c-toxcore VS OnionBrowser

See also this somewhat infamous thread on Tox's cryptographic design[1].

[1]: https://github.com/TokTok/c-toxcore/issues/426

In case with Tox you have to trust in homebrew crypto that was never properly audited (how about that security issue reported by Donenfeld in 2017, which is being tackled only now, sort of?) -- and outdated and outright abandoned clients which were never above, let's say, "beta quality".

it has the new group chat feature (https://github.com/TokTok/c-toxcore/pull/2269)

"If Tox already does onion routing, why use Tox over Tor?"

What an arbitrary criteria to judge a project by. There have been 5 releases in the past year, including a major feature release.

https://github.com/TokTok/c-toxcore/releases

Signal isn't falling behind and Tox is an old service that has had issues with messages being spoofable since day 1

tox https://github.com/TokTok/c-toxcore/issues/426

You could use a Tox front end like qTox or Toxic. It is a fully encrypted end-to-end communication protocol that allows text, voice, and video chat. The github page for the Tox protocol has some useful caveats about the its security.

It links to a bug report discussion where one of the developers states that they don't understand the security properties of tox very well[1].

I find that worrying.

[1] https://github.com/TokTok/c-toxcore/issues/426

All I could find so far was this, https://github.com/OnionBrowser/OnionBrowser/wiki/Traffic-that-leaks-outside-of-Tor-due-to-iOS-limitations. But like I said before that's an onion browser/iOS/WebKit thing so not 100% sure why it still applies inside of TBB. Also not even 100% about that onion browser leak either, https://github.com/OnionBrowser/OnionBrowser/issues/392. It's quite possible that multimedia components simply just increase the attack surface and therefore have been excluded from the safest preset without identifying any specific vulnerability.

iOS (iPhone, iPad): https://onionbrowser.com/

WebRTC leaks can be fixed by disabling JavaScript. See here.

The Android Tor Browser is an official app. The iOS Onion Browser is an unofficial app which is endorsed by the official Tor Project.

You do not have to volunteer your phone when police ask, and you can opt for encrypted messaging apps (Apple’s IMessages with the ICloud syncing turned OFF, or the app Signal, VPN services, browsers ( TOR Browser or Onion Browser, or a extension that blocks trackers (Firefox, Brave, Safari and DuckDuckGo all come with technology that blocks trackers in their extension stores) to obscure your identity while conducting searches and communicating with people.

If you get https://www.torproject.org/ or https://onionbrowser.com/ and some VPN you can talk

Try if you find a solution here https://github.com/OnionBrowser/OnionBrowser/wiki/Help