[{"_1":2,"_179":-5,"_180":-5},"loaderData",{"_3":4,"_17":18,"_24":25,"_155":156},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7,"_13":14,"_15":16},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","theme","system","contrast","normal","routes/_layout",{"_19":-5,"_20":21,"_22":11,"_23":21},"username","isAskGordonEnabled",true,"showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_26":27,"_28":-5,"_29":11,"_30":11,"_31":32,"_33":34,"_35":-5,"_36":11,"_37":38,"_94":-5,"_95":96,"_142":-5,"_143":11,"_144":21,"_145":11,"_146":11,"_147":11,"_148":-5,"_149":11,"_150":-5,"_151":152,"_153":97,"_154":-7},"canonicalUrl","https://hub.docker.com/r/jak0ub/cli_chatter/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","jak0ub","reponame","cli_chatter","cloudBuildSource","isAutobuildsAvailable","repo",{"_39":40,"_49":50,"_52":53,"_54":55,"_56":11,"_57":58,"_59":60,"_61":62,"_42":34,"_31":32,"_64":65,"_66":51,"_67":68,"_69":70,"_71":72,"_73":-5,"_74":68,"_75":76,"_77":11,"_78":32,"_79":80,"_85":11,"_86":87,"_91":32,"_92":93},"categories",[41,46],{"_42":43,"_44":45},"name","Networking","slug","networking",{"_42":47,"_44":48},"Security","security","content_types",[51],"image","date_registered","2026-08-08T17:35:11.821808Z","description","E2EE Chat, masquerading as a simple Python HTTP server.\n","is_private","last_updated","2026-08-18T20:10:57.625265Z","last_modified","2026-08-08T20:56:12.901389Z","media_types",[63],"application/vnd.oci.image.index.v1+json","pull_count",549,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","# CLI_Chatter (see more at [repo](https://github.com/jak0ub/Cli_chatter) )\n\n## How does it work?\n\n* Server runs as **Simple HTTP Server(shown in images below)**, so no network scan can suggest real intent (Chatting app). Some network analysers may flag this as C2 cause of the E2EE. Only the encrypted server public key is publicly available, so the server doesn't look that blank.\n\n* Every packet has following body **(Encrypted by the server public key, which you obtained safely)**:\n 1) `Unix timestamp` (To make the packet expire after 5s, so replay attacks wont work)\n 2) `Client nickname_ID` (not shared anywhere, unique, 16char long with letters (upper/lower) and numbers included)\n 3) `Client action`\n 4) `Client blob` (Here the client sends the payloads)\n\n* **How does the networking function?**\n * First you get the server public key which is **encrypted using Fernet with the server access_code** so no third-party could tamper with your future communication. If someone does tamper with data being sent, server will detect it and wont respond.\n * After obtaining the server public key, you prove your integrity by decrypting the server public key by access_code entered on the client-side. You than use the public_key to encrypt every other request.\n * The auth works by sending packet with `client action set to auth: {access_code}`. The `client_blob is set to your client public key`, which is also **encrypted using Fernet with the server access_code.** Only with this packet, you use plaintext nickname, which the client wants to register. The server does checks whether the nickname is free or not.\n * After the server responds with client_generated_random_nickname_ID, the client loads room with `action: room_info`. **The unique 16 characters and numbers long nickname_ID is used to prevent session hijacks.**\n * Client than either creates a new room using `action: room_create` or joins a room using `action: room_join`. For both, you specify the room_specific password. The password is never sent to the server, that is why you can use this app even if you dont trust the server.\n * `Room_create` is pretty straightforward, you get the server response which tells you if the room with your specified name was created successfully. You're now the **room_leader, which will respond to new client, with the correct room_password, joining in.**\n * `Room_join` works by `sending the room_leader your client_blob which now contains your new public_key encrypted with Fernet using the room_password.` If room_leader decrypts the key, that means you have the same password and the room_leader sends you room specific pub and private key encrypted using your just sent public key. Otherwise, the room_leader sends the server notification about the wrong password. The server then notifies the guesser. Every nickname has only 3 guesses at all. If they join some room, the value resets, creating doesnt count. **After 3 wrong guesses the nickname is blacklisted and logs will NOT be deleted.**\n * If everyting went as it should, the client joins in and chatting can begin.\n * **If the room_leader quits the room, but the room is not empty, the room_leader role is passed down onto another client in the room.**\n * If the nickname went offline for a TTL_nickname var amount of seconds and hasn't used `client_action: QUIT`, then the nickname is marked as free and all logs about it will be deleted after someone else reqeusts the certain nickname.\n * **Code is equipped with MITM detection to warn you, if someting was tampered with.**\n\n\n> ⚠️ **Warning:**\n> **If client sees: 'Server-side error or possible MITM!', that means the client/server code or the payload was tampered with by third party.**\n\n\n### Room commands:\n```\n/quit to leave the room and remove all logs about your nickname.\n/details to get info about how many clients are connected in the room.\n```\n\n\n> ⚠️ **Warning:**\n> **Make sure to rotate server access_code, which is used to C2S. Ensure length of this access_code to be enough to prevent offline brute forcing (Not a big deal for real time MITM, but if you use the same access_code over and over again, it may cause undetectable MITM for future communications). Every room ensures E2EE by creating yet another password which should be known only by those using that room (Stronly recommended using long password).**\n\n\n\n\n \n \n \n \n

