TorChat, anonymous and secure messaging and file transfers
Using the Tor network of virtual tunnels, TorChat is a small, portable and open-source IM client that allows for completely anonymous and secure communications and file sharing. It works on both Windows and Linux.If you're on Windows, all you have to do is download, unzip, and run torchat.exe. It will automatically connect to the Tor network -- which will take a few minutes -- but then it operates just like a normal IM client. Once your name goes green on the contact list, you're good to go. You can add contacts (you will need their random string of 16 numbers and letters), and give them nicknames. You can even set an avatar and give yourself a short profile description. File sharing is simply a matter of dragging and dropping a file into a chat window.
Feature-wise, TorChat isn't remarkable -- instead, it's the simplicity and ease of configuration that makes TorChat so awesome. Because it's portable and your buddy list is stored in plain text, you can put yourself into the buddy list -- and then zip it up and put it on your website. If someone wants to communicate with you securely, they only have to download the bundle, run torchat.exe, and they'll be securely and anonymously talking to you within minutes. Read the TorChat site for more configuration info.
The Tor network is already used extensively for sensitive communication, such as whistleblowing, and with TorChat it makes the process a two-click affair. If you're in a line of work that requires you to keep your sources protected, TorChat is the best and easiest solution that we've seen.












Comments
7
Subscribe to commentshazardFeb 9th 2011 7:41AM
Some choice tidbits ..
Important: Tor 0.2.2.x-alpha is badly broken, hidden services don't work at all (for all known definitions of "work"). Tor 0.2.1.x (the current stable release) is also broken but not nearly as bad.
The Tor binary which is bundled with TorChat is taken from the official Tor-0.2.1.29
It is essential that you don't lose the private_key file belonging to your ID because the one who finds it will be able to pretend to be you. Using a tool like TrueCrypt is a good idea when you intend to use TorChat on a portable USB drive as these devices can easily be lost or stolen.
jfjbFeb 9th 2011 4:21PM
Secure communication, yes.
IM, yes.
But no file sharing as 99% of the people know it.
Tor is not designed for that purpose nor with this idea in mind.
Look it up and you'll understand. If not, I'm sorry for you.
Net Neutrality is a two-way street, folks.
My two-cents, of course, for I may be wrong.
Sebastian AnthonyFeb 11th 2011 4:38AM
@jfjb If you're talking about communication that leaves Tor, then yeah -- but this, apparently, only occurs inside the Tor network -- it never leaves. Something to do with 'hidden services'?
JimFeb 10th 2011 10:29PM
Tor is a honeypot these days anyway . . easily intercepted . . the FBI runs everal exit nodes and scoops up information there . . if you're gonna use Tor and attract such attention to yourself at least encrypt your data . .
This article goes into more depth: http://www.thecortex.info/2010/12/how-to-prevent-device-fingerprinting_10.html
Sebastian AnthonyFeb 11th 2011 4:38AM
@Jim See my reply above. Apparently TorChat never leaves the Tor network -- it's a hidden service. It doesn't use exit nodes.
jimdandy2012Feb 11th 2011 5:42AM
@Sebastian Anthony: ahh, That's really interesting. I obviously didn't read the Torchat page :[ So the users themselves become the Tor entry and exit points and directly connect to the Tor network?
Encrypted end-to-end . . does this method not destroy the 'anonymous' aspect of using Tor . . and it seems like they're still using entry nodes, or is that only when using a bridge? . . are the .onion keys stored on a database that exists outside of the Tor network? What if this database was (is) compromised?
I must admit I don't know nearly enough about networking to accurately judge the usefulness of this program without the advice of someone more knowledgeable . . .
It seems counter-productive to me though, if you know you're being monitored you shouldn't try to communicate va Torchat as whoever is monitoring you could simply copy your key file from your machine . . alternatively, if you're not being monitored you may soon be after using Torchat! Best to use archaic yet unique semantic coding methods and use the most popular, congested communication software around . . . just my 5c :]
Here's the page that describes Tor's 'Hidden Services', if anyone can explain it to me better I'd be much obliged! http://www.torproject.org/docs/hidden-services.html.en
Sebastian AnthonyFeb 11th 2011 10:35AM
@jimdandy2012 Heya!
I don't know any more than what it says on the TorChat page, and also some rudimentary knowledge about Tor itself.
To be honest, I don't know if Tor has been breached by governmental agencies. I'll have to look into it.