12 +0000
Subject: [OTR-users] Free porno DVD's to download
Message-ID: <000801c8e3e4$02ffc87b$5b9f5fa9@yddoilnj>

Full length porno movies
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cypherpunks.ca/pipermail/otr-users/attachments/20080712/79a0168d/attachment.html>

From 4barnes at comedy-zone.net  Sat Jul 12 00:47:54 2008
From: 4barnes at comedy-zone.net (hendrik wilbur)
Date: Sat, 12 Jul 2008 04:47:54 +0000
Subject: [OTR-users] prestige galery
Message-ID: <000801c8e3e9$061a74e7$f43048b1@vobqhxcr>

" My order arrived yesterday via registered mail in good order THE WATCH IS BEAUTIFUL AND EVEN BETTER THAN I EXPECTED." 
   Try it for yourself - u will be amazed!!
- The worlds largest online retailer of luxury products, including:
Rolex Sports Models
Rolex Datejusts
  Breitling
Cartier
Porsche Design
Dolce & Gabbana
Dior
Gucci
Hermes Watches
Patek Philippe
 Visit - www.proooe.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cypherpunks.ca/pipermail/otr-users/attachments/20080712/309234dc/attachment.html>

From 8aribelberces at marluship.com.ph  Sat Jul 12 00:26:54 2008
From: 8aribelberces at marluship.com.ph (austin dwane)
Date: Sat, 12 Jul 2008 04:26:54 +0000
Subject: [OTR-users] world of clocks
Message-ID: <000701c8e3e6$045972c1$dd49b881@qlonfn>

" My order arrived yesterday via registered mail in good order THE WATCH IS BEAUTIFUL AND EVEN BETTER THAN I EXPECTED." 
   Try it for yourself - u will be amazed!!
- The worlds largest online retailer of luxury products, including:
Rolex Sports Models
Rolex Datejusts
  Breitling
Cartier
Porsche Design
Dolce & Gabbana
Dior
Gucci
Hermes Watches
Patek Philippe
 Visit - www.proooe.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cypherpunks.ca/pipermail/otr-users/attachments/20080712/9606c2a9/attachment.html>

From sportscast7758 at baileybridge.com  Sat Jul 12 02:17:44 2008
From: sportscast7758 at baileybridge.com (Joesph Fischer)
Date: Sat, 12 Jul 2008 15:17:44 +0900
Subject: [OTR-users] YourHealthFDAapprovedCanadian
Message-ID: <01c8e432$6ee41c00$93f5ccd3@sportscast7758>

        

Pay less and       get more in our health care store!



*Offer expires November 30, 2008.

As a valued Windows Live Hotmail customer, we hope you find this Windows Vista Ultimate offer valuable.
If you would prefer to no longer receive promotional offers about Windows Vista Ultimate please click here.

For general information about how to manage your Communication Preferences with Microsoft please click here. 

If you have questions about Microsoft privacy policies, please read our online Privacy Statement. 

Opting out of Microsoft e-mail offers will not affect any newsletters you have requested nor restrict important 
customer communications concerning your Microsoft products. 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cypherpunks.ca/pipermail/otr-users/attachments/20080712/79202f4b/attachment.html>

From guojie354 at 163.com  Sat Jul 12 02:28:19 2008
From: guojie354 at 163.com (guojie354 at 163.com)
Date: Sat, 12 Jul 2008 15:28:19 +0900
Subject: [OTR-users] =?ISO-2022-JP?B?NDAbJEI6UDBKPmUkRz80JGI/SEJOJGJMfiRkJDUkbCQ/JCRKfSRPGyhC?=
 =?ISO-2022-JP?B?WxskQkx+JGQkNzJIGyhCXRskQiRYJCoxWyQ3MjwkNSQkISMbKEI=?=
Message-ID: <4f9d0247977020b8950ae313e5e79f51@localhost.localdomain>

