TorChat is a security hazard

Ansgar Wiechers tor at
Wed Feb 24 12:07:02 UTC 2010

On 2010-02-23 Paul Campbell wrote:
> "TorChat" is an inofficial chat client for the Tor network.  I like
> the idea behind "TorChat": easy to use, usb-stick portable and runs on
> Windows 98.
> These are the problems I see with "TorChat":
> 1. No authentication.  There is no way you can know for sure that the
> person you are chatting with is the person you chatted with yesterday.
> Tor's hidden services don't make any such guarantees about incoming
> connections. The clients stay anonymous.

Which, if you think about it, is the whole point of anonymizing

Ansgar Wiechers
"Avoid third party code whenever possible.
Take the time and reinvent the damn wheel."
--The Peon's Guide To Secure System Development
To unsubscribe, send an e-mail to majordomo at with
unsubscribe or-talk    in the body.

More information about the tor-talk mailing list