Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

TDLib – Build Your Own Telegram Client

telegram.org

Post reply on HN
Print view View original

41–50 of 101 posts

Re: TDLib – Build Your Own Telegram Client

#41

Post by mtgx »

fwdpropaganda wrote: post #20
lozenge wrote: post #8

Telegram has a poor security record, with homegrown encryption algorithms and no end to end encryption by default.

You're just repeating something that you read on HN. Entirely false.

Are they allowing you to have accounts that don't depend on your phone number yet? I think last I checked you could only login with your phone number, which I consider extremely insecure, especially against a nation state agent (you'd think the Telegram team would care more about that, considering where they come from - and in fact, I believe there were some reports of Russian government hacking people like this with the help of national carriers, too).

Re: TDLib – Build Your Own Telegram Client

#42

Post by zimpenfish »

mtgx wrote: post #41
fwdpropaganda wrote: post #20

Earlier quoted context omitted.

You're just repeating something that you read on HN. Entirely false.

Are they allowing you to have accounts that don't depend on your phone number yet? I think last I checked you could only login with your phone number, which I consider extremely insecure, especially against a nation state agent (you'd think the Telegram team would care more about that, considering where they come from - and in fact, I believe there were some reports of Russian government hacking people like this with…

> (you'd think the Telegram team would care more about that, considering where they come from)

That assumes the Telegram team aren't part of the nation state apparatus, surely.

Re: TDLib – Build Your Own Telegram Client

#43

Post by cabaalis »

Shourai wrote: post #3

The iOS version of Telegram and Telegram X are currently not available in the Appstore. It should be resolved soon: https://twitter.com/durov/status/958990254396059648

There should be a notification "your app is about to be removed, please contact us to solve the issue." (I'm assuming there wasn't because of other horror stories I've read.) If my business's service was suddenly down for 2-3 days due to some externality I couldn't immediately correct, it would be a death knell.

Re: TDLib – Build Your Own Telegram Client

#44

Post by zingmars »

veeti wrote: post #31
orbifold wrote: post #21

I like how they do very good engineering (just straight C++, Swift, with little to no external dependencies) with a very small team of apparently very talented people. Most of their products are typically owned by one or two people. It's also pretty smart of them to make all of the clients available as open source and keep the server implementations private. This way they don't have to license QT for example.

Behold, 12283 lines of very good engineering: https://github.com/DrKLO/Telegram/blob/e9e40cb13ea942b148b25...

Looks to be UI related stuff, some of which looks automatically generated to some extent, some parts look boilerplate. Having files with many LoCs can be unavoidable when the system you're building on encourages design like that (.NET comes to mind, wouldn't be surprised if Android was like that as well), and does not necessarily mean that it's badly engineered.

Re: TDLib – Build Your Own Telegram Client

#45

Post by zimpenfish »

calgoo wrote: post #40
Anon1096 wrote: post #18

Earlier quoted context omitted.

Well for me, I prefer the way telegram has decided to handle end to end encryption. Let's face it - me and my friends have no use for it, and never will. Our threat model just doesn't really care about actors like the NSA hacking us. If they wanted there's tons of other ways to get our information any (like Google or Facebook accounts). But not being encrypted gives us features not possible otherwise, like url prefet…

I really don't understand the "hate" for Telegram on HN. I understand that its not (allegedly) as secure as signal for example, but like you said, state actors etc have other ways of getting that info (see xkcd [1]). I personally use Telegram when talking to my wife because it lets me have a client on every platform i use and the messages follow me. I could do that with some of the other platforms as well, but im alr…

> So to me personally, Telegram is a useful middle ground between great security and usability.

Same. I tried Signal a couple of years ago but the iOS app was prone to crashing, corrupting messages, and just plain losing words. Not really what you want.

> The framework is really fun and easy to use.

Yeah, I've done a couple of bots for it and it's pretty handy.

Re: TDLib – Build Your Own Telegram Client

#47

Post by 0x445442 »

veeti wrote: post #31
orbifold wrote: post #21

I like how they do very good engineering (just straight C++, Swift, with little to no external dependencies) with a very small team of apparently very talented people. Most of their products are typically owned by one or two people. It's also pretty smart of them to make all of the clients available as open source and keep the server implementations private. This way they don't have to license QT for example.

Behold, 12283 lines of very good engineering: https://github.com/DrKLO/Telegram/blob/e9e40cb13ea942b148b25...

createView... just awesome.

Re: TDLib – Build Your Own Telegram Client

#48

Post by fwdpropaganda »

zimpenfish wrote: post #42
mtgx wrote: post #41

Earlier quoted context omitted.

Are they allowing you to have accounts that don't depend on your phone number yet? I think last I checked you could only login with your phone number, which I consider extremely insecure, especially against a nation state agent (you'd think the Telegram team would care more about that, considering where they come from - and in fact, I believe there were some reports of Russian government hacking people like this with…

> (you'd think the Telegram team would care more about that, considering where they come from) That assumes the Telegram team aren't part of the nation state apparatus, surely.

Do you have any reason to assume they are? Of course, other than the fact that the founder is _RUSSIAN_ gasp

Re: TDLib – Build Your Own Telegram Client

#49

Post by mintplant »

orbifold wrote: post #36
veeti wrote: post #31

Earlier quoted context omitted.

Behold, 12283 lines of very good engineering: https://github.com/DrKLO/Telegram/blob/e9e40cb13ea942b148b25...

Well the c++ code is pretty good... In any case it works much better than the signal app on android.

I've never had any problems with Signal for Android. With Telegram, though, I once woke up to find myself added to what looked like the first 500 groups in their database, alphabetically sorted. My phone was buzzing continuously from the stream of notifications. Had to remove myself from them one by one.

Re: TDLib – Build Your Own Telegram Client

#50

Post by ttsda »

mtgx wrote: post #41
fwdpropaganda wrote: post #20

Earlier quoted context omitted.

You're just repeating something that you read on HN. Entirely false.

Are they allowing you to have accounts that don't depend on your phone number yet? I think last I checked you could only login with your phone number, which I consider extremely insecure, especially against a nation state agent (you'd think the Telegram team would care more about that, considering where they come from - and in fact, I believe there were some reports of Russian government hacking people like this with…

There is an optional two-factor login (phone+password).
Post reply on HN