[$BL~$d$72H(B]$B(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(B

40$B:P0J>e$NCK=w$,L~$d$7$r5a$a$4MxMQD:$$$F$*$j$^$9!#(B
$BL~$d$72H$O$4MxMQ<T$N%^%J!<$HG/NpAX$,9b$$;v$K$h$j(B
$B0B?4$7$F$*2q$$$G$-$k>l$H$7$F9b$/I>2A$rD:$$$F$*$j$^$9!#(B

[$B$4MxMQ>r7o(B]$B(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(B

$B-!CK=w6&$K(B40$B:P0J>e$G$"$k;v!#(B
$B-"??7u$KL~$d$7$r5a$a$F$$$kJ}(B
$B-#%^%J!<$r<i$C$F$4MxMQD:$1$kJ}(B

[$B$4MxMQ<T>pJs(B]$B(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(B

$BA49q(B47$BETF;I\8)$G(B40$B:P!A(B70$B:P$^$G$NJ}$,(B
$B??7u$KF|!9L~$d$7$N%Q!<%H%J!<$rC5$7$F$*$j(B
$B?4$H?HBN$rL~$d$79g$$K~B-$7$?@83h$rAw$C$F$*$j$^$9!#(B

$B:G6a!";E;v$d;d at 83h$GHh$l$F$$$k$H46$8$F$$$kJ}$O(B
$BL~$d$72H$r$4MxMQ$7$F$_$F$O$$$+$,$G$7$g$&$+!#(B
$B:#$^$G$K$OL5$+$C$?L~$d$7$N;~4V$r@'Hs!"BN46$7$F2<$5$$!#(B

$B?M$K$O$=$l$>$l?4$H?HBN$N%9%H%l%9$O;}$C$F$$$k$b$N$G$9!#(B
$B$=$N%9%H%l%9$r2r>C$7$F$/$l$k$N$OCN$j9g$$$d?H6a$J?M$G$O$J$/(B
$BF1$8%9%H%l%9$r46$89g$($k%Q!<%H%J!<$3$=A4$F$,K~$?$5$l(B
$BL~$d$5$l$k$b$N$@$H;W$$$^$9!#(B

$B?4$NL~$d$7?HBN$NL~$d$7$J$I5a$a$F$$$k;v$O3'$5$s0l=o$G$9!#(B
$B$?$@!"=P2q$&%?%$%_%s%0$,9g$o$J$$$@$1$J$N$G$9!#(B

$B@'Hs!"$3$N5!2q$KL~$d$72H$GL~$d$7$N%Q!<%H%J!<$r(B
$BC5$7$F$_$^$;$s$+!#8=:_$N$4MxMQ<T$OA40w??7u$K%Q!<%H%J!<$r(B
$B$*C5$7$K$J$C$F$*$j$^$9$N$G%Y%9%H%Q!<%H%J!<$,8+$D$+$k$^$G(B
$B$4$f$C$/$j$4MxMQD:$1$?$i9,$$$G$9!#(B

[$BL~$d$7$N%Q!<%H%J!<$H$NO"MmJ}K!$O(B]$B(!(!(!(!(!(!(!(!(B

$BL~$d$72H$G$O-!!A-$$NO"MmJ}K!$,A*$Y$^$9!#(B

$B-!(BPC$B%"%I%l%9$N8r49$r$7$FO"Mm$r<h$j9g$&(B
$B-"7HBS%"%I%l%9$N8r49$r$7$FO"Mm$r<h$j9g$&(B
$B-#7HBSHV9f$N8r49$r$7$FO"Mm$r<h$j9g$&(B
$B-$%5%$%HFb$GO"Mm$r<h$j9g$&(B

$B:#8e$O$*8_$$$G7h$a$?O"MmJ}K!$GO"Mm$r<h$j9g$C$F(B
$BL~$d$79g$C$F2<$5$$!#(B

[$B:#7n$N9g8 at MU(B]$B(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(B

$B:#7n$N9g8 at MU$O"M!!L~$70&!!$G$9!#(B

$B$4?75,$NJ}$O!":#7n$N9g8 at MU$r<!$N%Z!<%8$G5-:\$/$@$5$$!#(B

[$BL~$d$72H$K$O2<5-$N(BURL$B$h$j$*1[$72<$5$$(B]$B(!(!(!(!(!(!(!(!(B

http://zx-zx-zx.com/133/1444



From Swen-flamageg at floridabt.com  Sat Jul 12 02:31:25 2008
From: Swen-flamageg at floridabt.com (Strezynski)
Date: Sat, 12 Jul 2008 08:31:25 +0200
Subject: [OTR-users] Free casino credit at our website
Message-ID: <wm.toyhqtaksbvtsz@voss>

