On Dec 01 2004, at 11:02, sims wrote:


The effort to build and contribute an open-source chat program (or programs) is fantastic, and credit should go to the correct people - so I'm very sorry about getting this wrong.

I'm curious about what security concerns that a chat (or sockets in general) might open up
for the user and what (if any) precautions need to be taken.

This of course varies with the implementation, but talking about chatrev, I can assure you that there is no security risk whatsoever for the client. This is mainly due to the fact that the client never opens a port. However this is about to change, as we are incorporating file transfer (Which needs a accept connection at one end). Still, the opened port is occupied by rev and closed swiftly after finishing transfer, and because of that you won't get any malicious attempt trough.



Also, when setting up a chat for someone who has a firewall (uses a proxy) in place and
the Rev "set the HTTPProxy to host:portNumber" is used, are other security concerns
presented?

no, why should it?


My questions spring from an appalling lack of knowledge of sockets :-/

sims
EuroRevCon  2006!

<>()<>()<>()<>()<>()<>()<>()<>()<>()<>()<>

official ChatRev page:
http://chatrev.cjb.net:8080

Chat with other RunRev developers:
go stack URL "http://homepage.mac.com/bvg/chatrev1.2.5.rev";

_______________________________________________
use-revolution mailing list
[EMAIL PROTECTED]
http://lists.runrev.com/mailman/listinfo/use-revolution

Reply via email to