Telegram Web Apps for Bots
71–80 of 122 posts
Re: Telegram Web Apps for Bots
#72For me, Midjourney was the killer app which showed that chat apps can be good interfaces for products. It takes away many UI development costs and problems and allows you to focus on the product/backend.
Re: Telegram Web Apps for Bots
#73Be cautious when using Telegram for important matters. I recently examined a situation where confidential messages from high-ranking Moldovan officials were leaked through Telegram. Unlike WhatsApp and Signal, which offer end-to-end encryption by default, protecting your messages even in case of a SIM swap, Telegram does not offer the same level of security. A SIM swap or a breach in their system can lead to message…
1. SIM Swap is a physical device security issue, not something that telegram or any other app for that matter, is responsible for. Telegram already provides cloud password, comments like these wouldn't ever mention it.
2. Telegram using cloud encryption instead of E2EE by default does not make it less secure. In fact, it only makes it secure in a different way. Proponents of WhatsApp, kindly direct me towards an independent audit or research paper that confirms WhatsApp is using E2EE 100% of the time instead of 95% or even 5% of the time. The classic "but WhatsApp has E2EE" argument is as good as me saying that I'm the CEO of Google writing from an alt account. Telegram's encryption, both E2E and Cloud, have been audited by independent researchers. It doesn't take much to find out what's true and what's not.
3. Moxie's claims are extremely biased and misleading to the point that it almost seems like a propaganda against Telegram. I wouldn't want to hear someone who thinks Signal is too good to be on F-Droid and that any encryption aside from his own is the same as plain text.
Re: Telegram Web Apps for Bots
#74Earlier quoted context omitted.
Pity that _using_ telegram is a frustrating, spam filled messaging experience. Nothing nets me as much annoying automated spam as simply having an account there. More frustratingly, disabling messages from unknown contacts doesn’t appear to be a feature.
I wonder why your account is attacked by spam so often. Conversely, I've never had any account get so little spam as my Telegram account. My email gets literally dozens of spam mails per day. Telegram, I'd say less than once per month. Exactly yesterday I thought that I got a spam message, it turns out that the sender is a SpaceX fan and a real interesting human, not the crypto-pushing bot that I had suspected at fir…
Username in telegram is a public identifier that allow anyone to grant the permission to message you.
The other ways to grant this permission are
1. Add contact with phone number (can be disabled in privacy setting)
2. Have a message/forward message somewhere you can see, and the original sender is you. (Identity forward of forwarded message can be disabled in privacy setting)
3. Be in the same group with the target (chat admin can disable member listing)
Notice, this is a one time setup. A account only need to grant this once, and then he can message you at anytime.
Re: Telegram Web Apps for Bots
#75Earlier quoted context omitted.
WhatsApp backs up your encryption key to Google Drive by default, meaning it's far from end-to-end encryption. It's more like end-to-Google-to-end. If you choose to decline this default, your conversation partners probably haven't. Signal had a catastrophic bug that would send random images in your camera roll to random contacts. If you want your private photos sent to your family members, use Signal I guess.
>WhatsApp backs up your encryption key to Google Drive by default, meaning it's far from end-to-end encryption. This is a lie[1]. If you don't enable backups yourself, you loose your messages. You can enable E2E encryption for your backups. WhatsApp is vastly superior to Telegram in terms of E2E encryption. Telegram can read users messages on their servers and they are not even trying to tell their users to enable E2…
I must reiterate that this is a baseless claim because no one can see WhatsApp's source code and going by the track record of Facebook as a company, I'd rather choose to reject this statement than accept it as a possibility.
Re: Telegram Web Apps for Bots
#76Would love to see this platform opened up. I've been recommended by users, but telegram always demands an app install for account creation. App install + mobile number as a login/username is a deal breaker for me. Horrible experience trying to explain why this isn't a sane security model to users.
Because it's primarily a chat app, just like Signal or WhatsApp.
They're more open than the alternatives but they still function with the old app-first philosophy.
Re: Telegram Web Apps for Bots
#77Allowing third-party JavaScript execution on the client is a bold move. They better have both user- and admin-accessible way to disable this.
Re: Telegram Web Apps for Bots
#78Earlier quoted context omitted.
> it's not syncing between devices > Signal is cooler Clearly you haven't tried using Signal on multiple devices. It's terrible currently. Telegram / WhatsApp / etc work great on multiple devices.
(I'm partially utilizing Cunningham's law here) Because all the really security focused apps insist on per-device private keys, so everything has to be re-encrypted by everyone per the other users' device. This mitigates key leakage problems to some extent, but also makes the UX as awful as you describe. I don't understand why nobody (to my knowledge) has yet gone the middle route of having a private key per user . S…
That's what Telegram actually does with their cloud encryption.
Re: Telegram Web Apps for Bots
#79Re: Telegram Web Apps for Bots
#80For me, Midjourney was the killer app which showed that chat apps can be good interfaces for products. It takes away many UI development costs and problems and allows you to focus on the product/backend.