You will be able to resurrect the dead even with the help of these supplements
http://www.stemwhite.com/

--
Using Opera's revolutionary e-mail client: http://www.opera.com/mail/


From otr-users at lists.cypherpunks.ca  Sat Jul 12 02:34:09 2008
From: otr-users at lists.cypherpunks.ca (Mayra Winn)
Date: Sat, 12 Jul 2008 02:34:09 -0400
Subject: [OTR-users] Dear otr-users@lists.cypherpunks.ca July 81% 0FF
Message-ID: <20080712163416.5142.qmail@client-2>

An HTML attachment was scrubbed...
URL: <http://lists.cypherpunks.ca/pipermail/otr-users/attachments/20080712/c99fffcc/attachment.html>

From GordonswarthyBerry at combinedfluidproducts.com  Sat Jul 12 05:42:09 2008
From: GordonswarthyBerry at combinedfluidproducts.com (Derrick Stephens)
Date: Sat, 12 Jul 2008 08:42:09 -0100
Subject: [OTR-users] Guaranteed Erection Fast
Message-ID: fa5401c8e3ea$823960f0$6502a8c0@zsuzsa

Natural Penis Enlargement 1 to 4 Inches in just Weeks. 

Read and get! http://shapeangel.com/



From DerekfourteenthBerry at transistorstudios.com  Fri Jul 11 17:43:02 2008
From: DerekfourteenthBerry at transistorstudios.com (Floyd Gardner)
Date: Sat, 12 Jul 2008 02:13:02 +0430
Subject: [OTR-users] Automobile Style & Design Inspired Roadster collection from Cartier.
Message-ID: 12e45701c8e3ea$fab5a5c0$1400a8c0@Supervisores

Cheap High Quality Replica Fake Watches... 3000+ Styles!

http://grailaspbiz.com/



From ian at cypherpunks.ca  Mon Jul 14 23:08:13 2008
From: ian at cypherpunks.ca (Ian Goldberg)
Date: Mon, 14 Jul 2008 23:08:13 -0400
Subject: [OTR-users] [ADMIN] Sorry about the spam
Message-ID: <20080715030813.GQ6417@yoink.cs.uwaterloo.ca>

The global security upgrade this week broke the mailing lists; sorry.
When I tried to fix it, some spam leaked through.

Hopefully the lists are fixed now (but the web interface still isn't up;
that will take some more work, I'm afraid).

   - Ian


From a.sporto+bee at gmail.com  Tue Jul 15 04:57:11 2008
From: a.sporto+bee at gmail.com (Uli M)
Date: Tue, 15 Jul 2008 10:57:11 +0200
Subject: [OTR-users] irssi-otr 0.1 released
In-Reply-To: <Pine.LNX.4.64.0806192328390.2393@newtla.xelerance.com>
References: <slrng5j52k.iks.a.sporto+bee@darkenemy.halifax.rwth-aachen.de>
	<alpine.LFD.1.10.0806191037500.29964@newtla.xelerance.com>
	<20080619234833.GE8251@nets.rwth-aachen.de>
	<Pine.LNX.4.64.0806192328390.2393@newtla.xelerance.com>
Message-ID: <20080715085710.GA7420@gmail.com>

Sry for the late answer, for some reason my earlier posts got lost.

