Re: Monkey's chat zone, a new Teamtalk server
Re: Monkey's chat zone, a new Teamtalk server @12, no, no, no. Your not understanding my point. Passwords should always be hashed. It doesn't matter how your account system works, you should always, always hash passwords. Its far too risky not to do so. URL: https://forum.audiogames.net/post/501213/#p501213 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: Monkey's chat zone, a new Teamtalk server
Re: Monkey's chat zone, a new Teamtalk server Again, if the password was actually set by the user, I'd agree with you. Right now however, it is not, not counting PHP account creaters here since those aren't officially supported by TT. If TT ever added an actual account creater for servers, or some sort of system that could send account creation requests without disclosing the passwords that could be accepted and then automatically created by the server, I'd agree the passwords should be 100 per cent hashed so the plain text versions are unrecoverable. Of course if such a system were to be implemented, there would need to be some sort of reset password system at the user level. Sadly this is all pretty much hypothetical since the dev probably doesn't check this forum, and more than likely wouldn't care even if he did or this were to be brought to his attention via some other means. URL: https://forum.audiogames.net/post/501199/#p501199 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: Monkey's chat zone, a new Teamtalk server
Re: Monkey's chat zone, a new Teamtalk server Again, if the password was actually set by the user, I'd agree with you. Right now however, it is not, not counting PHP account creaters here since those aren't officially supported by TT. If TT ever added an actual account creater for servers, or some sort of system that could send account creation requests without disclosing the password that could be accepted and then automatically created by the server, I'd agree the passwords should be 100 per cent hashed so the plain text version is unrecoverable. Of course if such a system were to be implemented, there would need to be some sort of reset password system at the user level. Sadly this is all pretty much hypothetical since the dev probably doesn't check this forum, and more than likely wouldn't care even if he did or this were to be brought to his attention via some other means. URL: https://forum.audiogames.net/post/501199/#p501199 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: Monkey's chat zone, a new Teamtalk server
Re: Monkey's chat zone, a new Teamtalk server Again, if the password was actually set by the user, I'd agree with you. Right now however, they are not, not counting PHP account creaters here since those aren't officially supported by TT. If TT ever added an actual account creater for servers, or some sort of system that could send account creation requests without disclosing the password that could be accepted and then automatically created by the server, I'd agree the passwords should be 100 per cent hashed so the plain text version is unrecoverable. Of course if such a system were to be implemented, there would need to be some sort of reset password system at the user level. Sadly this is all pretty much hypothetical since the dev probably doesn't check this forum, and more than likely wouldn't care even if he did or this were to be brought to his attention via some other means. URL: https://forum.audiogames.net/post/501199/#p501199 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: Monkey's chat zone, a new Teamtalk server
Re: Monkey's chat zone, a new Teamtalk server @10, actually, password hashing would be beneficial. After an account was added the password should be hashed and irrecoverable. It should (especially) be hashed in the configuration file, which it is not. All passwords in TT are plain-text... that's just not done. Nothing else I've used does that, irrespective of how the account system works. URL: https://forum.audiogames.net/post/501181/#p501181 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: Monkey's chat zone, a new Teamtalk server
Re: Monkey's chat zone, a new Teamtalk server Ethin, I highly, highly doubt passwords would be hashed even in the encrypted version. The way things are right now, an administrator can easily get the password of a user account. This isn't such a big deal with TT because an admin would generally have to make the account and so would have the password anyway, so there wouldn't really be a point in hashing passwords, making them even more difficult to find. URL: https://forum.audiogames.net/post/501120/#p501120 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: Monkey's chat zone, a new Teamtalk server
