Live data from Hacker News

Telegram publishes users' locations online

blog.ahmed.nyc

231–240 of 241 posts

Re: Telegram publishes users' locations online

#231

Earlier quoted context omitted.

If people don't understand that publishing their location makes their location public, that's on them.

It's reasonable to assume that "location" means "approximate location" and not "exact location".

That's true.

Re: Telegram publishes users' locations online

#232

Earlier quoted context omitted.

How do you propose that users trust in their secure messaging app, when safety is the priority? Nothing stops you from putting your location into Telegram to send it. The issue is code that does it for you.

The code is not an issue. Users shouldn't trust that their messaging app does not share their location when they ordered their messaging app to share their location, that makes no sense.

That completely misses the point that there are users for whom location sharing is a strict no-go. Having the feature exist to pose a risk of accidental enabling or default enabling could result in death.

Re: Telegram publishes users' locations online

#233

Earlier quoted context omitted.

How can you know it’s not E2EE? The absence of evidence is not the evidence of absence, or something like that. I agree that closed source is harder to verify, but that’s not the same as insecure.

If you can't verify your messages are E2EE, you have to trust the vendor. But if you trust the vendor, you don't need E2EE to begin with.

There are other threat actors than the vendor looking to compromise the confidentiality of your message.

Re: Telegram publishes users' locations online

#234

Earlier quoted context omitted.

The code is not an issue. Users shouldn't trust that their messaging app does not share their location when they ordered their messaging app to share their location, that makes no sense.

That completely misses the point that there are users for whom location sharing is a strict no-go. Having the feature exist to pose a risk of accidental enabling or default enabling could result in death.

That is not a reason to cripple the default client. Fortunately, unlike Signal and WhatsApp Telegram is not a walled garden and you can use a different client.

There is no problem with location sharing being enabled by default because location sharing is not enabled by default.

Re: Telegram publishes users' locations online

#235

Earlier quoted context omitted.

If you can't verify your messages are E2EE, you have to trust the vendor. But if you trust the vendor, you don't need E2EE to begin with.

There are other threat actors than the vendor looking to compromise the confidentiality of your message.

Those actors don't have the vendor's encryption keys.

Re: Telegram publishes users' locations online

#236

Earlier quoted context omitted.

That completely misses the point that there are users for whom location sharing is a strict no-go. Having the feature exist to pose a risk of accidental enabling or default enabling could result in death.

That is not a reason to cripple the default client. Fortunately, unlike Signal and WhatsApp Telegram is not a walled garden and you can use a different client. There is no problem with location sharing being enabled by default because location sharing is not enabled by default.

Signal is not a garden at all. It is a secure communication app that doesn't risk failing its primary mission by accident or accidental misuse. It's not trying to be a social network.

Re: Telegram publishes users' locations online

#237

Earlier quoted context omitted.

That completely misses the point that there are users for whom location sharing is a strict no-go. Having the feature exist to pose a risk of accidental enabling or default enabling could result in death.

That is not a reason to cripple the default client. Fortunately, unlike Signal and WhatsApp Telegram is not a walled garden and you can use a different client. There is no problem with location sharing being enabled by default because location sharing is not enabled by default.

> not enabled by default

Not now, but mistakes happen and have happened. Thanks for providing such a perfect venue to illustrate my point.

Re: Telegram publishes users' locations online

#238

Earlier quoted context omitted.

That is not a reason to cripple the default client. Fortunately, unlike Signal and WhatsApp Telegram is not a walled garden and you can use a different client. There is no problem with location sharing being enabled by default because location sharing is not enabled by default.

> not enabled by default Not now, but mistakes happen and have happened. Thanks for providing such a perfect venue to illustrate my point.

Yes, this failure mode is not literally impossible. It also isn't literally impossible that Signal accidentally logs all communications to a central server. And as I said: If you want or need to be that careful, just use a different client.

Re: Telegram publishes users' locations online

#239

Earlier quoted context omitted.

That is not a reason to cripple the default client. Fortunately, unlike Signal and WhatsApp Telegram is not a walled garden and you can use a different client. There is no problem with location sharing being enabled by default because location sharing is not enabled by default.

Signal is not a garden at all. It is a secure communication app that doesn't risk failing its primary mission by accident or accidental misuse. It's not trying to be a social network.

Please explain what's the relevant difference between a social network and a communications app in this context. I'm not going to argue about the exact definition of walled garden, I think my point was clear.

Re: Telegram publishes users' locations online

#240

It's a shame that people still use Telegram when Signal is so much better, and has better credentials all around.

Frankly Signal is so horribly buggy with basic features that I wonder had arthurcolle ever used it?

I can’t create a new group, but my friends can.

I don’t see friends that join Signal until I search for them manually by phone number, even though I allow Signal access to my contacts.

”So much better”?!?

Post reply on HN