Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Russia threatens to block Telegram

reuters.com

Post reply on HN
Print view View original

31–40 of 70 posts

Re: Russia threatens to block Telegram

#31

Post by maimaiml »

tptacek wrote: post #25
raverbashing wrote: post #3

For the amount of haters telegram had when they launched for their purported security failures, it's funny that people are looking to block it instead of silently explore its flaws

"Purported"? http://www.reuters.com/article/us-iran-cyber-telegram-exclus... People have written academic papers about how bad Telegram's underlying crypto is.

GSM is not secure and OTP via SMS is not secure - this is a vulnerability of many many systems, including banks and Bitcoin vendors. This has nothing to with Telegram's crypto.

Re: Russia threatens to block Telegram

#32

Post by mullen »

EGreg wrote: post #30
tptacek wrote: post #25

Earlier quoted context omitted.

"Purported"? http://www.reuters.com/article/us-iran-cyber-telegram-exclus... People have written academic papers about how bad Telegram's underlying crypto is.

Someone needs to publish an exploit, how come I have never seen a single one yet

Because the State actors that would be capable of making that kind of exploit would keep that to themselves.

Re: Russia threatens to block Telegram

#33

Post by EGreg »

Can I ask how can a service be blocked in a country?

Is it because it has centralized servers? What if it was open source and could be hosted on any website?

Then they would have to detect signatures of the protocol and block that, right? At what level, the national level? But the server would be local.

So what does it mean when they say they block Tor for instance?

How can you block something that is run on many domains and servers inside your country?

Re: Russia threatens to block Telegram

#36

Post by digi_owl »

betaby wrote: post #35

Unfortunately looks like P2P messengers are not available/not existent nowadays. Especially on mobile. All we have phone tied centralized apps.

Basic thing is that these messengers do not have persistent connections. They instead register with a notification service that then wakes up the relevant app when a new message comes in.

This is why the likes of MSN Messenger didn't survive the transition to mobile, because they were built around persistent connections.

Re: Russia threatens to block Telegram

#37

Post by [deleted] »

maimaiml wrote: post #31
tptacek wrote: post #25

Earlier quoted context omitted.

"Purported"? http://www.reuters.com/article/us-iran-cyber-telegram-exclus... People have written academic papers about how bad Telegram's underlying crypto is.

GSM is not secure and OTP via SMS is not secure - this is a vulnerability of many many systems, including banks and Bitcoin vendors. This has nothing to with Telegram's crypto.

[deleted]

Re: Russia threatens to block Telegram

#38

Post by admax88q »

maimaiml wrote: post #31
tptacek wrote: post #25

Earlier quoted context omitted.

"Purported"? http://www.reuters.com/article/us-iran-cyber-telegram-exclus... People have written academic papers about how bad Telegram's underlying crypto is.

GSM is not secure and OTP via SMS is not secure - this is a vulnerability of many many systems, including banks and Bitcoin vendors. This has nothing to with Telegram's crypto.

If Telegram claims to be secure but relies on unsecure technologies that makes it easy to circumvent its security isn't that still Telegram's fault?

Just because others are also vulnerable to the same failings doesn't absolve Telegram of responsibility. Don't claim to be a secure platform if your security is easily circumvented.

Re: Russia threatens to block Telegram

#39

Post by admax88q »

nikcub wrote: post #15
jsjsjsjsjsjs wrote: post #11

Earlier quoted context omitted.

Why would such someone would wave flag of security making it the biggest selling point and then go with questionable practices?

Telegram being secure or not is a separate question. Secure messaging is hard, most people when producing secure messaging will produce poor secure messaging - it doesn't mean they've been compromised by a government.

Yes but Telegram continues to avoid fixing flaws that have been pointed out by cryptographers.

It's one thing to get some security wrong because its "hard." It's another to not fix those problems when people explain how and why you did something wrong.

Post reply on HN