Live data from Hacker News

Show HN: TrashEmail – Telegram-based disposable mail service

github.com

31–40 of 105 posts

Re: Show HN: TrashEmail – Telegram-based disposable mail service

#31

Earlier quoted context omitted.

Privacy-wise Whatsapp is probably better due to E2E.

How do you know it has E2E? The app itself is closed source. As far as anyone is concerned, it's all claims. How do they handle the private keys, for example? Any backdoor?

WhatsApp reverse engineering happens all the time. There's news channels out there with people dedicated to being the first to announce references to upcoming features every update.

The same can be said of Signal or any other chat application distributed through Google Play. How do you know the binary corresponds to the source? Good luck getting reproducible builds on Android or iOS. If you want to be sure your chat app is secure, you need to review and compile the code every time. And, of course, you need the knowledge and skills of a good cryptographer to determine hidden backdoors in the algorithms.

Whatsapp is reasonably secure, as long as you don't upload your unencrypted chats to Google Drive (the backup functionality). Telegram, with E2E enabled, hasn't been proven insecure enough despite its weird custom crypto scheme. However, WhatsApp brings E2E to group chats where Telegram needs manual configuration in private chats to do so. If we want to bring E2E to the masses, WhatsApp is the best option for now.

I'm hoping Matrix will change this or Telegram will implement proper crypto, but until then, WhatsApp is probably the best option we have.

Re: Show HN: TrashEmail – Telegram-based disposable mail service

#32

Earlier quoted context omitted.

Privacy-wise Whatsapp is probably better due to E2E.

How do you know it has E2E? The app itself is closed source. As far as anyone is concerned, it's all claims. How do they handle the private keys, for example? Any backdoor?

It uses the Signal Protocol/Axolotl Ratchet and Open Whisper Systems helped them integrate it, which is a big reputational stake from very trustworthy people.

Re: Show HN: TrashEmail – Telegram-based disposable mail service

#33
Remember the old Zawinski's Law? "Every program attempts to expand until it can read mail. Those programs which cannot so expand are replaced by ones which can."

In 2020, r/mail/chat/g

Telegram is such a great messenger to integrate with. It is basically just "import telegram" and you're almost done. I built the Telegram integration for Histre in just a weekend: https://histre.com/blog/take-notes-with-telegram/ This lets you take notes on Telegram either directly or via share intent, so that you can save links etc from your phone without installing another app. I think I also watched a movie and went for a hike that weekend, so it's not like it was an intense weekend of furious typing.

I wish other messengers made it as easy. I'd love to integrate with Signal, and probably will do so soon, as a good number of my users are on Signal. But the number of steps listed just makes it easy to put it off for later.

If you haven't integrated Telegram with your app yet, I'd suggest you look into it. You'd be surprised how easy it is.

I think the sane and simple API approach is going to make Telegram eat all other messengers. But I'm a programmer, so maybe I just want that to be true ;)

Re: Show HN: TrashEmail – Telegram-based disposable mail service

#34
post #16

Telegram is such an underappreciated platform. It has many features other platforms lack, is reasonably privacy-friendly, more so than fb/whatsapp/etc, but not enough to sacrifice features or UX. The have an API ind both official and unofficial clients for almost all platforms, including command line and native, non-electron Windows (UWP). The client API is not easy to use, as crypto and similar features are involved…

> It has many features other platforms lack, is reasonably privacy-friendly Telegram still has no E2E encryption by default and their official desktop client dont have it either. So it's worth nothing if no one use it. It's not that I have much trust into proprietary fb code, but there are certainly better apps privacy-wise out there.

  >> reasonably privacy-friendly
  > Telegram still has no E2E encryption by default
Right, but e2e encryption is a small part of "privacy".

Not leaking your personal data, identity or telephone number, and with whom you communicate is often more important.

Re: Show HN: TrashEmail – Telegram-based disposable mail service

#35
First, this bot doesn't work. I was using this https://etlgr.io for disposable emails and it worked no stress.

My Outlook app kept getting closed by android and I kept missing emails. So I created a disposable etlgr email to get bank notifications. Created a rule in Outlook.com to send balance notifications anytime money enters or leaves my account.

Also a few times when discussing with clients, sent the email title to the bot.

A few months back, there was one "a page a day" book reading service that came on hacker news. Created an email just for it.

Another to receive manga notifications.

