bbs VS c-toxcore

https://github.com/net4people/bbs/issues/63

People should be aware that privacy tools can make you stand out. Unless methods are used to obfuscate your data.

I never trusted Signal due to https://github.com/net4people/bbs/issues/60

VPNs are totally detectable - its your traffic eg what ur searching up that is hard or impossible to decrypt. to make the VPN TRAFFIC itself undetectable, you have to obfuscate it. Now there could be a lot of reasons as to how your school blocked your vpn. The ports expressvpn use may have been blocked, for example. I personally don't use express vpn but use my own, but protocols like wireguard which MAY (im not sure) be used by express vpn use udp packets and the school could have just completely dropped them completely (Most games use udp packets since its faster), or the ip ranges you have been assigned on expressvpn may have just been blocked from the school wifi. As for why the cheap free vpn may be able to bypass your school wifi, it could be that it avoids the reasons above OR its something different like a proxy, which is what I use to bypass the restrictions at my high school. The fix, or what I do, is I setup my own servers. The price of a vps server at digital ocean is like 4 dollars a month, probably around the same price if not cheaper than expressvpn. Get yourself one, setup your own proxy server and connect to that. You can search around for tutorials, but the one I use is VMESS+TCP, essentially disguising the proxy traffic as a tcp packet so that the school can't distinguish it from regular traffic. Find a tutorial online, probably ask around on here: https://github.com/net4people/bbs If you followed a guide and still can't get it to work, your gna have to find an unblocked port. I would try 443 or 123 first since usually those aren't blocked but for my school 3478 is the one that works.

See also this somewhat infamous thread on Tox's cryptographic design[1].

[1]: https://github.com/TokTok/c-toxcore/issues/426

In case with Tox you have to trust in homebrew crypto that was never properly audited (how about that security issue reported by Donenfeld in 2017, which is being tackled only now, sort of?) -- and outdated and outright abandoned clients which were never above, let's say, "beta quality".

it has the new group chat feature (https://github.com/TokTok/c-toxcore/pull/2269)

"If Tox already does onion routing, why use Tox over Tor?"

What an arbitrary criteria to judge a project by. There have been 5 releases in the past year, including a major feature release.

https://github.com/TokTok/c-toxcore/releases

Signal isn't falling behind and Tox is an old service that has had issues with messages being spoofable since day 1

tox https://github.com/TokTok/c-toxcore/issues/426

You could use a Tox front end like qTox or Toxic. It is a fully encrypted end-to-end communication protocol that allows text, voice, and video chat. The github page for the Tox protocol has some useful caveats about the its security.

It links to a bug report discussion where one of the developers states that they don't understand the security properties of tox very well[1].

I find that worrying.

[1] https://github.com/TokTok/c-toxcore/issues/426