Live data from Hacker News

Telegram publishes users' locations online

blog.ahmed.nyc

221–230 of 241 posts

Re: Telegram publishes users' locations online

#221
This reminds me of a study done more than 5 years ago on this exact problem.

https://www.wired.com/2016/05/grindr-promises-privacy-still-...

Gay Dating Apps Promise Privacy, But Leak Your Exact Location

Researchers in Kyoto demonstrate for WIRED how they can precisely track the locations of people using Grindr, Hornet, and Jack'd despite features meant to hide them.

The mentioned research paper is here: https://arxiv.org/pdf/1604.08235.pdf

Re: Telegram publishes users' locations online

#222

Triangulation is often used incorrectly instead of trilateration as in this article. Since the author is dealing with distances and not angles it’s trilateration. https://gis.stackexchange.com/questions/17344/differences-be...

Exactly, it should be trilateration. This problem is a very old and known in many location-based apps, which has been reported years ago. https://www.wired.com/2016/05/grindr-promises-privacy-still-...

Gay Dating Apps Promise Privacy, But Leak Your Exact Location

Re: Telegram publishes users' locations online

#223

Earlier quoted context omitted.

it's a privacy issue. Users who enable the feature don't understand that are basically publishing thier latitude longitude online. Which can be resolved into a home address.

the warning message tells them _exactly that_.

The message posted upthread (https://i.imgur.com/PDnMmQV.png) definitely does not say it will publish your location/address. It says people will be able to view your "profile".

Re: Telegram publishes users' locations online

#224

Earlier quoted context omitted.

Telegram uses the Signal protocol? How do you propose Telegram give their users the ability to expose their location to other people without exposing their location to them?

How do you propose that users trust in their secure messaging app, when safety is the priority? Nothing stops you from putting your location into Telegram to send it. The issue is code that does it for you.

The code is not an issue. Users shouldn't trust that their messaging app does not share their location when they ordered their messaging app to share their location, that makes no sense.

Re: Telegram publishes users' locations online

#225
post #69

Earlier quoted context omitted.

Out of curiosity, how can end-to-end encryption be verified when both the clients and the servers are closed-source?

How can you know it’s not E2EE? The absence of evidence is not the evidence of absence, or something like that. I agree that closed source is harder to verify, but that’s not the same as insecure.

If you can't verify your messages are E2EE, you have to trust the vendor. But if you trust the vendor, you don't need E2EE to begin with.

Re: Telegram publishes users' locations online

#226
post #85
post #41

Earlier quoted context omitted.

Signal is terrible. I use the app still, but it’s horribly buggy. The disappearing messages, a hallmark feature, is fundamentally broken in some way that I can’t fully comprehend. Totally unreliable. Telegram is better in every way... except security.

I'm curious as toileting what you see as "horribly buggy" and what brokenness you see in disappearing messages? I use Signal on iOS, and it's pretty much flawless. Extremely rare for me to even hear friends (many of which I communicate with using Signal) talking about problems, I vaguely recall having something go wrong a long time back, but can't even recall what it was now, only that it went away and started workin…

The expiring messages fail in hilarious ways, all the time. Things like a few random messages from a prior day that are funny out of context all by themselves.

If I open signal on my laptop sometimes it does this ridiculous “time lapse” where it strolls through messages one at a time.

Sometimes all the messages just randomly wiggle on my screen. No idea why.

I get that security verification thing all the time. All the time.

Got a new phone late last year and it wouldn’t sync.

Sticker packs will rearrange themselves at random.

I could go on for ages. It is hilariously buggy.

Re: Telegram publishes users' locations online

#227
post #189

It's a shame that people still use Telegram when Signal is so much better, and has better credentials all around.

It's a shame that every time that Telegram is mentioned, Signal advocates feels the need to let everybody else know how superior Signal is supposed to be compared to everything else. I don't have anything against Signal itself, but this aggressiveness and arrogance is really putting me off. Has this became some kind of religion? Do you people realize that you are not the exclusive bearer of Truth, and that maybe, jus…

How was my statement arrogance? Stating a fact isn't arrogance, no matter what people say. It's a fact. Saying "it's a shame that people litter when trashcans are available" shouldn't merit a response of "I really hate how these anti-littering people say it's a shame that people litter. I would rather they appeal to my sense of equanimity." Give me a break, please.

Telegram has been implicated in a number of privacy scandals, and then their responses critique the authors of the indictment rather than actually criticizing the arguments themselves. Signal, even up to the recent critiques by Cellebrite, immediately responds and them discusses the merits of the claim.

Re: Telegram publishes users' locations online

#228
post #155
post #122

Earlier quoted context omitted.

https://www.engadget.com/2019-11-29-signal-ipad.html Works on tablets and desktops too. Just set it up as a linked device.

Well, I tried to set it up ob my parents iPad and it demanded that they also own a smartphone with the same phonenumber. They owned feature phones so they've been blocked. Telegram paired just fine and works on any number of devices without linking them together and worrying about connectivity/battery for the main device.

Yes. It uses the phone number as the user identifier, and the non-phone versions assume that you have a phone that you're using as the primary device, and any other devices are secondary. The primary device is mostly because tablets and desktops don't have a phone number to use as an identifier. The battery/connectivity status of that device doesn't matter a whit after the secondary devices are setup.

Re: Telegram publishes users' locations online

#229

Earlier quoted context omitted.

it's a privacy issue. Users who enable the feature don't understand that are basically publishing thier latitude longitude online. Which can be resolved into a home address.

If people don't understand that publishing their location makes their location public, that's on them.

It's reasonable to assume that "location" means "approximate location" and not "exact location".

Re: Telegram publishes users' locations online

#230
post #223

Earlier quoted context omitted.

the warning message tells them _exactly that_.

The message posted upthread ( https://i.imgur.com/PDnMmQV.png ) definitely does not say it will publish your location/address. It says people will be able to view your "profile".

And even if it had said "location" it'd been reasonable to interpret that as

"approximate location, don't worry we have thought a bit about security",

i think.

Post reply on HN