Files
securebit-chat/SECURITY_DISCLAIMER.md

208 lines
6.9 KiB
Markdown
Raw Normal View History

# Security Disclaimer and Terms of Use
Improve chat UI for secure channel creation pages Fix iOS PWA installation and improve cross-platform compatibility - Fix manifest.json paths (use relative paths with ./ for iOS) - Update Apple Touch Icons structure to use organized folders - Add missing 180x180px icon requirement for iOS - Fix apple-mobile-web-app meta tags configuration - Add viewport-fit=cover for iPhone X+ notch support - Fix missing showInstallButton() method causing TypeError - Add complete showInstallBanner() and createInstallBanner() methods - Implement proper hideInstallPrompts() functionality - Add iOS-specific installation instructions modal - Fix event handling for install prompt dismissal - Restructure PWA icons into platform-specific folders: - ./logo/pwa/ios/ for Apple Touch Icons - ./logo/pwa/android/ for Android launcher icons - ./logo/pwa/windows11/ for Microsoft Tiles - Update manifest.json to reference correct icon paths - Add browserconfig.xml for Windows 11 tile configuration - Improve PWA registration script without conflicts - Add proper error handling for offline functionality - Integrate with existing PWA modules (install prompt, offline manager) - Add update notifications for new app versions - Enhanced detection for iOS Safari vs other browsers - Improved installation flow for different platforms - Better user feedback for unsupported installation methods - Added fallback instructions for manual installation - Add comprehensive PWA support detection - Implement proper iOS standalone mode detection - Add console logging for installation status tracking - Include developer utilities for PWA management Tested on: iOS Safari, Chrome, Edge, Firefox Resolves iOS PWA installation issues and improves overall PWA experience."
2025-08-19 21:54:17 -04:00
## 🔒 SecureBit.chat Enhanced Security Edition v4.01.222
### Important Legal Notice
**READ THIS DISCLAIMER CAREFULLY BEFORE USING SECUREBIT.CHAT SOFTWARE**
---
## 📋 Overview
SecureBit.chat is an open-source, peer-to-peer encrypted messaging application designed to support **freedom of speech** and **privacy rights**. This software implements military-grade cryptography and is provided as-is for educational, research, and legitimate communication purposes.
---
## ⚖️ Legal Disclaimer
### Developer Liability
**THE DEVELOPER(S) OF SECUREBIT.CHAT ASSUME NO RESPONSIBILITY OR LIABILITY FOR:**
- Any misuse, illegal use, or criminal activities conducted using this software
- Compliance with local, national, or international laws and regulations
- Any damages, losses, or consequences resulting from the use of this software
- The security or privacy of communications in jurisdictions where encryption is restricted
- Any vulnerability, security flaw, or compromise that may occur despite our security measures
### User Responsibility
**BY USING SECUREBIT.CHAT, YOU ACKNOWLEDGE AND AGREE THAT:**
1. **Full Legal Responsibility**: You bear complete and sole responsibility for how you use this software
2. **Compliance Obligation**: You must ensure your use complies with all applicable laws in your jurisdiction
3. **Risk Acceptance**: You understand and accept all risks associated with using encrypted communication software
4. **No Warranty**: This software is provided "AS IS" without any warranties, express or implied
---
## 🌍 Jurisdictional Considerations
### Encryption Laws Vary Globally
- **Some countries restrict or prohibit** the use of strong encryption
- **Export controls** may apply in certain jurisdictions
- **Corporate/government networks** may have policies against encrypted communications
- **Users must verify** local laws before using this software
### High-Risk Jurisdictions
**Exercise extreme caution** in countries with:
- Restrictions on encrypted communications
- Surveillance laws requiring backdoors
- Penalties for using VPN/encryption software
- Authoritarian internet controls
---
## 🎯 Intended Use Cases
### ✅ Legitimate Uses (Encouraged)
- **Journalism**: Protecting sources and whistleblowers
- **Human Rights**: Organizing and advocacy in oppressive regimes
- **Business**: Corporate communications requiring confidentiality
- **Personal Privacy**: Private communications between individuals
- **Research**: Academic study of cryptographic protocols
- **Education**: Learning about secure communication systems
### ❌ Prohibited Uses (Illegal/Unethical)
- Any illegal activities under applicable law
- Criminal conspiracies or planning illegal acts
- Harassment, threats, or abuse of others
- Circumventing legitimate law enforcement (where legally required)
- Distribution of illegal content
- Financial crimes or fraud
---
## 🔐 Security Limitations
### No Absolute Security
**UNDERSTAND THAT:**
- No cryptographic system is 100% unbreakable
- Implementation bugs may exist despite best efforts
- Social engineering and endpoint security remain vulnerabilities
- Quantum computing may eventually threaten current encryption
- Traffic analysis may reveal communication patterns
### User Security Responsibilities
**YOU MUST:**
- Keep your devices secure and updated
- Use strong, unique passwords
- Verify security codes through out-of-band channels
