yashsingh1/xdaforums huggingface dataset:
[Android Software Development] Robbilie:
First to your idea:

YES!

This is also my idea that i miss in wa but i am still thinking of how to manage it...

So this will definatly happen ;)

Now to SSL:

I will try this (takin this question to stack) but i think i will find a dev here also...

Will probably try to focus on this now, guys if you really want to get lightmsg released help me getvthis problem done!

//Robert ;)
[Android Software Development] varun.chitre15:
Any plan to Open source this application in all platforms? This will boost its development and will help embolden itself over Whatsapp in no time.
[Android Software Development] wcypierre:
but wouldn't it cause a lot of overhead?
[Android Software Development] Robbilie:
What do you mean by overhead?

The open source part...

I am a big fan of open source

...well...

Of using open source.

I know this sounds dump but i like to keep the hard work i did, i will encourage anyone who wants to port it to other platforms...

Those people will get my help...

I have to say, the lightmsg server is similar to an api anybody can use so actually anybody can code a client...

But since i use cordova i will port the app myself to all cordova platforms ;)

Answers your question?

Btw i know what the ssl problem is but i am working on fixing it...

The request header is sent in plain text so i think the socket is not configured correctly..

//Robert ;)
[Android Software Development] Robbilie:
Might have fixed the ssl problem but cant test it here in egypt...internet soooo slow...

This noon i am back in germany so wish me best...

There was something wrong in the forked java-websocket project used for the cordova plugin

//Robert ;)
[Android Software Development] Robbilie:
Ok bad news:

I am back @home (well this isnt bad :D ) but the ssl still doesnt work :/

Gonna mail to the developer :S
[Android Software Development] Robbilie:
Demo Video

Would you like to get a demo video tonight? :D

Lke and Shar this post - when we get 1000 likes i will do this :P

Just joking, would you like?
[Android Software Development] frenzyboi:
Why not? After seeing so many updates, would love to see how it is!
[Android Software Development] wcypierre:
I mean the overhead at the handshake part....... Messages may not appear in real time because of the delay in handshake.
[Android Software Development] Robbilie:
But you know, handshake is just for the establation of the connection...?
[Android Software Development] Robbilie:
Guys!

****ing awesome news!

IT IS WORKING!!!!!!!!!!!!!!!!!!!!!!!!!!!!

sry for the many ! :D

just one error we are working on with our cert, any other is just wokring fine :D

maybe we will have this done in the video ;)

and about the handshake again...ssl handshake takes mush longer than without :D

//Robert ;)
[Android Software Development] wcypierre:
but you do know that the handshake does take quite some time right?
[Android Software Development] Robbilie:
Ok so now all of our certs are validated, ws is working with ssl, i cant seem to feel any delay anymore...

i try to make the vid this night, maybe tomorow, because it took us so long to make this work :)
[Android Software Development] frenzyboi:
You're not working alone?
[Android Software Development] Robbilie:
The server i am hosting lightmsg on is not mine but a friends one and he is responisble for handling certs and stuff like that...

he has nothing to do with lightmsg developement itself ;)
[Android Software Development] MatZ69:
If u want i can translate it to portuguese ;)
[Android Software Development] Robbilie:
Just get yourself the Js file i posted earlier ;)

Gonna post an updated version soon :)
[Android Software Development] Robbilie:
I am really unsure why this is happening, but i am experiencing several issues i never had before, this is really strange...

I am really sorry that you have to wait for the video till i fix these problems, gonna keep you up2date :/

//Robert ;)
[Android Software Development] Robbilie:
Success...

Kinda.

Got to bypass the bug, its simply not updating the listviews, nothing more, all data is transmitted but not display correctly (well at all...)

got it working now, partly, just have to call some functions more often....

Maybe a vid tomorow, but i dont want to make an too exact ETA...

//Robert ;)
[Android Software Development] pulser_g2:
I'm a touch confused about how this is more secure than whatsapp...

It's hosted on "a friend's" server (a cast iron assurance of security!), with a closed source front and back-end...

