[jitsi-users] Jitsi encryption defeated by saved chat history log files


#1

I use Jitsi on a PC running Win7 Ultimate. I have three other friends using
Jitsi on versions of Windows ranging from XP to Vista. NONE of us are able
to turn off the 'Log Chat History' feature no matter how many times we
uncheck that box. The result has been that in spite of chatting with full
encryption activated any text files we generate are being saved unencrypted
in the C:\Users\MY PC\AppData\Roaming\Jitsi\history_ver1.0\messages folder
for anyone to read. The only means that I've found so far to close that
leak is to visit the folder regularly and delete all the XML files that I
find there.

What if anything can be or has been done to fix this problem? IMO: As long
as this flaw exists trusting the encryption feature is imprudent.

···

-----Original Message-----

From: Yana Stamcheva [mailto:yana@jitsi.org]

Sent: Thursday, January 12, 2012 10:06 AM
To: Mercy
Subject: Re: [jitsi-users] FW: Welcome to the users@jitsi.java.net mailing
list!

Hi Mercy,

On Jan 10, 2012, at 10:54 PM, Mercy wrote:

Thank you Yana, I appreciate your taking the time to try and help get
this issue the attention it deserves.

So far, there are many things about Jitsi that I find outstanding.
However, even good things can be made better with attention and
effort. Thanks again.

Thank you for the kind words! Absolutely agree:)

Ps. I do not know how to 'follow the list' as you say - is there a
link I can follow that will provide access?

You can subscribe to both "users" and "dev" mailing lists here:
http://jitsi.org/index.php/Development/MailingLists

Thanks again!
Yana

-----Original Message-----
From: Yana Stamcheva [mailto:yana@jitsi.org]
Sent: Tuesday, January 10, 2012 4:17 AM
To: Mercy
Subject: Fwd: [jitsi-users] FW: Welcome to the users@jitsi.java.net
mailing list!

Hi Mercy,

In case you're not following the list, I'm sending my reply personally

also.

Best regards,
Yana

Begin forwarded message:

From: Yana Stamcheva <yana@jitsi.org>
Date: January 10, 2012 1:15:08 PM GMT+01:00
To: users@jitsi.java.net
Subject: Re: [jitsi-users] FW: Welcome to the users@jitsi.java.net
mailing

list!

Hi Mercy,

Thanks for you report!

There were some other similar reports recently, so I created the
following

issue: http://java.net/jira/browse/JITSI-1004.

Best regards,
Yana

On Jan 10, 2012, at 12:28 AM, Mercy wrote:

I'd like to know how to join the discussion?

I have been running the latest version of Jitsi for Windows on my
Win7 Ultimate system.
There are several problems that seem to be common to myself and a
few of my friends who are also using Windows. How and where do I
begin describing what appears to be bugs in the software?

For example: None of us (four users total) have been able to get the
fonts adjustment to work AT ALL. Any effort to change the font size
or type of font results in absolutely no change in font size or
choice but (on the receiving end) the html language corresponding
to the font change suddenly appears in the text window of the
recipient obscuring the message. I mean the message text can be
found dead center in the middle of the html language but it is
otherwise not changed

in either font type, font size, color etc.

Using Jitsi under these conditions, without the capacity to enlarge
the default font size makes reading text exceedingly difficult due
to its small size.


#2

Could you please open an issue on the non-working checkbox?

Thanks,
Emil

···

On 12.01.12 23:10, Mercy wrote:

I use Jitsi on a PC running Win7 Ultimate. I have three other friends using
Jitsi on versions of Windows ranging from XP to Vista. NONE of us are able
to turn off the 'Log Chat History' feature no matter how many times we
uncheck that box. The result has been that in spite of chatting with full
encryption activated any text files we generate are being saved unencrypted
in the C:\Users\MY PC\AppData\Roaming\Jitsi\history_ver1.0\messages folder
for anyone to read. The only means that I've found so far to close that
leak is to visit the folder regularly and delete all the XML files that I
find there.

What if anything can be or has been done to fix this problem? IMO: As long
as this flaw exists trusting the encryption feature is imprudent.

-----Original Message-----
From: Yana Stamcheva [mailto:yana@jitsi.org]
Sent: Thursday, January 12, 2012 10:06 AM
To: Mercy
Subject: Re: [jitsi-users] FW: Welcome to the users@jitsi.java.net mailing
list!

Hi Mercy,

On Jan 10, 2012, at 10:54 PM, Mercy wrote:

Thank you Yana, I appreciate your taking the time to try and help get
this issue the attention it deserves.

So far, there are many things about Jitsi that I find outstanding.
However, even good things can be made better with attention and
effort. Thanks again.

Thank you for the kind words! Absolutely agree:)

Ps. I do not know how to 'follow the list' as you say - is there a
link I can follow that will provide access?

You can subscribe to both "users" and "dev" mailing lists here:
http://jitsi.org/index.php/Development/MailingLists

Thanks again!
Yana

-----Original Message-----
From: Yana Stamcheva [mailto:yana@jitsi.org]
Sent: Tuesday, January 10, 2012 4:17 AM
To: Mercy
Subject: Fwd: [jitsi-users] FW: Welcome to the users@jitsi.java.net
mailing list!

Hi Mercy,

In case you're not following the list, I'm sending my reply personally

also.

Best regards,
Yana

Begin forwarded message:

From: Yana Stamcheva <yana@jitsi.org>
Date: January 10, 2012 1:15:08 PM GMT+01:00
To: users@jitsi.java.net
Subject: Re: [jitsi-users] FW: Welcome to the users@jitsi.java.net
mailing

list!

Hi Mercy,

Thanks for you report!

There were some other similar reports recently, so I created the
following

issue: http://java.net/jira/browse/JITSI-1004.

Best regards,
Yana

On Jan 10, 2012, at 12:28 AM, Mercy wrote:

I'd like to know how to join the discussion?

I have been running the latest version of Jitsi for Windows on my
Win7 Ultimate system.
There are several problems that seem to be common to myself and a
few of my friends who are also using Windows. How and where do I
begin describing what appears to be bugs in the software?

For example: None of us (four users total) have been able to get the
fonts adjustment to work AT ALL. Any effort to change the font size
or type of font results in absolutely no change in font size or
choice but (on the receiving end) the html language corresponding
to the font change suddenly appears in the text window of the
recipient obscuring the message. I mean the message text can be
found dead center in the middle of the html language but it is
otherwise not changed

in either font type, font size, color etc.

Using Jitsi under these conditions, without the capacity to enlarge
the default font size makes reading text exceedingly difficult due
to its small size.

--
Emil Ivov, Ph.D. 67000 Strasbourg,
Project Lead France
Jitsi
emcho@jitsi.org PHONE: +33.1.77.62.43.30
http://jitsi.org FAX: +33.1.77.62.47.31