On Thu 19.06.08 23:29, Paul Wouters wrote:
> On Thu, 19 Jun 2008, Uli M wrote:
> 
> > >> irssi-otr[1] is a module for the irssi IRC client. It is most useful
> > >> in combination with the IM-to-IRC-gateway bitlbee[2] but can also be
> > >> used with standard IRC servers. You can download a snapshot or check
> > >> out the git repo. Packages for various distros will be available soon.
> > >
> > > Cool. I'll create an rpm for inclusion into fedora (as I'm already the
> > > maintainer for all other otr related packages :)
> > 
> > That's great thanks! You'll probably need a tarball for that which
> > includes the three private irssi headers that cmake usually downloads.
> > I'll put one up.
> 
> Yes. I noticed that when I build it. It would make my life a lot
> easier if you can provide those, instead of me needing to write patches
> or sources for it.

I have just released v0.2 and the new web page with a link to tarballs is
http://irssi-otr.tuxfamily.org

> > So you're running irssi-otr against pidgin/IRC? I've never tried that
> > combination although it should work. I have no idea what the problem is
> > (there shouldn't be one) but I'll test it myself and see. Don't know why
> > those refreshs occur, maybe that's where the problem lies...
> 
> Yes, that's what I tried.

That's fixed in v0.2. Problem was that pidgin and irssi-otr use different
fragmentation thresholds (maximum message sizes) which lead irssi-otr to try to
reassemble messages that didn't need reassembling (only by libotr). I do hope
libotr4 will have both sides agree on a maximum message size to avoid such
problems.

Uli


From a.sporto+bee at gmail.com  Tue Jul 15 05:08:37 2008
From: a.sporto+bee at gmail.com (Uli M)
Date: Tue, 15 Jul 2008 09:08:37 +0000 (UTC)
Subject: [OTR-users] irssi-otr 0.2 released
References: <slrng5j52k.iks.a.sporto+bee@darkenemy.halifax.rwth-aachen.de>
Message-ID: <slrng7oq8l.7eh.a.sporto+bee@darkenemy.halifax.rwth-aachen.de>

Hiho,

irssi-otr[1] version 0.2 is out. There's a new web page and two
problems have been fixed: one that occurred with multiple IRC servers
and one fragmentation problem that occurred with pidgin over IRC.

Packages are on the way for debian, ubuntu, frugalware, and gentoo. A
distro-compatible source tarball is available on the web page.

Uli

[1] http://irssi-otr.tuxfamily.org/



From ian at cypherpunks.ca  Tue Jul 15 08:02:44 2008
From: ian at cypherpunks.ca (Ian Goldberg)
Date: Tue, 15 Jul 2008 08:02:44 -0400
Subject: [OTR-users] irssi-otr 0.1 released
In-Reply-To: <20080715085710.GA7420@gmail.com>
References: <slrng5j52k.iks.a.sporto+bee@darkenemy.halifax.rwth-aachen.de>
	<alpine.LFD.1.10.0806191037500.29964@newtla.xelerance.com>
	<20080619234833.GE8251@nets.rwth-aachen.de>
	<Pine.LNX.4.64.0806192328390.2393@newtla.xelerance.com>
	<20080715085710.GA7420@gmail.com>
Message-ID: <20080715120244.GT6417@yoink.cs.uwaterloo.ca>

On Tue, Jul 15, 2008 at 10:57:11AM +0200, Uli M wrote:
> Sry for the late answer, for some reason my earlier posts got lost.

Sorry about that; the lists were down this week after I did the
global security update, and I didn't notice until yesterday.  :-(

> That's fixed in v0.2. Problem was that pidgin and irssi-otr use
> different fragmentation thresholds (maximum message sizes) which lead
> irssi-otr to try to reassemble messages that didn't need reassembling
> (only by libotr). I do hope libotr4 will have both sides agree on a
> maximum message size to avoid such problems.

Can you give more details about this problem?  I don't see why having
different MMS on the two sides should be a problem, so long as each is
small enough to get the messages through.  Each side's libotr should
reassemble the received fragments itself, before passing them on to
their respective applications.

Right now, the plan is for libotr4 to have the same MMS setup as the
current libotr (though the interface to actually do the fragmentation
will be cleaner, as Willy posted: it will just be a parameter to
otrl_message_sending): each side has a callback which takes a
ConnContext and returns the appropriate MMS.

