Live data from Hacker News

‘I will show you how safe Telegram is’

twitter.com

61–70 of 206 posts

Re: ‘I will show you how safe Telegram is’

#61
post #50

Earlier quoted context omitted.

I do not use Telegram: what SMS code?

the Two Factor auth to validate is really you after guessing/knowing your pass from a previous leak

It's worse. 2FA is optional and SMS code is the first (and default) auth method.

Re: ‘I will show you how safe Telegram is’

#62
post #53
post #44

Earlier quoted context omitted.

Everyone in that group also has to manage to keep that 1 GB secret.

also how do you ensure the messages haven't been corrupted in transit

You can never ensure that your communication channel isn’t corrupted. But with a one time pad you’ll just receive unreadable garbage then. You‘re also free to sign messages before encryption.

Re: ‘I will show you how safe Telegram is’

#64
post #57

I monitor Russian war channels and some people there insist on using Telegram only for Russian military people. If you use Whatsapp, Ukrainian officers will get all chats from NATO. Telegram accounts of opposition were hacked by belarus police as well. It's known and documented. My takeaway is that for truly private chat one should write his own software using simple crypto without all those fancy clients. Ideally ju…

I don't think anyone can whatsapp chat. Somehow, whats app is the most reliable end-to-end encrypted messaging service today and many just don't know.

WhatsApp is closed source. For what it's worth, the protocol itself might be impenetrable, but the client itself has access to your decrypted messages and can still decide to send them back to Facebook without your knowledge.

The system that depends on a good will and "trust me bro" is not secure by default, even if Meta/Facebook were the most trustworthy company in the world under the most honest legislation.

Re: ‘I will show you how safe Telegram is’

#65

Earlier quoted context omitted.

Actually really hacked. What you said also happens of course, but hacks are routine as well. Happened to 2 people I know personally. They do it by intercepting the sms code at the cell operator level.

I do not use Telegram: what SMS code?

[deleted]

Re: ‘I will show you how safe Telegram is’

#66
post #62
post #53

Earlier quoted context omitted.

also how do you ensure the messages haven't been corrupted in transit

You can never ensure that your communication channel isn’t corrupted. But with a one time pad you’ll just receive unreadable garbage then. You‘re also free to sign messages before encryption.

if an adversary xors their guess of part of your message (a crib) and what they want it to say with the one-time-pad ciphertext, they can make it say what they want if the guess is right; this is a general vulnerability with unauthenticated stream ciphers

if they guess wrong, there's a little unreadable garbage in the message, but in many scenarios they only have to guess right once

so you need some kind of message authenticator like hmac or poly1305, but as i understand it, these lack the absolute security guarantee of a one-time pad

Re: ‘I will show you how safe Telegram is’

#70
post #54

Earlier quoted context omitted.

telegram isn't e2e encrypted (unless you use secret chats which nobody does (and those do not support more than 2 participants))

Not only that but they've made suspicious ties with the Kremlin that resulted in it being unblocked in Russia and have a mysterious source of funding after TON collapsed.

I'd love to hear more about this.

I thought Pavel Durov (founder) isn't really welcome in Russia. He seems to have a left a lot of money on the table with his previous company (VK) to get out of there.

The interpretation of events with telegram I've always heard has been that Russia tried to block telegram but doing so blocked most of the rest of useful services as telegram was hosted on e.g. AWS. This meant that real work was slowed. In the end, they gave up because continuing the block would mean crippling their access to the internet.

I have found it weird that pro-putin russians still use telegram. But it seems like a lack of discipline which is quite the plague of russian military.

I'd genuinely love to get good information on this as I use telegram as it is a great piece of technology and wouldn't if it were collaborating with russian government. I think a lot of rumors do not distinguish between russian people and russian government. And that's pretty damaging.

Post reply on HN