Etlgr recently became a subscription service and that was the end.

MY OTHER USES FOR TELEGRAM

RSS feed reader for sites. Also created a private channel for my friends that posts 100% free udemy courses. It's been completely hands off for over a year now.

Why Telegram Rocks

My telegram account is accessible from 4 different devices - Two phones and two laptops (6 client apps).

Could switch off the phone with the number registered to telegram and I'll still be able to chat. With WhatsApp this is impossible.

I could lose my sim card, both phones and one laptop. But if I still have access to one client, I can login on fresh devices.

This is because once you're registered, telegram sends the OTP to the installed clients instead of SMS.

One awesome stuff they do is that after a successful logon on a new device, the notification is broadcast to all logged in client apps. Deleting the notification in one device will not remove it in others.

Making it harder for account takeovers to happen stealthily.

Also newly logged in clients cannot terminate older sessions.

CHATTING

The ability to edit already sent text in telegram is awesome. Make a mistake? Correct it.

Telegram does not leave a "deleted" stamp when you delete a message unlike WhatsApp.

In telegram you can delete everything in your chats from the other person's device.

WhatsApp allows you to delete your chats from the other person's phone. Telegram tops that by allowing you to delete the other person's words from their own phone!

Without this, quoted chats will have empty placeholders alerting the other party.

FILE SIZE Limit

Up to 1.5GB per file

Telegram Rocks.

Re: Show HN: TrashEmail – Telegram-based disposable mail service

#36

Earlier quoted context omitted.

Sorry if it’s off-topic but how does it know if the bathroom window open or not? Did you build some kind of device and connect it to the home assistant?

I'm happy to answer. :) I'm using a ready-made sensor for this. It's the same system I'm using for temperature and humidty measurement. It's proprietary [0], but someone reverse engineered it [1], so I can send the data via MQTT to home-assistent. I then wrote an automation using Node-RED. It get's triggered when the window opens. After an initial timeout of five minutes, it will compare the inside temperature and hu…

Thanks for the answer! I didn't know there are already ready-made sensors for such use-cases (though I'm not familiar with Home Assistant itself either, only heard of what it is).

Re: Show HN: TrashEmail – Telegram-based disposable mail service

#37
post #27

Earlier quoted context omitted.

Sorry if it’s off-topic but how does it know if the bathroom window open or not? Did you build some kind of device and connect it to the home assistant?

You can easily integrate Zigbee devices. The Aqara or Xiaomi door/window sensors for example are cheap and pretty nice.

Thanks! I didn't know Xiaomi made such sensors too. They are definitely one of the brands that I recognize.

Re: Show HN: TrashEmail – Telegram-based disposable mail service

#38

Earlier quoted context omitted.

Privacy-wise Whatsapp is probably better due to E2E.

How do you know it has E2E? The app itself is closed source. As far as anyone is concerned, it's all claims. How do they handle the private keys, for example? Any backdoor?

Open sourcing whatsapp would solve precisely zero of these problems. There’s no way to know if a bugdoor is a backdoor or just a mistake.

Re: Show HN: TrashEmail – Telegram-based disposable mail service

#39

Earlier quoted context omitted.

How do you know it has E2E? The app itself is closed source. As far as anyone is concerned, it's all claims. How do they handle the private keys, for example? Any backdoor?

WhatsApp reverse engineering happens all the time. There's news channels out there with people dedicated to being the first to announce references to upcoming features every update. The same can be said of Signal or any other chat application distributed through Google Play. How do you know the binary corresponds to the source? Good luck getting reproducible builds on Android or iOS. If you want to be sure your chat…

Reproducible builds are a red herring, they do nothing to defend against bugdoors.

Re: Show HN: TrashEmail – Telegram-based disposable mail service

#40

Telegram is such an underappreciated platform. It has many features other platforms lack, is reasonably privacy-friendly, more so than fb/whatsapp/etc, but not enough to sacrifice features or UX. The have an API ind both official and unofficial clients for almost all platforms, including command line and native, non-electron Windows (UWP). The client API is not easy to use, as crypto and similar features are involved…

> non-electron Windows (UWP)

Oh? I thought it was Qt. I don't want to seem like I'm complaining for nothing as it's definitely much better than, say, Slack client, but I still feel like the Windows client is a bit "out of place". Like the task bar context menu looks different from all the other menus for other apps in there, with rounded corners etc.

Post reply on HN