Live data from Hacker News

Telegram Middleman Bot – Push Notifications as easy as POST

github.com

21–29 of 29 posts

Re: Telegram Middleman Bot – Push Notifications as easy as POST

#22

Telegram really deserves more attention than it gets. It has the largest feature set, best multi-platform support with true desktop clients, awesome/fast mobile apps and a large part of the code is open source. What's not to love? Just that none of my friends use it :/

I've been using Telegram for about a year now and after a long fought battle, I was able to get all my friends onto it.

Truly the best group-chat platform I have used. It works extremely fast, and feels more polished and focused than whatsapp.

Whatsapp has too much going on, the fact that they store images/videos on your phone, and when you switch to different client or a different device your chat history does not follow with you. (I know you can "backup" and then "import" chats, but I mean come on.. thats a lot of work, not to mention you miss out on messages sent in between the switch)

And the most impressive Telegram? The search! Oh man the search... I have no idea how Telegram can index and search hundreds of thousands of messages INSTANTLY and take me back to a conversation I had over a year ago without so much as a delay.

Pavel, CEO of Telegram must be burning through money, but I really do hope they last.

Re: Telegram Middleman Bot – Push Notifications as easy as POST

#23
post #14

Earlier quoted context omitted.

And while I know we are an endangered species, I have to say their support for Windows 10 mobile is top notch. I find their app is better than Whatsapp. Too bad the network effect is a thing, and also their approach to crypto might put you off.

> approach to crypto might put you off It doesn't, anymore than whatsapp. Whatsapp says they have end-end encryption. Has anyone verified it independently? They say they use Signal's tech. Has anybody verified that the app doesn't just take screenshots of the screen and send them to facebook for data mining? When your app is closed source, all claims about security and encryption are meaningless, unless some solid au…

Same could be said of Telegram. Plus, we know their encryption is not really that great because no real encryption expert will stand behind Telegram's encryption and Telegram says "Trust us" when it comes to the subject of their encryption.

Signal tech is open source, can be checked and has been checked. I am pretty sure that if Whatsapp was lying about using the Signal encryption libraries, word would have leaked out of Whatsapp by now. On top of that, I would trust Moxie 100 times more than I would of the owner of Telegram.

Plus, the idea that Whatsapp is taking screen shots and sending it to Facebook is pretty silly. It would be really simple for them to have the messages copied; one going to true receiver and one going to the Facebook servers. There is no need for elaborate spying by Whatsapp, it would be really simple for them to spy on you if they wanted to.

* I am not calling the owner of Telegram dishonest, but in the Moxie vs Pavel Durov debate, I am going with Moxie.

Re: Telegram Middleman Bot – Push Notifications as easy as POST

#24
Shameless plug: I did something similar earlier this year[1]. But instead of running the bot locally, I run it on Google App Engine to provide an HTTPS API. I also have an Android app to call the API to forward Android notifications.

My motivation is a little bit different. I made this because Telegram has great Android Auto support, and also has an easy to use Bots API, so I can convert non-Android-Auto-compatible notifications into Android Auto notifications. I explained my motivation in detail in a blog post. [2]

[1] https://github.com/fishy/notifbot

[2] https://wang.yuxuan.org/blog/item/2017/03/smartthings-myq-an...

Re: Telegram Middleman Bot – Push Notifications as easy as POST

#25
post #14

Earlier quoted context omitted.

And while I know we are an endangered species, I have to say their support for Windows 10 mobile is top notch. I find their app is better than Whatsapp. Too bad the network effect is a thing, and also their approach to crypto might put you off.

> approach to crypto might put you off It doesn't, anymore than whatsapp. Whatsapp says they have end-end encryption. Has anyone verified it independently? They say they use Signal's tech. Has anybody verified that the app doesn't just take screenshots of the screen and send them to facebook for data mining? When your app is closed source, all claims about security and encryption are meaningless, unless some solid au…

>When your app is closed source, all claims about security and encryption are meaningless, unless some solid auditing is done.

That is not true, closed source does not mean you can't read the source code, last year (and i bet is still possible to do it today) i decompiled the apk into java source code, i remember i made it to confirm the telegram url block[1]. But the point is, if its possible to read the client source code, it should be possible to assure at least some level of security.

And yes, i always recommend whatsapp instead of telegram for family members because telegram doesn't have default e2e (i feel bad everytime i have to say this).

edit->for clarification, obviously i prefer to use a full open source end-to-end encrypted messenger

[1]http://www.androidpolice.com/2016/09/09/whatsapp-is-blocking...

Re: Telegram Middleman Bot – Push Notifications as easy as POST

#27
post #23

Earlier quoted context omitted.

> approach to crypto might put you off It doesn't, anymore than whatsapp. Whatsapp says they have end-end encryption. Has anyone verified it independently? They say they use Signal's tech. Has anybody verified that the app doesn't just take screenshots of the screen and send them to facebook for data mining? When your app is closed source, all claims about security and encryption are meaningless, unless some solid au…

Same could be said of Telegram. Plus, we know their encryption is not really that great because no real encryption expert will stand behind Telegram's encryption and Telegram says "Trust us" when it comes to the subject of their encryption. Signal tech is open source, can be checked and has been checked. I am pretty sure that if Whatsapp was lying about using the Signal encryption libraries, word would have leaked ou…

You are arguing that we should not blindly trust someone's assertion that a product is good. For WhatsApp we have to trust someone's assertion that things are implemented as they claim. For telegram the e2e stuff is at least open source and directly reviewable.

I don't trust either Moxie or Pavel. At least in one instance we can trust the code.

Re: Telegram Middleman Bot – Push Notifications as easy as POST

#28
post #23

Earlier quoted context omitted.

Same could be said of Telegram. Plus, we know their encryption is not really that great because no real encryption expert will stand behind Telegram's encryption and Telegram says "Trust us" when it comes to the subject of their encryption. Signal tech is open source, can be checked and has been checked. I am pretty sure that if Whatsapp was lying about using the Signal encryption libraries, word would have leaked ou…

You are arguing that we should not blindly trust someone's assertion that a product is good. For WhatsApp we have to trust someone's assertion that things are implemented as they claim. For telegram the e2e stuff is at least open source and directly reviewable. I don't trust either Moxie or Pavel. At least in one instance we can trust the code.

> You are arguing that we should not blindly trust someone's assertion that a product is good.

Then we both should be using Signal since all of Signal is open source. This is what I use.

> For WhatsApp we have to trust someone's assertion that things are implemented as they claim. For telegram the e2e stuff is at least open source and directly reviewable.

Telegram still has blobs that are not released with the source code, so there is still a bit of a block box related to Telegram.

Re: Telegram Middleman Bot – Push Notifications as easy as POST

#29
Hahaha... I wrote almost the exact same thing in Go a few months ago (didn't open source it because I am a selfish fucker).

Edit: Actually upon further inspection, mine is a little different in that I have a settings.json file that has the bottoken so it isn't in the code.

Also I have an allowed users list in the settings.json file and only users in that list are able to interact with the bot (/subscribe, /unsubscribe). Once a user is subscribed then they get all notifications. So it is more of a broadcast type usecase.

Post reply on HN