full-disclosure - Fwd: off the record howto / best practices

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Tue Mar 28 12:06:31 2006
From: coderman at gmail.com (coderman)
Subject: Fwd: off the record howto / best practices

---------- Forwarded message ----------
From: coderman <coderman@...il.com>
Date: Mar 28, 2006 2:39 AM
Subject: off the record howto / best practices
To: cypherpunks@...t.org


verify fingerprint:
"Buddy List"
   -> Tools Menu Options
      -> Preferences Menu Option
         -> Plugins Menu Option
            -> Select Username from Known Fingerprints
               -> Press "Verify fingerprint" action
                  -> VIEW FINGERPRINT AND APPROVE/REJECT IF EXPECTED
---
Fingerprint for you, coderman42 (AIM/ICQ):
A59CDCB3 46468A16 27D21678 270AF0B5 0B0477CF

Purported fingerprint for anonymous:
0B0477CF 270AF0B5 27D21678 46468A16 A59CDCB3
---
                     -> Select "i have" verified action only if expected is true

using verified otr credentials:
  -> Select "OTR: Not Private" image button at lower right corner if
secure channel is down
     -> Verify "OTR: Private" image button at lower right corner before chat



example of a failed key agreement:

the "OTR: Unverified" image was never shown at the lower right corner
of the window
indicating an initial OTR exchange had taken place.

---cut---
(02:12:01) anonymous: hi code
(02:12:05) Attempting to start a private conversation with anonymous...
(02:12:11) coderman42: hello
(02:12:14) coderman42: do you have OTR?
(02:12:38) anonymous: hold on
(02:12:51) coderman42: k
(02:13:39) anonymous: *** Encrypted with the Gaim-Encryption plugin
            02:17
(02:18:16) coderman42: sorry, no worky for you.
(02:18:19) coderman42: try again
(02:18:29) coderman42: what client / OS are you using?
(02:18:38) coderman42: i recommend a unix like system with gaim
(02:19:46) anonymous: i am on gaim and i was useing gaim encrypt
(02:21:47) Attempting to start a private conversation with anonymous...
(02:22:00) coderman42: maybe you were; it is not working currently.
            02:22
(02:22:33) anonymous logged out.
(02:23:04) anonymous logged in.
(02:23:10) coderman42: wb
(02:23:12) Attempting to start a private conversation with anonymous...
(02:23:23) coderman42: (02:23:12) Attempting to start a private
conversation with anonymous...
(02:23:27) coderman42: waiting ...
(02:23:44) coderman42: brb
(02:26:58) anonymous: *** Encrypted with the Gaim-Encryption plugin
            02:27
(02:28:45) anonymous logged out.
---end-cut--

remember to protect your keys.