Re: Monkey's chat zone, a new Teamtalk server I have a few questions about this supposed encryption too:What cryptographic primitives (algorithms and protocols) does the pro version even provide?How does the client and server authenticate the connection to ensure its secure? Does it use TLS or a custom-written protocol (which probably isn't trusted)?Does the pro version offer password hashing, ACLs, etc? If so:What password hashing algorithm does it use? Can existing XML files be "converted"?What ACL system does it use (RBAC, IAM, or something else)? Does that ACL system go above and beyond the existing settings?Has the pro version been professionally audited?I significantly doubt the answer to the third question is a "yes". But I'm curious about the other ones. If the answer to the fourth is a "no" then I'm never paying for it even if I do have the money. URL: https://forum.audiogames.net/post/501076/#p501076 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: Monkey's chat zone, a new Teamtalk server
Re: Monkey's chat zone, a new Teamtalk server @8, its even worse when encryption is free on literally everything else. Even Facebook is moving towards E2E cryptography. The only reason I suspect people even use TT at all is because it has stereo audio support (which is hard to find in VoIP clients because they're typically not designed with that in mind) and because its well-known (specifically in the blind community and nowhere else). Cryptography is not available in any version of TT, even the latest one. Yes, the check box is there but the server configuration wizard does not provide any option for it anywhere. At least, not in the free version. Why should I have to pay for my server to be secure? Do we even know what cryptographic primitives and protocols (i.e. TLS version) it uses? If the dev was stupid enough to implement something as dangerous as TLS 1.0 or, god forbid, SL V2 or SSL V3 then its not even worth a few bucks, let alone a grand. URL: https://forum.audiogames.net/post/501076/#p501076 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: Monkey's chat zone, a new Teamtalk server
Re: Monkey's chat zone, a new Teamtalk server @8, its even worse when encryption is free on literally everything else. Even Facebook is moving towards E2E cryptography. The only reason I suspect people even use TT at all is because it has stereo audio support (which is hard to find in VoIP clients because they're typically not designed with that in mind) and because its well-known (specifically in the blind community and nowhere else). Cryptography is not available in any version of TT, even the latest one. Yes, the check box is there but the server configuration wizard does not provide any option for it anywhere. At least, not in the free version. Why should I have to pay for my server to be secure? Do we even know what cryptographic primitives and protocols (i.e. TLS version) it uses? If the dev was stupid enough to implement something as dangerous as TLS 1.0 or, got forbid, SL V2 or SSL V3 then its not even worth a few bucks, let alone a grand. URL: https://forum.audiogames.net/post/501076/#p501076 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: Monkey's chat zone, a new Teamtalk server
Re: Monkey's chat zone, a new Teamtalk server @8, its even worse when encryption is free on literally everything else. Even Facebook is moving towards E2E cryptography. The only reason I suspect people even use TT at all is because it has stereo audio support (which is hard to find in VoIP clients because they're typically not designed with that in mind) and because its well-known (specifically in the blind community and nowhere else). Cryptography is not available in any version of TT, even the latest one. Yes, the check box is there but the server configuration wizard does not provide any option for it anywhere. At least, not in the free version. Why should I have to pay for my server to be secure? URL: https://forum.audiogames.net/post/501076/#p501076 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: Monkey's chat zone, a new Teamtalk server
Re: Monkey's chat zone, a new Teamtalk server @8, its even worse when encryption is free on literally everything else. Even Facebook is moving towards E2E cryptography. The only reason I suspect people even use TT at all is because it has stereo audio support (which is hard to find in VoIP clients because they're typically not designed with that in mind) and because its well-known (specifically in the blind community and nowhere else). Cryptography is not available in any version of TT, even the latest one. Yes, the check box is there but the server configuration wizard does not provide any option for it anywhere. At least, not in the free version. If the dev even gave a single damn about security he'd implement proper cryptography, password hashing, DTLS and TLS security URL: https://forum.audiogames.net/post/501076/#p501076 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: Monkey's chat zone, a new Teamtalk server
Re: Monkey's chat zone, a new Teamtalk server @8, its even worse when encryption is free on literally everything else. Even Facebook is moving towards E2E cryptography. The only reason I suspect people even use TT at all is because it has stereo audio support (which is hard to find in VoIP clients because they're typically not designed with that in mind) and because its well-known (specifically in the blind community and nowhere else). Cryptography is not available in any version of TT, even the latest one. Yes, the check box is there but the server configuration wizard does not provide any option for it anywhere. TT is the only app I know of that works this way. It violates literally every rule of security that I know of which involves data transmission and storage and probably has insecure code too! URL: https://forum.audiogames.net/post/501076/#p501076 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: Monkey's chat zone, a new Teamtalk server
