Earlier quoted context omitted.
Unfortunately, this doesn't mean that it's secure. If someone breaks it, it means it's broken, but if nobody breaks it, it doesn't mean someone else can't break it (or hasn't already).
Agreed, but the tone of the previous discussion was definitely more along the lines of "This could never work, you guys don't know what you're doing." If it proves resilient over 2.5 months of highly motivated attacks (motivated by both the money / "I-Told-You-So" factor), I think that's a fairly strong statement in their favor.
$200,000 to the first person to break Telegram
41–50 of 176 posts
Re: $200,000 to the first person to break Telegram
#42so the winner is allowed to remain completely anonymous, receiving 200k usd payment in btc?
Re: $200,000 to the first person to break Telegram
#43Cryptography Snake Oil Warning Sign #9: Cracking contests. https://www.schneier.com/crypto-gram-9902.html (1999)
> [...] the contest is fair because 1) the algorithm is completely specified, 2) there are no arbitrary definition of what winning means, and 3) the algorithm is public domain
Re: $200,000 to the first person to break Telegram
#44Travel to russia, get big wrench and hit Durov with it until he gives up his password. Win 200k. In all seriousness, im interested to see if anyone can crack this.
Re: $200,000 to the first person to break Telegram
#45PLEASE edit the title saying $200K in Bitcoins and not real $.Otherwise it seems link-bait (misleading).
Re: $200,000 to the first person to break Telegram
#46Most of the concerns people had were Telegram's servers acting maliciously or being coerced into acting maliciously, which is obviously not covered by this contest or the protocol they have designed. It's a bit disingenuous that Telegram is broken but not in a way that this bounty could pay for.
Yeah, it's probably against the rules of the competition and will get you arrested if you try. But I think if someone does break into their central server and wins the competition that way, they should still be paid out.
Re: $200,000 to the first person to break Telegram
#47Earlier quoted context omitted.
Unfortunately, this doesn't mean that it's secure. If someone breaks it, it means it's broken, but if nobody breaks it, it doesn't mean someone else can't break it (or hasn't already).
Agreed, but the tone of the previous discussion was definitely more along the lines of "This could never work, you guys don't know what you're doing." If it proves resilient over 2.5 months of highly motivated attacks (motivated by both the money / "I-Told-You-So" factor), I think that's a fairly strong statement in their favor.
Re: $200,000 to the first person to break Telegram
#48Cryptography Snake Oil Warning Sign #9: Cracking contests. https://www.schneier.com/crypto-gram-9902.html (1999)
Expanded here: https://www.schneier.com/crypto-gram-9812.html#contests
1) They are giving you the source code, protocol, and a tcpdump of all traffic between the chatters. You can even send messages via the protocol to one of the participants. Its not just here is some encrypted data, decrypt it.
2) They are offering a significant amount of money.
Re: $200,000 to the first person to break Telegram
#49This is such a sham. Here, I'll offer $2000 to break my plaintext crypto. Every morning, in the shower, I'll say a secret word. Email me the secret word and I'll send you $2000 in BTC.
Re: $200,000 to the first person to break Telegram
#50This is like putting messages encrypted with ANY encryption algorithm, and ask people to guess the key. This has nothing to do with whether the communication protocol is secure or not.