71–80 of 299 posts
I'm using Telegram as my main messaging system but I hope they'll open source everything. That's the only way to fully audit the service. Telegram is not too bad but has too many grey areas at this moment.
Client and protocol are open source. What more do you need?
Can anyone familiar with the matter say how secure is the 4-emoji verification code?
33 bits of entropy seems quite low to me.
https://core.telegram.org/techfaq#q-how-are-voice-calls-auth...
From their API doc: https://core.telegram.org/api/end-to-end/voice-calls#key-ver...
> Party A will generate a shared key with B — or whoever pretends to be B — without having a second chance to change its exponent a depending on the value g_b received from the other side; and the impostor will not have a chance to adapt his value of b depending on g_a, because it has to commit to a value of g_b before learning g_a.
> The use of hash commitment in the DH exchange constrains the attacker to only one guess to generate the correct visualization in their attack, which means that using just over 33 bits of entropy represented by four emoji in the visualization is enough to make a successful attack highly improbable.
Very good. Great even. But there is a problem. Whatsapp has already won the chat/calls app war. Watch it grow massivly in the next year, i promise. Mostly due to incompetence of MS and Google.
But seriously how do they pay their bills? (I know VK brothers are super rich) There are bots that relay huge media files It's probably (imo) the fastest & most complete cloud based chat app Everything.. Literally everything you share can be retrived over the cloud & and now calling That must be super expensive infrastructure? No investors no monetization
Telegram is losing millions each year, paid by Pavel Durov, its founder. "If you look at Telegram today, every month it burns over $1 million. It might seem that it’s just going nowhere, but if you want to come up with business model, you need to get to a decent size first. We have 62 million users at the moment, which is enough userbase to attract third-party developers to create products on top of your platform. Yo…
Also, experience has taught that users are fickle and that products that are free that transition to paid products quickly lose their users.
This is your periodic reminder that Telegram uses sketchy crypto and should be avoided.
Signal has this as well. I trust their security (personal bias), but unfortunately the call quality is a non-starter at the moment.
They've rolled out a new version of video/voice calls this month[1] which supposedly improved the quality quite a bit. I haven't personally tried it yet, though. [1]: https://whispersystems.org/blog/signal-video-calls/
In a world full of bloated Electron HTML5 / JS "desktop apps", I'm very happy to see Telegram on Windows is a native app (Qt). It feels so incredibly responsive compared to everything else.
In a world full of bloated Electron HTML5 / JS "desktop apps", I'm very happy to see Telegram on Windows is a native app (Qt). It feels so incredibly responsive compared to everything else.
In a world full of bloated Electron HTML5 / JS "desktop apps", I'm very happy to see Telegram on Windows is a native app (Qt). It feels so incredibly responsive compared to everything else.