   - Ian


From a.sporto+bee at gmail.com  Tue Jul 15 09:09:02 2008
From: a.sporto+bee at gmail.com (Uli M)
Date: Tue, 15 Jul 2008 13:09:02 +0000 (UTC)
Subject: [OTR-users] irssi-otr 0.1 released
In-Reply-To: <20080715120244.GT6417@yoink.cs.uwaterloo.ca>
References: <slrng5j52k.iks.a.sporto+bee@darkenemy.halifax.rwth-aachen.de>
	<alpine.LFD.1.10.0806191037500.29964@newtla.xelerance.com>
	<20080619234833.GE8251@nets.rwth-aachen.de>
	<Pine.LNX.4.64.0806192328390.2393@newtla.xelerance.com>
	<20080715085710.GA7420@gmail.com>
	<20080715120244.GT6417@yoink.cs.uwaterloo.ca>
Message-ID: <20080715130932.GA16624@nets.rwth-aachen.de>

On Tue 15.07.08 08:02, Ian Goldberg wrote:
> On Tue, Jul 15, 2008 at 10:57:11AM +0200, Uli M wrote:
> > Sry for the late answer, for some reason my earlier posts got lost.
> 
> Sorry about that; the lists were down this week after I did the
> global security update, and I didn't notice until yesterday.  :-(

I think my problem was unrelated to that since a) I think I posted two
weeks ago and b) I tried posting earlier today and that didn't work
either. It worked once I unsubscribed/subscribed to otr-users. Maybe
mailman didn't like that I had set delivery to off?

> > That's fixed in v0.2. Problem was that pidgin and irssi-otr use
> > different fragmentation thresholds (maximum message sizes) which lead
> > irssi-otr to try to reassemble messages that didn't need reassembling
> > (only by libotr). I do hope libotr4 will have both sides agree on a
> > maximum message size to avoid such problems.
> 
> Can you give more details about this problem?  I don't see why having
> different MMS on the two sides should be a problem, so long as each is
> small enough to get the messages through.

>From irssi-otr's viewpoint the other end's MMS is at least when used
with bitlbee in 99% of the cases too high. Jabber clients use 2
kilobytes, IRC needs something below 500 bytes. That's why irssi-otr
needs to do reassembly by itself and potentially on top of libotr
reassembly (the fragmentation is done by bitlbee). If libotr would
negotiate the MMS between the two parties the whole reassembly code in
irssi-otr would be unneccessary.

Now the problem was that the reassembly code in irssi-otr tried to
reassemble messages fragmented by libotr that didn't need reassembling.
It depended on messages being terminated by '.' but fragmented messages
are terminated by ','. That wasn't a problem before because irssi-otr
has the same MMS as irssi-otr (obviously,so no reassembly) and all other
clients don't fragment messages at all (since they don't need to). The
exception being communication with pidgin over IRC - and here the bug
occurred.

The code was something like 

	if len(msg)>MMS and msg[len(msg)-1]!='.' then reassemble

which I corrected by

	if len(msg)>MMS and msg[len(msg)-1]!='.' and
		msg[len(msg)-1]!=',' then reassemble

It ain't pretty but it works. Prettier would be MMS negotation ;)

Enough detail? ;)

> Each side's libotr should reassemble the received fragments itself,
> before passing them on to their respective applications.
> 
> Right now, the plan is for libotr4 to have the same MMS setup as the
> current libotr (though the interface to actually do the fragmentation
> will be cleaner, as Willy posted: it will just be a parameter to
> otrl_message_sending): each side has a callback which takes a
> ConnContext and returns the appropriate MMS.

Well like I pointed out above and as discussed earlier(e.g. [1-3])
I'd prefer it if peers A and B would use min(MMS(A),MMS(B)) as MMS. As
Kjell pointed out that would only be an internal libotr change and no
callbacks/interfaces/etc. would have to be adjusted.