- Understand the risks of your communication environment
- Follow operational security (OPSEC) best practices
---
## 🏛️ Freedom of Speech Support
### Our Mission
SecureBit.chat is developed to support:
- **Article 19** of the Universal Declaration of Human Rights
- **Freedom of expression** and **right to privacy**
- **Resistance to censorship** and mass surveillance
- **Protection of journalists, activists, and dissidents**
### Ethical Use Commitment
We believe privacy and free speech are fundamental human rights, but:
- These rights come with responsibilities
- Freedom of speech does not include freedom from consequences
- Users must respect the rights and safety of others
- Illegal activity is never justified, regardless of privacy tools used
---
## 📊 Technical Security Information
### Current Implementation
- **ECDH P-384** key exchange
- **AES-GCM 256-bit** encryption
- **ECDSA P-384** digital signatures
- **Perfect Forward Secrecy** with key rotation
- **MITM protection** via out-of-band verification
- **Zero server architecture** (pure P2P)
### Known Limitations
- WebRTC fingerprinting possibilities
- Browser-based implementation constraints
- Dependency on Web Crypto API security
- No protection against compromised endpoints
- Traffic analysis potential despite encryption
---
## 🔄 Future Development
### Post-Quantum Roadmap
- **v5.0**: CRYSTALS-Kyber/Dilithium implementation
- **Long-term**: Resistance to quantum cryptanalysis
- **Ongoing**: Security audits and improvements
---
## 📞 Contact and Reporting
### Security Issues
- **Responsible disclosure**: Email security issues to the development team
- **CVE reporting**: We participate in responsible vulnerability disclosure
- **Bug bounty**: Consider implementing for critical security findings
### Legal Concerns
- **Law enforcement**: Contact appropriate legal authorities in your jurisdiction
- **Abuse reports**: Report illegal use to relevant authorities
- **Compliance questions**: Consult with legal counsel
---
## 📜 License and Terms
### Open Source License
SecureBit.chat is released under the **MIT License**, providing:
- Freedom to use, modify, and distribute
- No warranty or liability guarantees
- Full source code transparency
- Right to audit security implementation
### Terms Acceptance
**By downloading, installing, or using SecureBit.chat, you acknowledge:**
1. You have read and understood this disclaimer
2. You accept full responsibility for your use of the software
3. You agree to comply with all applicable laws
4. You understand the security limitations and risks
5. You will not hold the developers liable for any consequences
---
## ⚠️ Final Warning
**SECUREBIT.CHAT IS A POWERFUL TOOL FOR PRIVACY AND FREE SPEECH**
With great power comes great responsibility. Use this software ethically, legally, and with full understanding of the risks and responsibilities involved.
**Remember**: The strongest encryption cannot protect against poor operational security, compromised endpoints, or illegal activities that attract law enforcement attention.
---
## 🛡️ Declaration of Intent
This software is created to:
- **Protect human rights** and fundamental freedoms
- **Support legitimate privacy** needs in an increasingly surveilled world
- **Advance the field** of secure communications
- **Educate users** about cryptography and privacy
**It is NOT intended to facilitate illegal activities or harm others.**
---
*Last Updated: 08.07.2025*
Improve chat UI for secure channel creation pages Fix iOS PWA installation and improve cross-platform compatibility - Fix manifest.json paths (use relative paths with ./ for iOS) - Update Apple Touch Icons structure to use organized folders - Add missing 180x180px icon requirement for iOS - Fix apple-mobile-web-app meta tags configuration - Add viewport-fit=cover for iPhone X+ notch support - Fix missing showInstallButton() method causing TypeError - Add complete showInstallBanner() and createInstallBanner() methods - Implement proper hideInstallPrompts() functionality - Add iOS-specific installation instructions modal - Fix event handling for install prompt dismissal - Restructure PWA icons into platform-specific folders: - ./logo/pwa/ios/ for Apple Touch Icons - ./logo/pwa/android/ for Android launcher icons - ./logo/pwa/windows11/ for Microsoft Tiles - Update manifest.json to reference correct icon paths - Add browserconfig.xml for Windows 11 tile configuration - Improve PWA registration script without conflicts - Add proper error handling for offline functionality - Integrate with existing PWA modules (install prompt, offline manager) - Add update notifications for new app versions - Enhanced detection for iOS Safari vs other browsers - Improved installation flow for different platforms - Better user feedback for unsupported installation methods - Added fallback instructions for manual installation - Add comprehensive PWA support detection - Implement proper iOS standalone mode detection - Add console logging for installation status tracking - Include developer utilities for PWA management Tested on: iOS Safari, Chrome, Edge, Firefox Resolves iOS PWA installation issues and improves overall PWA experience."
2025-08-19 21:54:17 -04:00
*Version: Enhanced Security Edition v4.01.222*
**USE AT YOUR OWN RISK AND RESPONSIBILITY**