Re: Monkey's chat zone, a new Teamtalk server As far as I know, that's for the professional edition only. This is ridiculous! Encryption is a web standard, so why isn't it included by default? As far as I know, everything is sent in the clear, including text messages, voice data,video data, account credentials, etc. This is beyond ridiculous! I understand charging for the SDK so you can write your own applications, but restricting encryption like this? Why? URL: https://forum.audiogames.net/post/501073/#p501073 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: Monkey's chat zone, a new Teamtalk server
Re: Monkey's chat zone, a new Teamtalk server As far as I know, that's for the professional edition only. This is ridiculous! Encryption is a web standard, so why isn't it included by default? As far as I know, everything is sent in the clear, including text messages, voice data,video data, etc. This is beyond ridiculous! I understand charging for the SDK so you can write your own applications, but restricting encryption like this? Why? URL: https://forum.audiogames.net/post/501073/#p501073 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: Monkey's chat zone, a new Teamtalk server
Re: Monkey's chat zone, a new Teamtalk server As far as I know, that's for the professional edition only. This is ridiculous! Encryption is a web standard, so why isn't it included by default? As far as I know, everything is sent in the clear, including text messages, voice data,video data, etc. Thisi s beyond ridiculous! I understand charging for the SDK so you can write your own applications, but restricting encryption like this? Why? URL: https://forum.audiogames.net/post/501073/#p501073 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: Monkey's chat zone, a new Teamtalk server
Re: Monkey's chat zone, a new Teamtalk server @2, I think support for encrypted servers was introduced in TeamTalk 5.4. I found this on the subject:http://www.bearware.dk/teamtalksdk/v5.2 … setup.htmlI'm not sure how useful that'll be, but maybe you could follow that to somewhere haha. Or maybe I'm wrong and that's not even what your talking about. URL: https://forum.audiogames.net/post/501060/#p501060 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: Monkey's chat zone, a new Teamtalk server
Re: Monkey's chat zone, a new Teamtalk server Honestly my dude, I'd just make it account based off the bat. It puts the clamp down on a problem that will eventually pop up. And you know it will, this is the internet and people feel comfortable showing their asses online URL: https://forum.audiogames.net/post/501014/#p501014 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: Monkey's chat zone, a new Teamtalk server
Re: Monkey's chat zone, a new Teamtalk server Wel, I wil se how it is going and if someone is beeing an idiot all the time I wil make the server account based. URL: https://forum.audiogames.net/post/501008/#p501008 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: Monkey's chat zone, a new Teamtalk server
Re: Monkey's chat zone, a new Teamtalk server i was on chris server for the long timewel miss you URL: https://forum.audiogames.net/post/500925/#p500925 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: Monkey's chat zone, a new Teamtalk server
Re: Monkey's chat zone, a new Teamtalk server I agree with 2great work URL: https://forum.audiogames.net/post/500885/#p500885 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Re: Monkey's chat zone, a new Teamtalk server
Re: Monkey's chat zone, a new Teamtalk server All I'll say is be careful about letting anyone connect to the server. I thought this could work, but eventually had to resort to user accounts to cut down on the amount of childish behavior, spam, and other crap that was going on. Now it's a much more pleasant experience. People can't come back from a ban by changing IP addresses. If you don't have valid user credentials, you're simply not getting in.The only thing I want now is encryption for the server. It's 2020, so why the hell is the server distributed with absolutely no way to encrypt data? URL: https://forum.audiogames.net/post/500880/#p500880 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
Monkey's chat zone, a new Teamtalk server
Monkey's chat zone, a new Teamtalk server Hello people, I have got my own teamtalk server.This teamtalk server is just the same as all the others, just hang out and have fun.So, if you want to connect, here are the server details:Address: dmsrv.plPorts: 10338 URL: https://forum.audiogames.net/post/500748/#p500748 -- Audiogames-reflector mailing list Audiogames-reflector@sabahattin-gucukoglu.com https://sabahattin-gucukoglu.com/cgi-bin/mailman/listinfo/audiogames-reflector