Anyone exploiting something else running on that server, or getting into it via a stolen or brute forced password could result in compromise of the data in memory (ie your messages)?

There doesn't seem to be much discussion about the actual security aspects here... I remain sceptical about how you manage logins better, since it seems based around phone numbers. I presume there's some kind of account too?

It's a nice aim, but there is little discussion here about actual security beyond the basic "it uses ssl". Unfortunately merely using ssl simply gives a false sense of security unless you designed this from the ground up, to be intrinsically safe, with multiple fallbacks and a tried and tested authentication system...

And system trust is an issue - if you want this to take off, I don't think you are going to have much luck hosting it on a friend's server... And when you say you'll move to another server you control, I would have to point out someone else would have valid ssl certificate for the domain, which could be used for MITM. And even then, who knows that the server is set up securely? Has your server side code been set up to sanitise all input, for example?
[Android Software Development] Robbilie:
Finally Someone into this :D

great to finally get some real feedback :D

ok so here we are:

the server admin is not just "a friend" its "the friend", working in business since a few years now and he really nows about security :D

i know this is a bad idea but look into the apple appstore under productivity, find the app called "safe" by phnsft und the top 25...

he knows about security and i (and you should also) trust him :D

the server itself runs in a vm (so the rest of the server couldnt take damage)...

connecting to the server directly is also not possible, beside only beeing able to get there with private keys (yes you have to steal my pc :D) its only reachable by annother server ;)

stealing messages...

that problem also exist for whatsapp...

where i will provide beeing able to delete you whole chat from server :)

where i give the user the possibility to login by phonenumber and uuid (a little bit harder to get than imei...) this is not the suggested way (like its said in the setup) you can bind your account to an email and password (beside your phone number, since this is how to find your friends by contact book...)

ssl provides security as it makes it impossible to use an app like whatsapp sniffer since you cant read out the messages transfered to and from the server...

right? :D

now to the source...

server is closed source and the only thing i may provide (beside you beeing already able when you get the app) is providing an api...

remember, the app is written in javascript and html, the app also runs in web browser ;)

where i probably wont support decoimpiling apks in general, you should know that this makes it even easier to use the client right?

so actually the client is open :D

the server is secure (just missing some if(data == undefined) statements...) and i dont use js' eval() :P

i can access the server when i want, the certs are bought from a certified place, grade one ssl, if you want to you can check it :D

(pm me to get the url, wont post it publicy for now ;) )

hopw i answered all your questions, if i missed some, tell me :D

now i want your answers :D

//Robert ;)
[Android Software Development] pulser_g2:
Answers above. I'll PM you something you might not have considered that isn't a good idea to mention in public :)
[Android Software Development] Robbilie:
just said that he is in security and you shouldnt worry :D

well trusting the developers is probably required for any app right?

SO TRUST ME! :D

dont worry i am not the guy to steal your data, i just want to make some money for my studies witht this app :D

i just want to give the user the possibility to register with one click...

i state in the info text that this is not the secure way and if you want to use lightmsg on multiple devices you NEED an account with email and password auth ;)

about the pw encryption, as i wrote you in the pm, i believe that ssl encryption is enough, beside federal institutions there is no one i know who could decrypt a ssl connection so...

the passwords are send in plain from the client (can also change that to md5) but are encrypted (also md5) stored in the db (not mysql so escaping is in a different sense...) so if some one gets the db, he is forced to brute force all the pws...

never was into salting, i maybe gonna take a look at your way but it requires more than just one message sent and received so...;)

about the cert verification...

this already took us some time to get it work cause android doesnt like https connection for invalid certs and it doesnt like connections with valid certs that have (dunno how its called in english) "übergangs zertifikate"....

so its already a pain to get this to work at all xD

just gonna insert the client checks soon...

