351–360 of 367 posts
Earlier quoted context omitted.
https://github.com/DrKLO/Telegram https://github.com/telegramdesktop/tdesktop
THAT is not the server, its like saying Firefox is opensource so Facebook is too, thanks and no thanks for the link's.
Earlier quoted context omitted.
Sadly, Signal neglects user experience, and as a result people around me all tend to migrate to WhatsApp. They don't care that they are uploading their entire contact list to Facebook — "death before inconvenience".
Signal cares so much about UX that they're starting to agitate security/privacy diehards. They've implemented features like stickers and message reactions that the diehard community calls "useless". And they recently implemented PINs with the intention of storing your encrypted profile and settings for easy recovery on a new device. I applaud the direction they've taken. These are the kinds of features that will acqu…
Earlier quoted context omitted.
Telegram should maybe just use proper encryption first.
Can someone explain to me why MtProto is not considered proper encryption? Genuinely asking, not challenging. At least since version 2.0 it seems it's using AES encryption: https://core.telegram.org/mtproto/description
Earlier quoted context omitted.
For Signal desktop on Linux to not require that I validate my mobile device randomly to read my encrypted messages. If it used GPG then this wouldn't be a problem.
What does this dialog look like? I don’t recall having seen that in my Signal desktop on Linux or Mac.
Earlier quoted context omitted.
Can someone explain to me why MtProto is not considered proper encryption? Genuinely asking, not challenging. At least since version 2.0 it seems it's using AES encryption: https://core.telegram.org/mtproto/description
By default its not e2e encrypted and if you want to use e2e you lose lots of capability. That is simply not acceptable in a modern messenger.
Earlier quoted context omitted.
Absolutely agree. I really wish Telegram would get off the phone number system, especially after the embarrassing hack in Brazil. It's not explicitly Telegram's fault, but if your primary authentication method is insecure it's at least a little bit your fault. Phone numbers are NOT safe. I don't know why SMS MFA is even a thing, they're worse than passwords. When you use phone numbers or SMS for security, you are put…
> especially after the embarrassing hack in Brazil What happened?
The biggest drawback with Signal for protesters is that it exposes the user's phone number to everyone else in groups (just like WhatsApp does). There is no way to even hide the fact that you have an account on Signal. I can add phone numbers by enumeration into my contacts and Signal will show who among my contacts is on it. If the authorities don't use tactics like they did in Hong Kong, the protesters may be safe…
Earlier quoted context omitted.
https://duckduckgo.com/?q=facebook+whatsapp+covid+forwarding... Pick any version of the story. Or read their blog post: https://blog.whatsapp.com/Keeping-WhatsApp-Personal-and-Priv... How do they know a message is forwarded? The encryption is meant to make identical plaintexts encrypt to different ciphertexts, so obviously they must be leaking the forwarding status in unencrypted parts of the message. And why is an e…
I see. Given this clarification, I would argue that your original claim was misleading.
Today, Signal is claiming their encryption means the only data they have to give to government is date of install and last use. In the past they also claimed WhatsApp uses the same cryptography as them, at least for messages. These two claims cannot both be true. If there's some incredibly subtle detail that means deliberately exposing forwarding metadata in WhatsApp but not Signal they should really clarify that because it's not something I've ever seen a discussion of, and it doesn't follow from the cryptography they're using.
Earlier quoted context omitted.
By default its not e2e encrypted and if you want to use e2e you lose lots of capability. That is simply not acceptable in a modern messenger.
Speaking as someone who regularly uses private chats, what capability?