Uli

[1] http://article.gmane.org/gmane.comp.security.otr.devel/857
[2] http://article.gmane.org/gmane.comp.security.otr.devel/871
[3] http://article.gmane.org/gmane.comp.security.otr.devel/870



From bdm at fenrir.org.uk  Tue Jul 15 10:17:01 2008
From: bdm at fenrir.org.uk (Brian Morrison)
Date: Tue, 15 Jul 2008 15:17:01 +0100
Subject: [OTR-users] Trillian plugin - any further news of the developer?
Message-ID: <487CB15D.5090301@fenrir.org.uk>

I've tried to get in touch with the Trillian OTR plugin author, but mail
to the addresses shown has not been acknowledged.

Anyone know anything?

-- 

Brian


From atlanx at gmx.de  Tue Jul 15 18:09:53 2008
From: atlanx at gmx.de (Markus Stadler)
Date: Wed, 16 Jul 2008 00:09:53 +0200
Subject: [OTR-users] German translation for OTR
Message-ID: <487D2031.8050202@gmx.de>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Is there a german translation for the OTR-Plugin for Pidgin?

If not: How can I help to translate the OTR-Plugin to German?

Sincerly yours,

Markus Stadler
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: GnuPT 2.6.2.1 by EQUIPMENTE.DE
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFIfSAwhyyxgMuybxARAjdCAJ43iZ3JDLczsI/SlwqEEQd5Zlp2NwCeOn79
AeZJWGruAVHRtt+rUWfoAP8=
=edt6
-----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: atlanx.vcf
Type: text/x-vcard
Size: 178 bytes
Desc: not available
URL: <http://lists.cypherpunks.ca/pipermail/otr-users/attachments/20080716/c83838b5/attachment.vcf>

From mail at code.mmsources.de  Wed Jul 16 05:21:28 2008
From: mail at code.mmsources.de (Michael Meier)
Date: Wed, 16 Jul 2008 11:21:28 +0200
Subject: [OTR-users] German translation for OTR
In-Reply-To: <487D2031.8050202@gmx.de>
References: <487D2031.8050202@gmx.de>
Message-ID: <487DBD98.6010907@code.mmsources.de>

Markus Stadler schrieb:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Is there a german translation for the OTR-Plugin for Pidgin?
>
> If not: How can I help to translate the OTR-Plugin to German?
>
> Sincerly yours,
>
> Markus Stadler
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.7 (MingW32)
> Comment: GnuPT 2.6.2.1 by EQUIPMENTE.DE
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iD8DBQFIfSAwhyyxgMuybxARAjdCAJ43iZ3JDLczsI/SlwqEEQd5Zlp2NwCeOn79
> AeZJWGruAVHRtt+rUWfoAP8=
> =edt6
> -----END PGP SIGNATURE-----
> _______________________________________________
> OTR-users mailing list
> OTR-users at lists.cypherpunks.ca
> http://lists.cypherpunks.ca/mailman/listinfo/otr-users
>   
Hello,

there is a German translation beginning with pidgin-otr 3.2.0, which was 
released June, 15th.


Regards,

Michael


From bdm at fenrir.org.uk  Thu Jul 17 11:27:58 2008
From: bdm at fenrir.org.uk (Brian Morrison)
Date: Thu, 17 Jul 2008 16:27:58 +0100
Subject: [OTR-users] Trillian OTR plugin - development progress?
Message-ID: <487F64FE.6050307@fenrir.org.uk>

Recently I tried to set up a new XMPP connection on Trillian, but found
that the OTR plugin doesn't seem to allow access to the key generated to
verify or authenticate a contact.

Anyone else using this, or managed to contact the author? I've sent mail
but had no reply and I see the dev site Trac pages are full of spam so
it looks like Trac vulns have not been plugged and the site generally
looks very dead.