//Robert ;)
[Android Software Development] pulser_g2:
It's a nice app idea. SSL is good, I've discussed back-end security for storage of hashed credentials... The issue is that MD5 is not a secure hash these days... It's possible to easily rainbow table it, OR to know the hash, and generate a string that will match it (ref: http://stackoverflow.com/questions/770900/is-md5-less-secure-than-sha-et-al-in-a-practical-sense)

I'd consider salted SHA-1 at least, or SHA-256 if you can :)
[Android Software Development] Robbilie:
gonna think about it, we will pm about that :D
[Android Software Development] Robbilie:
Just put 20$ on my Tropo Account, registered a US phone number and now waiting for them enabling international access for me :)
[Android Software Development] Robbilie:
Finally done :)

Tropo is integrated, I already sent me some SMS :P
[Android Software Development] adity:
Seems promising but.....uh......how do i download it?
[Android Software Development] Robbilie:
Still no downlaod because tropo has problems with german carrier eplus and that is a must have for me
[Android Software Development] bonanza123:
thanks for your efforts, this project seems to be very promising.

You will most probably support push-messages right? are you going to setup you own push service or do you use the google server for the android client? because using the google push server requires installed gapps, which i dont like ;)
[Android Software Development] Robbilie:
Oh well I havent thought much about that but the alternative to googles server (which i wasnt aware of) would be a simple background service right?

so i probably use a bg service
[Android Software Development] bonanza123:
Do you have a timeline for your project? When to see your first release?
[Android Software Development] Robbilie:
WHen these i***** at tropo get this damn route done -.-
[Android Software Development] Robbilie:
Updated Localization

here is a new english translation file, for thoe who already sent me a translation, just update it please :)
[Android Software Development] Aliendex:
Hi, this is the traslation in italian:

EDIT: Ops, see now the new english version, now i translate it

EDIT2: ok, correct it
[Android Software Development] Robbilie:
Gracias :D
[Android Software Development] Aliendex:
If you want more accuracy with the translation i need the contest of the word, but for now i think it's ok ;)
[Android Software Development] GriffinSauce:
Do you want a Dutch translation?

If so, I'll do it on monday.

Also: how's the progress?
[Android Software Development] Robbilie:
Yeah i need a dutch version for sure ;)

Progress:

I am doing some if statements in the server code, noting important because i am still waiting for tropo to fix the issues...

today i got a mail...

"ou provides changed their route, please retry again"

i did...

i didnt receive a single sms out of 9 -.-
[Android Software Development] Robbilie:
Latest Mail from Tropo
[Android Software Development] Ba7rani123:
Finally :D somebody who cares about privacy !! I would like to support this in anyway :highfive: , I hope this becomes even better than whats app :p

I will post my arabic translation, probably after am done with solid explorer maybe by the end of november because I have a few exams right now... :(
[Android Software Development] Robbilie:
Sounds great :)

Still waiting for the Polish translation, arabic would be awesome :)

I am going to have some exams soon too but when tropo response with something constructive i will imidiatly fix LightMsg ;)

//Robert ;)
[Android Software Development] Ba7rani123:
I just checked the translation script, its short and simple so I think I would be able to finish it by tmw. Also its encoded in ANSI I think if we use UTF-8 it would be better because its arabic...
[Android Software Development] Robbilie:
strange i thought it would be utf8...

how can i change it in the other translation files?
[Android Software Development] Ba7rani123:
I use notepad++ , in the top bar >>encoding >> press convert to UTF-8 without BOM.

Btw I saw "You can run LightMsg on multiple Devices and Platforms. A Premium Account is required to make use of this feature." a premium account ? So this app would be for money ? am not against it because its ur right for doing so much work but just asking :D
[Android Software Development] Robbilie:
I am still unsure how the monetazation will look like because i am still in school and i have at least to pay the costs for sending the sms with verification code...

And I would really like to finance my Bachelor in Game Programming with this App :rolleyes:
[Android Software Development] Ba7rani123:
the sms for verification code should be payed by the user thats how whatsapp makes it ;) so u dnt have to pay anything besides the server and time. If u ask for donations am sure u will get more :D than asking people to pay, because when people see "pay" they also look for cracked apps thats the bad thing about making a program :D. on the bright side I think by using a very high secure communication this app will crush whats app in the near future if it has all the same features for free.. and add additional features which requires payment thats the best way to crush :p whats app. Good luck :D I hope you can do both get money from payments and especially crush whats app :D...

