next »

[randomprofile]

Many of you don’t know, but these last few weeks I’ve been coding a fast, flexible, and secure chatting engine. After 3 weeks I finally got a bug free version (from what I can see), and I’m so happy that I finally finished it… so I just wanna  post it somewhere for now… Sorry if I’m stealing your spotlight Paul   feel free to delete. Background story of “Sleeper’s Encrypted Chat” started when me and a friend were talking about some not strictly legal things, and personally I’m a bit paranoid, so I didn’t really trust the chat we were using as it went through the providers server’s first and was logged, So instead I whipped up 2 programs an encrypter and decrypter using the DES algorithm. After we were done talking, I said to my friend “Chatting like that was really annoying… I’d rather make my own client, and so that’s how I got the idea to make this client/server. You see I have a bad habit of doing this… e.g. I woke up one morning wanting to play alterIWnet, but my bothers profile was selected. Now to change them all you have to do is rename 2 folders and change some text in an INI, but no… instead I start writing a program to do that whole process back and forth for me .

INFO
This engine works kind of like 4Chan, now for those of you who do not know what 4chan is or value your sanity and therefor do not know much about 4Chan. I shall explain it, 4Chan has no log in system therefor a user can choose what ever username they wish... "But Sleeper Cell" you say "wouldn't there be no control" Well no, since admins can still ban using IP's.
SEC (Sleeper's Encrypted Chat) has a fully functioning rcon system... with a bunch of features... including crashing the server but I'm not going to share how to do that just yet... .
The process of the encryption and decryption goes something like this.


Here's screenshots of the client and server


Server
And yes this is really all it is... you can enable tray tips for more "bing".

Client
If you don't like the colors you can change them.



Server Features

• Traytips
• Logging
• Whitelisting
• Server password
• Username IP ban
• Custom port choosing
• Minecraft permission like Rcon system
• MOTD
• Default user which auto sorts

Client Features

• Custom themes
• Private messaging
• Any usernames
• Userlist
• Other stuff...
• Buttons...
• A help thingy...
• Stuff to make this list look longer

Extra Info
Feel free to attempt and break these rules .

• Use %20 for spaces in rcon
• Users cannot use special characters
• So far there is no way to crash the server
• Users cannot have 2 spaces next to each other or spaces in front or behind
• I'm pretty sure using illegal stuff for the templates won't crash client...
• No way to fool rcon

ANYWAY... If you do plan on being in the debugging group and find a bug please tell me in comments... or find a way to exploit/getpast the stuff listed above in extra info
Including ALL the info in the run time error.

Unless it's something like "Program:C:\Windows\System32\Schoolwork\No Really\Im serious\Fine its love letters\REALLY!!!\Fine its porn\"
In which case I'll let it slide...
but please include all the other info including with bit version you're using
If you find an exploit or get past them
Please list step by step how it was done...
Thanks for helping me debug if you want your name in final credits please say so in your bug report
DOWNLOAD

Code:

http://www.mediafire.com/?eem1r4in1axi29f

If you have any good ideas I could, or that you would find cool.. please tell me...

[pspeed]

Wow.  Sounds like a lot of interesting work. 

Just curious, how does it compare to something like: OTR (http://www.cypherpunks.ca/otr/)  That's something I've used in the past to casually keep chats from showing up in server logs and encrypt the conversation between endpoints.

Anyway, I don't mind the off topic post.  I maybe should create a group for them.

[randomprofile]

Well from what  I see... AKA I read a few seconds ago... Umm That one is email and this one is... chat? lol, From what I see here you have control over your security key... but on SEC you don't... Since it's generated every start up.

[pspeed]

We used OTR with jabber but it was a plug-in that worked with various messaging clients.  You enabled it and then all of your messages were encrypted.  If the other person didn't also have it enabled then they'd see OTR { garbage } or something like that.

It was nice because it was client to client.  We never set our own keys or anything... and that's good since the communication is less traceable then I guess.  You could use it over any server which was good because we used it on our work jabber server.

The only reason we stopped using it by default was because it double encoded XML for some reason we never figured out (like five years ago) and as developers we paste XML back and forth to each other quite frequently.

Anyway, I was just curious what the differences were.  I wasn't trying to take away from what you've accomplished.

[randomprofile]

Lol... no it's fine... I personally think this thing is kind of a fail