","has_starred","hub_user","immutable_tags_settings",{"_81":11,"_82":83},"enabled","rules",[84],".*","is_automated","permissions",{"_88":21,"_89":11,"_90":11},"read","write","admin","user","storage_size",201905163,"orgData","recentTags",[97],{"_98":51,"_99":100,"_101":102,"_103":104,"_105":106,"_107":108,"_57":131,"_132":100,"_133":32,"_134":63,"_42":135,"_136":137,"_138":128,"_139":131,"_140":72,"_141":21},"content_type","creator",43815945,"digest","sha256:17113edb14a842e62b5e4e5f39ab053307d520adc5b660670c7a4cb851d00f83","full_size",77286224,"id",1263884765,"images",[109,125],{"_110":111,"_101":112,"_113":114,"_115":116,"_117":118,"_119":120,"_121":114,"_122":-5,"_123":104,"_69":72,"_124":-5},"architecture","amd64","sha256:10f5c7970d2fe162153cac232a13b86186b251c17d661cd14083922a97aa3e3e","features","","last_pulled","2026-11-08T00:44:03.717247809Z","last_pushed","2026-08-18T20:10:55.224974282Z","os","linux","os_features","os_version","size","variant",{"_110":126,"_101":127,"_113":114,"_115":128,"_117":129,"_119":120,"_121":114,"_122":-5,"_123":130,"_69":72,"_124":-5},"arm64","sha256:83d9f7f94e3367fbf8cd3466aa87c863e1b2bf978432951d1e8ca6998df2cf1d","2026-11-08T00:44:03.899981742Z","2026-08-18T20:10:55.752869662Z",77348733,"2026-08-18T20:10:57.069785Z","last_updater","last_updater_username","media_type","latest","repository",32077728,"tag_last_pulled","tag_last_pushed","tag_status","v2","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","showSbxRunInCloud","showSbxAgenticPlatformBadge","showSbxLogoOverride","sbxTrademarkText","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"selectedTag","attestationsUrl","routes/_layout.r.$namespace.$reponame.tags",{"_37":157,"_166":167,"_151":177,"_178":11},{"_39":158,"_49":161,"_52":53,"_54":55,"_56":11,"_57":58,"_59":60,"_61":162,"_42":34,"_31":32,"_64":65,"_66":51,"_67":68,"_69":70,"_71":72,"_73":-5,"_74":68,"_75":76,"_77":11,"_78":32,"_79":163,"_85":11,"_86":165,"_91":32,"_92":93},[159,160],{"_42":43,"_44":45},{"_42":47,"_44":48},[51],[63],{"_81":11,"_82":164},[84],{"_88":21,"_89":11,"_90":11},"tags",{"_168":70,"_169":-5,"_170":-5,"_171":172},"count","next","previous","results",[173],{"_98":51,"_99":100,"_101":102,"_103":104,"_105":106,"_107":174,"_57":131,"_132":100,"_133":32,"_134":63,"_42":135,"_136":137,"_138":128,"_139":131,"_140":72,"_141":21},[175,176],{"_110":111,"_101":112,"_113":114,"_115":116,"_117":118,"_119":120,"_121":114,"_122":-5,"_123":104,"_69":72,"_124":-5},{"_110":126,"_101":127,"_113":114,"_115":128,"_117":129,"_119":120,"_121":114,"_122":-5,"_123":130,"_69":72,"_124":-5},[],"canDeleteTags","actionData","errors"]

Digest	OS/ARCH	Compressed size
10f5c7970d2f	linux/amd64	73.71 MB
83d9f7f94e33	linux/arm64	73.77 MB

jak0ub/cli_chatter

Tags for jak0ub/cli_chatter