I am in my last year of school but I dont know any programming but wish to learn it as a hobby :D
[Android Software Development] Robbilie:
i am in my last year too and i am worried about how to pay the bachelor xD

well i guess whatsapp doesnt handle it by user payment because i recently activated whatsapp with a empty sim card so...:D

i know about looking at cracked apps, i must admit i already did that to but thats the easiest way to get money...and only donations wont be enough for the studies, sadly ;)

we will see, i might give this app away for free to the first 1000 people and then do it for 1 buck or so
[Android Software Development] Ba7rani123:
you live in germany arent the universities cheaper there ? actually I'm thinking about studying medicine there :rolleyes:

I wish you luck :D I think apple users would pay ;) like whats app cant be downloaded from the app store for free now :D but on android its for free :D also they extended my free time :o. I hope this works :D into crushing whats app, maybe later other people could join to make a bigger server for millions of users... I think if you keep a bar :D to gather a specific amount of donations and the bar fills up as people donate, I think you would be able to reach the desired amount ;)

its late now :D I will sleep because I have an exam tmw :o. I will upload the translations :D tmw hopefully.

Good luck :D
[Android Software Development] Robbilie:
You are right, actually in my "county" universities are completly free, no semster fees ;)

But you cant study game programming/design at public universities so i have to go to a private one which costs....a lot!

Well i definatly gonna port it to iOS and i definatly gonna make a paid app there cause you are right, they gonna pay xD

well a bar would be a good idea, i gonna think about an extraordinary monetazation system :D

And if someone knowing reads this:

arent tcp servers limited to 65000 connections at a time? and do websocket servers do so too...?

//Robert ;)
[Android Software Development] pulser_g2:
Yes, a host has a limit to the number of TCP ports that can be open at once - 65534 (16 bits). TCP is the protocol carried over IP (ie. the internet), and it is what allocates communication to a port. I don't know how websockets work though... If each websocket is a TCP port though, then you will hit a limit to the number of open connections you can have.

(hmm looking at the RFC for websockets, it operates over port 80 or 443... So it's abstracted at a higher level on the network stack)
[Android Software Development] Robbilie:
That means...?

In the end i will have 100 ports end the client will loop through to find one not out of capacity? xD
[Android Software Development] pulser_g2:
Try reading the RFC document...

I don't think you'll hit a limit on ports, as multiple web sockets cam coexist on one port.
[Android Software Development] Robbilie:
I guess you guys did it!

Tropo got it to work, now all my eplus and O2 numbers receive the verification code!

You have another carrier? Send me your number and I will send you a test sms :)

//Robert ;)
[Android Software Development] customworx:
Is there any chance to test? :)

cheers,

--------------

all I want is more
[Android Software Development] Robbilie:
as i said i first want to test out some more carriers and check if there are some not working ;)

working and tested:

eplus (germany)

o2 (germany)

t-mobile (us)
[Android Software Development] Ba7rani123:
Btw I checked and whats app use your credit in the first try... if it doesnt work or you dnt have credit they pay for the verification
[Android Software Development] Robbilie:
I guess i gonna try to implement that too ;)

but at tropo, inbbound sms costs the same as outbound sms so ;)
[Android Software Development] Robbilie:
So I know this will make you all hope for the LightMsg release but its actually only for me to get a list of interested persons who will get a early alpha version :)

LightMsg Alpha SignUp

Lets see how many people register :)
[Android Software Development] T3nd3rB33£:
Thank you, this looks really good, cant wait to try. i have just registered ;)

thanx :good:
[Android Software Development] customworx:
I also registered ;) huh.

Can't wait for alpha mate ;)

cheers,

--------------

all I want is more
[Android Software Development] idriff:
ok this is an excelent idea but the only problem i see is turning whatsapp users into lightmsg users and im saying this because there are a lot of other similar apps but not everyone use em... anyway keep the good work :D
[Android Software Development] Ba7rani123:
I registered too :D I hope more people shift here from Whatsapp than to any other app.

