31–40 of 45 posts
Earlier quoted context omitted.
That doesn't help because the other end can be compromised.
well nothing you can do can stop the other person from leaking your conversations.
When the military issues secure communications devices, it makes damn sure that BOTH SIDES have a secure device.
Earlier quoted context omitted.
> I mean, if you were at all serious about security you'd just not use it. So it's just as insecure. That doesn't make any sense at all. Being "serious about security" doesn't mean letting the perfect be the enemy of the good (which is what you're doing).
It's not good though. It has these flaws I just described. You can avoid those flaws simply by using other software.
What other software has verifiable client builds and a server that stores as little information as Signal?
Give me Matrix protocol or death.
Not everything needs to be super secure. I can sit and talk with a group of friends at a cafe, and anyone can listen to us, and see that we're talking to each other. If we want to talk about something secret we can go somewhere private that's less convinient but more secure. Same thing with messaging online. Everyday nonsense can use whatever app you want, and if there's something you really don't want anyone else kn…
Of course he'd say that, having have a great many questionable decisions around Signal. Honestly I'm inclined to treat this as FUD until the same points are raised by someone with a more impartial (or at the very least, fair) expertise.
Quoted post unavailable.
It is not disingenuous to call data stored in plain text as stored in plain text. Transport security is very different from security at rest.
> Here is the FBI's own datasheet on what message content they're able to obtain with court order from Telegram [2]
Keep in mind that there are other governments with jurisdiction over Telegram that may have access. Additionally, data could be “leaked” by someone. Or, rules or owners of the data could change. Just because they don’t respond to a warrant doesn’t mean that data is safe when stored in plain text.
Quoted post unavailable.
> Messages sent through Telegram are stored on Telegram's servers in their original form, or plain text, without going any sort of encryption to protect private user data, shared Marlinspike. It is not disingenuous to call data stored in plain text as stored in plain text. Transport security is very different from security at rest. > Here is the FBI's own datasheet on what message content they're able to obtain with…
Data is not stored in plaintext. It is stored encrypted, at rest. Period. In the very Twitter thread posted at the top of the comments, Moxie states he uses "plaintext" as shorthand. So he is making up a new definition of plaintext to slander a competitor, something he loves to do and has done, repeatedly, throughout history. The Durovs, on the other hand, do not pull this kind of crap and are content to let their product speak for itself.
Quoted post unavailable.
On 2), just because the FBI can’t just ask for the data doesn’t mean other threat actors don’t have and can’t get readily-available access. I’d also consider the possibility that the document is planted and not fully accurate.
It's this kind of extreme paranoia that taints the entire world of populist secure messaging products, which actively drives me straight in the other direction.
I'm not a state target. But I do use Telegram's Secret Chats for things like discussing how great a trip into the woods on psychedelics can be. That's a great compromise, for me, and most others who use the platform. If you're a state target or you entertain such ideas as state actors trying to get your cat photos, please use another platform.
But there's zero need for this kind of mud-slinging that goes on, all the time, within the world of secure messaging products and platforms. The guy behind GrapheneOS does it, Moxie does it, the entire Signal fanbase does it, even going so far as to apologize for when a piece of their beloved product goes closed source for a year so Moxie can insert some terrible crypto coin he's a major investor of.