4 ms·

I thought Telegram had security issues beyond that as in non validated crypto?

• sdoering 11y ago
  Didn't they offer a bounty for anyone braking their crypto? I am not sure - but thought I heard something like that.
  • superuser2 11y ago
    Yes, which is exactly why you should not trust it. Bounties are no substitute for an audit by professional (or academic) security researchers, and if the expected value of exploiting the vulnerability (i.e. to the NSA) is greater than the bounty payout, the person who discovers it would do better to sit on the information. From 1998: https://www.schneier.com/crypto-gram/archives/1998/1215.html https://www.schneier.com/crypto-gram/archives/1998/1215.html
    • sdoering 11y ago
      Thanks for pointing that out. Wasn't aware of this line of very valid reasoning. Kudos and hat tip.