[OTR-dev] GreenLife Emerald Viewer supports OTR

chris-tuchs at hushmail.com chris-tuchs at hushmail.com
Sat Jul 25 21:00:33 EDT 2009


I am writing to announce that GreenLife Emerald Viewer version 433 
is now shipping to users with OTR support.  The implementation 
currently only does "Manual fingerprint verification" for 
"authenticate buddy" but I am in the middle of implementing SMP and 
it will appear in a future release.  Source and binaries for Linux, 
Mac and Microsoft windows are available at 
http://modularsystems.sl/.  The website is currently being slash-
dotted with all the users downloading the new version so the home 
page looks ugly.

The Second Life IM system unfortunately displays tab characters as 
small white blocks, so OTR's white space tag is not sent as part of 
regular messages.  Instead it is put on the "stopped typing" 
messages which are never displayed, but which are examined for the 
presence/absence of the white space tag.  Nothing was done to stop 
OTR from seeing white space tags in regular IM so if another 
implementation chooses to send them there GreenLife's 
implementation will see and honor them.

This implementation does not encrypt "started typing" or "stopped 
typing" messages, so there is a "traffic analysis" type privacy 
leak.  Neither does it try to randomly pad message lengths giving 
another traffic analysis privacy leak.  This implementation does 
not support V1 of the protocol, that is disabled in the "policy" 
choice, but it is an easy change to make if you want V1 in second 
life.

Please add "GreenLife Emerald Viewer, a Second Life Client" to the 
list of systems that support OTR and link the entry to  
http://modularsystems.sl/

Thank you for all the support I received here.

Chris




More information about the OTR-dev mailing list