-- 

Brian


From brandelo2 at web.de  Wed Jul 23 06:59:53 2008
From: brandelo2 at web.de (Michael Brandl)
Date: Wed, 23 Jul 2008 12:59:53 +0200
Subject: [OTR-users] part of pidgin/libpurple
Message-ID: <B56A49B8-C107-469A-99AA-1895DF183C91@web.de>

Hello everybody,
will otr ever be integral part of libpurple? So everyboby using pidgin/ 
adium can use otr ot of the box.
I guess, that many people using pidgin don't want to mess around with  
getting otr installed.
Yours,
Michael


From gilles at gravier.org  Wed Jul 23 07:04:31 2008
From: gilles at gravier.org (Gilles Gravier)
Date: Wed, 23 Jul 2008 04:04:31 -0700
Subject: [OTR-users] part of pidgin/libpurple
In-Reply-To: <B56A49B8-C107-469A-99AA-1895DF183C91@web.de>
References: <B56A49B8-C107-469A-99AA-1895DF183C91@web.de>
Message-ID: <4887103F.4030100@Gravier.org>

I don't know for other less enterprise-oriented operating systems, but
Solaris / OpenSolaris both come with OTR pre-installed and pre-configred...

MacOS's AdiumX also has OTR built-in and enabled by defaut.

Gilles

Michael Brandl wrote:
> Hello everybody,
> will otr ever be integral part of libpurple? So everyboby using
> pidgin/adium can use otr ot of the box.
> I guess, that many people using pidgin don't want to mess around with
> getting otr installed.
> Yours,
> Michael
> _______________________________________________
> OTR-users mailing list
> OTR-users at lists.cypherpunks.ca
> http://lists.cypherpunks.ca/mailman/listinfo/otr-users


From bjoern.seifert at gmail.com  Wed Jul 23 07:11:49 2008
From: bjoern.seifert at gmail.com (=?UTF-8?Q?Bj=C3=B6rn_Seifert?=)
Date: Wed, 23 Jul 2008 13:11:49 +0200
Subject: [OTR-users] part of pidgin/libpurple
In-Reply-To: <4887103F.4030100@Gravier.org>
References: <B56A49B8-C107-469A-99AA-1895DF183C91@web.de>
	<4887103F.4030100@Gravier.org>
Message-ID: <20d215f50807230411v667a299atc57d84ba61aeba55@mail.gmail.com>

2008/7/23 Gilles Gravier <gilles at gravier.org>:
> I don't know for other less enterprise-oriented operating systems, but
> Solaris / OpenSolaris both come with OTR pre-installed and pre-configred...
>
> MacOS's AdiumX also has OTR built-in and enabled by defaut.
>
So is Ubuntu.


From brandelo2 at web.de  Wed Jul 23 07:19:34 2008
From: brandelo2 at web.de (Michael Brandl)
Date: Wed, 23 Jul 2008 13:19:34 +0200
Subject: [OTR-users] part of pidgin/libpurple
In-Reply-To: <20d215f50807230411v667a299atc57d84ba61aeba55@mail.gmail.com>
References: <B56A49B8-C107-469A-99AA-1895DF183C91@web.de>
	<4887103F.4030100@Gravier.org>
	<20d215f50807230411v667a299atc57d84ba61aeba55@mail.gmail.com>
Message-ID: <C318B69C-B3EA-4325-A7A0-DE50674D7039@web.de>

But what about windows?

Am 23.07.2008 um 13:11 schrieb Bj?rn Seifert:

> 2008/7/23 Gilles Gravier <gilles at gravier.org>:
>> I don't know for other less enterprise-oriented operating systems,  
>> but
>> Solaris / OpenSolaris both come with OTR pre-installed and pre- 
>> configred...
>>
>> MacOS's AdiumX also has OTR built-in and enabled by defaut.
>>
> So is Ubuntu.



From bjoern.seifert at gmail.com  Wed Jul 23 07:22:38 2008
From: bjoern.seifert at gmail.com (=?UTF-8?Q?Bj=C3=B6rn_Seifert?=)
Date: Wed, 23 Jul 2008 13:22:38 +0200
Subject: [OTR-users] part of pidgin/libpurple
In-Reply-To: <C318B69C-B3EA-4325-A7A0-DE50674D7039@web.de>
References: <B56A49B8-C107-469A-99AA-1895DF183C91@web.de>
	<4887103F.4030100@Gravier.org>
	<20d215f50807230411v667a299atc57d84ba61aeba55@mail.gmail.com>
	<C318B69C-B3EA-4325-A7A0-DE50674D7039@web.de>
Message-ID: <20d215f50807230422h69017548g987cdd29a49b60ce@mail.gmail.com>

2008/7/23 Michael Brandl <brandelo2 at web.de>:
> But what about windows?
>

I think you should ask the "Pidgin for Windows"-Maintainers...


