Telegram were claiming they were more secure even when they had their own home-rolled crypto. Security is not Telegram's strong point and it never was.
Technically Signal is using their own home-rolled crypto, too – right?
Telegram has launched a pretty intense campaign to malign Signal as insecure
371–380 of 501 posts
Re: Telegram has launched a pretty intense campaign to malign Signal as insecure
#372Earlier quoted context omitted.
vk.com and telegram have nothing in common, except the founder. Durov was forced to sell his part in the vk.com and telegram development started after that as a response.
> vk.com and telegram have nothing in common, except the founder. This is a deeply funny sentence. "Other than that, Mrs. Lincoln, how was the play?"
You conveniently forgot about the second part of that comment. Durov was forced out of the country and had to cell vk.com for peanuts because of his refusal to cooperate with the government. He is still pissed off at the country at large (not just the government) and refused to add the Russian translation for years, for example, despite it having absolutely nothing to do with Putin.
Since he is Russian in origin, it's okay to throw baseless accusations at him and spout nonsense like "maybe they're FSB agents" or "maybe they hired an FSB agent without knowing it". You see it here everywhere, and HN is one of the better sites in that regard. Well, maybe Signal has hired an NSA agent and doesn't know about it either? How does that sound?
Re: Telegram has launched a pretty intense campaign to malign Signal as insecure
#373Earlier quoted context omitted.
“All of them” in what sense? I use WhatsApp dozens of times a day, and interact with business accounts every couple months at most.
Good for you, you probably do not live in a country under digital colonialism where the gov allowed facebook et al to force internet providers to tax the pop with absurdly low and expensive data limits and then "not count" things like facebook and whatsapp and one music app. In most of the global south, 100% of business have a whatsapp. In those places it pretty much replaced telephone and the green whatsapp icon is…
Are you saying this is a worse alternative to other communication methods with businesses? What would you use with them that has better encryption?
Re: Telegram has launched a pretty intense campaign to malign Signal as insecure
#374> An alarming number of important people I’ve spoken to remarked that their “private” Signal messages had been exploited against them in US courts or media. Any sources for this except the private testimony of a Signal competitor talking about his important friends? (ETA: Or is it when the court/media obtains your unlocked phone, in which case Telegram won't protect you either...)
Re: Telegram has launched a pretty intense campaign to malign Signal as insecure
#375Earlier quoted context omitted.
Telegram has moved to Dubai long ago so no idea where you get the idea that FSB can strong-arm them from.
Durov travels freely to and from Russia and several of their employees are still based in Russia. So yeah, the FSB have leverage if they need to use it.
> Durov travels freely to and from Russia
This is incorrect. Check your facts. They're made up.
Re: Telegram has launched a pretty intense campaign to malign Signal as insecure
#376Earlier quoted context omitted.
Same goes for Signal devs, or any devs really. You're only stating the obvious: humans can be forced and coerced given enough motivation and resources. Singling out Telegram, or Signal, or any other service's devs is not advancing any argument forward.
There is more reason to be concerned about Telegram than most other similar services. Partly because it’s insecure by default, which makes a large percentage of conversations vulnerable. And also because the team behind it is very susceptible to pressure from the Russian government, which is especially bad when it comes to these things. Even if some of them are based out of Dubai now, it doesn’t mean that they aren’t…
Whom should we trust then? Have we already forgotten about Snowden?
Re: Telegram has launched a pretty intense campaign to malign Signal as insecure
#377Earlier quoted context omitted.
Why is MTProto considered "home-rolled" but the Signal Protocol isn't? Both are boutique and written from scratch to fit their respective systems.
Of course. But the history of the Signal protocol and implementation traces back 20 years. It's good enough that Facebook, WhatsApp, and Skype use it for E2EE messages. Telegram's traces back 10 years, the first version was very bad, and both versions have had a lot of scrutiny for weird design decisions. Crypto schemes which get broken usually follow a pattern of "something smells wrong", "we have weakened it a litt…
> But the history of the Signal protocol and implementation traces back 20 years
Are you sure about that? TextSecure was created more 10 years ago than 20. 20 years ago, we did not have smartphones.
As I remember, TextSecure started with SMS (but that was not the Signal protocol) and added "internet" messages right after WhatsApp got bought (which was about when Telegram was started).
I love the Signal protocol, but I would say it's more 10 years old (like Telegram). Or am I missing something?
Re: Telegram has launched a pretty intense campaign to malign Signal as insecure
#378Earlier quoted context omitted.
Same In the EU, no ones that's legit uses Telegram, except scammers that you can run into in local "graigslist" website.
"Same in the EU" - but you're actually make an opposite statement than the GP (GP said "everyone i know uses telegram" and you said "nobody uses telegram")
indeed you are right, I did read the opposite for some reason.
Re: Telegram has launched a pretty intense campaign to malign Signal as insecure
#379https://nitter.poast.org/matthew_d_green/status/178968789886...
> Tweet not found
Re: Telegram has launched a pretty intense campaign to malign Signal as insecure
#380Earlier quoted context omitted.
The binaries? This sounds like some kind of joke.
It is pretty bad bait, but then this whole thread is a dumpster fire of distraction from any substance.
To follow on, it turned out not only did that stunningly milquetoast comment I made get flagged, but after I made it someone tried to DDoS everything associated with me.
I mean, do these people not know their Shakespeare?