Good luck :D !!
[Android Software Development] Robbilie:
you can make it secure while using the whatsapp network because this is what is insecure xD

FUNXMPP their protocol is insecure, you HAVE TO use a different system ;)

alpha rolling out atm ;)
[Android Software Development] frenzyboi:
Gonna register today ^^ been busy for the past few days.
[Android Software Development] Ba7rani123:
About locking the chat, After I lock my screen or press the home button it doesnt lock... So thats insecure... Its should lock after I lock the phone or press the home button. There should be an option... Stil alpha :P
[Android Software Development] Robbilie:
when you dont leave the chat, it doesnt lock, fact :D
[Android Software Development] Ba7rani123:
Yes that was much easier to read xD then my paragraph :P, you wont make it lock if I lock the phone ?
[Android Software Development] Ghostfreak NB:
Seems an interesting thing !

Will keep a check on what's popping up!

Good goin till now! :thumbup:
[Android Software Development] Robbilie:
just found out that phonegap will fire an event when locked so i guess i will integrate it since its only a single line of code ;)

btw sorry when i am not posting the updates here that continually but i am really busy, would be nice if someone would help me with posting change logs and updates...? :)

//Robert ;)
[Android Software Development] Robbilie:
tadaaa....

its done :D

and also hack save since the back button allowed to go back into the last chat even when it was locked...

Definition:

*hack save: its secure as far as i know

xD
[Android Software Development] Robbilie:
as in the latest version you may have recognied the notifications...

i will put in options to disable that but beside this, i found a really amazing tutorial on push notifications which might solve all our notification problems :D

i think i will get this done in the next few hours ;)

//Robert ;)
[Android Software Development] varun.chitre15:
Not compatible with froyo??

Getting Problem Parsing Package :(

Sad :( :/
[Android Software Development] Robbilie:
uhhh poor little minsdk version :(

just changed that in version 0.0.9 ;)

but its experimental so please talk back ;)

i also added a button to directly get to the verification page, in case you get the verification code 2 days later (*cough*india*cough* xD)

so well, next release will be 0.1.0...

please tell me some bigger things you want to be included ;)

not sure how much time i will have during the week :S

still searching for somebody who can help me with the change logs (somebody wrote me on lightmsg bout that but i lost the messages so im sorry, please contact me again :( )

still open for signup:

LightMsg Alpha SignUp

//Robert ;)
[Android Software Development] varun.chitre15:
Ok installed 0.0.9 on froyo!!!! Works fine and good

Signed up and no verification code, its 5 hours now

Where is the button for redirecting to verification page?
[Android Software Development] Robbilie:
the button is under the connect button, on the page wen you launch the app ;)

mail me your number and carrier when there are problems getting the sms ;)

cant tell it too often:

+(country code)(your number)

this scheme is required for the sms service ;)
[Android Software Development] varun.chitre15:
No such button for me ?

Check the attachment, this is what I get when I open the app
[Android Software Development] Terriertheone:
If you still get no code, then you just have to wait or if it is too long since you have registered, you can write robbie a pm with your phone number and your provider. If you already get a code via SMS, you can press the verify button at the start page.

Sorry for my really bad english v:o
[Android Software Development] Robbilie:
terrie is right, press the lowest button there ;)

and please dont pm me because its harder to reply when im on the go, mail me at mailto:lightmsg@eneticum.de ;)
[Android Software Development] Robbilie:
is there somebody who could tell me, why the hell does the gcm service tkae 46 mb ram ?!?!?!

whats wrong there?!
[Android Software Development] Robbilie:
working on the theme engine, a quick preview ;)

of the dark theme :)

http://jquerymobile.com/themeroller/?ver=1.2.0&style_id=20121203-111
[Android Software Development] Ba7rani123:
Looks cool :D but for now the Alpha releases are slow when it comes to pressing a button... but by then it would be great and smooth ;)
[Android Software Development] Robbilie:
Added a change log collected by Ba7rani123 :)

Thank you ;)

//Robert ;)