lockbitchat e4273f5150 Major Security Improvements:
- Enhanced user fingerprinting with WebGL, Canvas, and Audio fingerprinting
- Hardware binding to prevent F5/Ctrl+F5 abuse
- Persistent storage across browser sessions (localStorage + sessionStorage)
- Global demo session counter with 10 session limit per device
- Multi-tab protection (max 2 tabs simultaneously)
- Anti-reset protection with hardware mismatch detection

Demo Session Protection:
- Advanced fingerprint generation with CPU benchmarking
- Enhanced validation with cryptographic verification
- Automatic cleanup and session completion tracking
- Cooldown periods between sessions (1min + 15min completion)
- Weekly partial reset of global counters

Fixes:
- Fixed SessionTimer console spam after connection disconnect
- Added missing registerEnhancedDemoSessionUsage method
- Corrected method calls from generateUserFingerprint to generateAdvancedUserFingerprint
- Implemented proper event handling for connection state changes

WebRTC Improvements:
- Added peer-disconnect, new-connection, and connection-cleaned events
- Enhanced connection cleanup with proper UI notifications
- Fixed SessionTimer state management during disconnections
- Prevented infinite re-rendering and console logging

Performance Optimizations:
- Auto-save persistent data every 30 seconds
- Periodic cleanup of old session data (every 6 hours)
- Memory management for used preimages (10k limit)
- Tab heartbeat system for multi-tab detection

Testing:
- Demo sessions now properly enforce limits
- P2P anonymity maintained (no server validation)
- Compatible with incognito mode restrictions
- Resistant to common abuse techniques
2025-08-16 20:58:42 -04:00
2025-08-16 19:17:32 -04:00
2025-08-13 22:56:29 -04:00
2025-08-16 20:58:42 -04:00
2025-08-13 22:57:38 -04:00
2025-08-11 20:52:14 -04:00
2025-08-16 20:58:42 -04:00
2025-08-16 19:17:32 -04:00
2025-08-16 19:17:32 -04:00

securebit-chat

🔒 World's most secure P2P messenger with Lightning Network integration. End-to-end encryption, pay-per-session model, zero data collection. WebRTC direct connections, quantum-resistant roadmap. Privacy-first communication for the Bitcoin age

🛡️ SecureBit.chat - Enhanced Security Edition 🎯 About the Project SecureBit.chat is a revolutionary P2P messenger that combines:

Military-grade cryptography (ECDH P-384 + AES-GCM 256) Lightning Network payments for sessions Perfect Forward Secrecy with automatic key rotation Zero-trust architecture without servers

Key Features 🔐 Cryptography

ECDH P-384 key exchange AES-GCM 256-bit encryption ECDSA digital signatures Perfect Forward Secrecy Out-of-band verification against MITM attacks

Lightning Network

Payments in satoshis for sessions WebLN support Instant microtransactions Private payments

🌐 P2P Architecture

Direct connection via WebRTC No central servers Impossible to censor No metadata collection

🚀 Quick Start

Open: https://SecureBit.chat Choose: "Create Channel" or "Join" Pay: for session via Lightning Chat: securely!

🔒 Security Cryptographic Algorithms: 🔑 Key Exchange: ECDH P-384 🔐 Encryption: AES-GCM 256-bit ✍️ Signatures: ECDSA P-384 🔄 PFS: Automatic key rotation 🛡️ MITM Protection: Out-of-band verification Security Audit:

All algorithms verified by cryptographers Code open for independent audit Uses only standard WebCrypto APIs Non-extractable keys

🗺️ Roadmap

v4.0 Enhanced Security Edition (current) v4.5 🔄 Mobile & Desktop applications v5.0 📅 Quantum-resistant cryptography v5.5 📅 Group chats v6.0 📅 Decentralized network

🛠️ For Developers Technologies:

Frontend: Vanilla JS + React Crypto: Web Crypto API P2P: WebRTC DataChannels Payments: Lightning Network / WebLN

Local Development: bashgit clone https://github.com/SecureBitChat/securebit-chat.git cd securebit-chat python -m http.server 8000

Open http://localhost:8000

🤝 Contributing We welcome community contributions! How to help:

🐛 Report bugs 💡 Suggest ideas 🔍 Security audit 📖 Improve documentation 🌍 Translations

📄 License MIT License with mandatory attribution ⚠️ Disclaimer SecureBit.chat is provided "as is". Use at your own risk. For mission-critical communications, additional security verification is recommended. 📞 Contacts

🌐 Website: https://SecureBit.chat 📧 Email: lockbitchat@tutanota.com

Description
🔒 World's most secure P2P messenger. End-to-end encrypted, zero-server architecture, quantum-resistant roadmap. WebRTC direct connections, advanced ECDH + DTLS + SAS verification, full ASN.1 validation. Privacy-first communication for the post-surveillance age
Readme MIT 216 MiB
Languages
JavaScript 95.9%
CSS 2.5%
HTML 1.4%
PowerShell 0.2%