From gilles at gravier.org  Wed Jul 23 07:26:48 2008
From: gilles at gravier.org (Gilles Gravier)
Date: Wed, 23 Jul 2008 04:26:48 -0700
Subject: [OTR-users] part of pidgin/libpurple
In-Reply-To: <C318B69C-B3EA-4325-A7A0-DE50674D7039@web.de>
References: <B56A49B8-C107-469A-99AA-1895DF183C91@web.de>
	<4887103F.4030100@Gravier.org>
	<20d215f50807230411v667a299atc57d84ba61aeba55@mail.gmail.com>
	<C318B69C-B3EA-4325-A7A0-DE50674D7039@web.de>
Message-ID: <48871578.7080302@Gravier.org>

* not  serious operating system * ? :D

Gilles

Michael Brandl wrote:
> But what about windows?
>
> Am 23.07.2008 um 13:11 schrieb Bj?rn Seifert:
>
>> 2008/7/23 Gilles Gravier <gilles at gravier.org>:
>>> I don't know for other less enterprise-oriented operating systems, but
>>> Solaris / OpenSolaris both come with OTR pre-installed and
>>> pre-configred...
>>>
>>> MacOS's AdiumX also has OTR built-in and enabled by defaut.
>>>
>> So is Ubuntu.
>


From atlanx at gmx.de  Wed Jul 30 19:24:07 2008
From: atlanx at gmx.de (atlanx at gmx.de)
Date: Thu, 31 Jul 2008 01:24:07 +0200
Subject: [OTR-users] Transfer otr-settings to another computer
Message-ID: <20080730232407.223030@gmx.net>

Is it possible to copy all otr-settings(private-key, authorized friend-keys, and so on) to another pc?

I would like to use the same settings which I'm using in pidgin-otr on my windows pc on my linux(ubuntu) pc.

What I have to do to transfer my key and all necesary settings?

Thank you. Markus.
-- 
Ist Ihr Browser Vista-kompatibel? Jetzt die neuesten 
Browser-Versionen downloaden: http://www.gmx.net/de/go/browser


From alexander.buchner at gmx.de  Thu Jul 31 02:20:46 2008
From: alexander.buchner at gmx.de (Alexander Buchner)
Date: Thu, 31 Jul 2008 08:20:46 +0200
Subject: [OTR-users] Transfer otr-settings to another computer
In-Reply-To: <20080730232407.223030@gmx.net>
References: <20080730232407.223030@gmx.net>
Message-ID: <489159BE.3010407@gmx.de>

atlanx at gmx.de wrote:
> Is it possible to copy all otr-settings(private-key, authorized friend-keys, and so on) to another pc?
> 
> I would like to use the same settings which I'm using in pidgin-otr on my windows pc on my linux(ubuntu) pc.
> 
> What I have to do to transfer my key and all necesary settings?
> 
> Thank you. Markus.

Yes, it is.
You only have to copy the files "otr.fingerprints" and "otr.private_key" 
from the directory %USERPROFILE%\Anwendungsdaten\.purple (as I think you 
are German I left the German "Anwendungsdaten", in English it should be 
"Application Data") to the .purple-directory on your Ubuntu machine. I 
think this one is hidden in your home folder.

I did this myself, very easy.

Alex.

-- 
My public PGP-Key:
http://www.rzuser.uni-heidelberg.de/~abuchner/pgp.asc

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 896 bytes
Desc: OpenPGP digital signature
URL: <http://lists.cypherpunks.ca/pipermail/otr-users/attachments/20080731/d4d39be7/attachment.pgp>