Bleep vs Tox

[Blocker]

Hi guys,

I'm not sure if I'm comparing an orange with an apple

Do you have any experience with this instant message software?

BitTorrent Labs - BitTorrent Bleep

https://tox.im/

[Instab]

tox looks better to me because they provide the source. however i wasn't able to find any info about the project leads which is something a trustworthy project should provide.

[Sazzy]

True, but not that hard to find out if you whois the domain

and

https://github.com/irungentoo/toxcor...s/contributors



Don't forget though that source means nothing if you don't a) read through the entire source and b) compile it yourself. Clicking the binaries link is in no means safe. If build agents do weird stuff and rewrite small parts during build, it's still not trustworthy. Apparently even truecrypt is at the point where it's not sure if it's still trustworthy and they're talking about just redo-ing the whole thing from scratch.

[Instab]

Don't forget though that source means nothing if you don't a) read through the entire source and b) compile it yourself

of course but it's still much better than not releasing the source at all
whether the users make use of it or not is a different chapter ...

[Sazzy]

I was mostly trying to point out that in these cases it's best to compile from source, even if you don't understand the code :)

[tr-cht-fx-242p]

... even if you don't understand the code :)

coding is like that. More often than not original developers don't understand what they write and hence we have bugs, crashes and security issues

[Sazzy]

coding is like that. More often than not original developers don't understand what they write and hence we have bugs, crashes and security issues

i think it's rather alarming if you stop understanding your own code... That's usually the point where you should notice something in the project is going wrong
most bugs should (hopefully) be attributed to forgetfulness, distraction, not fully understanding the requirements (which isn't the same as the actual code), ...

The code itself should be transparent at all times, imho. If it's not, a refactoring phase should be planned in and fixed asap.



As a small side note, I was actually referring to non-programmers that want to use these privacy related programs :)

[Instab]

I was mostly trying to point out that in these cases it's best to compile from source, even if you don't understand the code :)

yeah, by that you eliminate the risk of having a compromised build. unless the source itself has backdoors

[Sazzy]

yeah, by that you eliminate the risk of having a compromised build. unless the source itself has backdoors

True, but it being open source and hopefully popular, someone would've probably pointed that out as it isn't that large of a project. :)
Well.. hopefully :) *puts on tinfoil hat*

[Blocker]

If you guys installed Tox please add me ,

Tox ID: 99BFA628109242472FE510D30F240087A909F043982BBCFD8F E0639B4F2C1649CDC599AAC13A

[Sazzy]

I'm still that lame-o on skype