c-toxcore VS privacytools.io

See also this somewhat infamous thread on Tox's cryptographic design[1].

[1]: https://github.com/TokTok/c-toxcore/issues/426

In case with Tox you have to trust in homebrew crypto that was never properly audited (how about that security issue reported by Donenfeld in 2017, which is being tackled only now, sort of?) -- and outdated and outright abandoned clients which were never above, let's say, "beta quality".

it has the new group chat feature (https://github.com/TokTok/c-toxcore/pull/2269)

"If Tox already does onion routing, why use Tox over Tor?"

What an arbitrary criteria to judge a project by. There have been 5 releases in the past year, including a major feature release.

https://github.com/TokTok/c-toxcore/releases

Signal isn't falling behind and Tox is an old service that has had issues with messages being spoofable since day 1

tox https://github.com/TokTok/c-toxcore/issues/426

You could use a Tox front end like qTox or Toxic. It is a fully encrypted end-to-end communication protocol that allows text, voice, and video chat. The github page for the Tox protocol has some useful caveats about the its security.

It links to a bug report discussion where one of the developers states that they don't understand the security properties of tox very well[1].

I find that worrying.

[1] https://github.com/TokTok/c-toxcore/issues/426

FYI, Privacy Guides is a shitshow. It was formerly privacytools.io[1], and in 2019, the creator[2] of privacytools.io stopped contributing[3] and a new contributor[4] immediately focused on donations[5], became the admin[6] and took control[7] of most assets, including donations but excluding the domain and Twitter account[8]. In 2021, the creator of privacytools.io launched a new privacytools.io[9] and added affiliate links[10], and the Privacy Guides team shut down r/privacytoolsIO rather than return it[11] to the creator. Like I said, a shitshow.

[1] https://github.com/privacytools/privacytools.io

[2] https://www.reddit.com/user/BurungHantu

[3] https://github.com/privacytools/privacytools.io/commits?auth...

[4] https://github.com/jonaharagon

[5] https://github.com/privacytools/privacytools.io/commits?afte...

[6] https://github.com/privacytools/privacytools.io/commit/4b60a...

[7] https://redd.it/tuo7mm

[8] https://twitter.com/privacytoolsIO

[9] https://redd.it/pxtw2y

[10] https://www.reddit.com/r/VPNTorrents/comments/raftz6/i_made_...

[11] https://redd.it/qk7vn0

Yes, we know you're still mad we won't add Threema. It was thoroughly discussed in our old organization.

en 2019: Signal has copious privacy issues making it unfit for privacytools.io endorsement.

Signal is just another walled garden and has a lot of other problems too: https://github.com/privacytools/privacytools.io/issues/779

Or the fork which is much more active these days https://docs.searxng.org/

In the past it Lukol served Google Ads: https://github.com/privacytools/privacytools.io/issues/1557#...

Never heard of it. Fastmail apparently never made it on to the privacytools.io list for its geographical location. See here for some other recommendations. There are also malifence and posteo. I use posteo and mailbox.org. The main two weird things about posteo is that there is no spam folder (detected spam is rejected with no option to change this), and you can't use a custom domain (because they don't want to have any information on you/your name). Mailbox.org can optionally reject spam and lets you use your custom domain. I like it a lot so far.

The correct link is https://github.com/privacytools/privacytools.io/pull/657

Worth noting the "admins" of that site wrote the content for it, check for yourself https://github.com/privacytools/privacytools.io/commits/master BurungHantu hadn't written anything really since 2016.