12 ms·
Telegram Login for Websites
- bhnmmhmd 9y agoThanks, but we don't want another Google knowing and keeping all our data, even websites that we visit.
- Gudin 9y agoBy that logic, you would be using only Google+ and Allo for messaging.
- bhnmmhmd 9y agoI think I was clear about my logic: no more monopoly! Why would you think I'd have to use Allo and G+?
- r3bl 9y agoI think that because you've used "all my data", he implied that you should be using their social network and their instant messaging service, so that it would truly be "all the data". To me the spooky part is that he only thought of two use cases in which one is guaranteed that a random person is not using Google's services (at least, not exclusively).
- timdorr 9y agoAll of your data? At best, they know the URL of any pages where this widget is visible. Not all websites, and not even a large subset of that site's pages. This isn't like a Facebook share widget, which is usually so ubiquitous, they really can know all the sites you visit.
- rainbowmverse 9y agoThat's how every now-ubiquitous thing starts. It used to be other things. Most of them are gone now. Something will take the place of the Twitter and Facebook buttons some day.
- Goopplesoft 9y agoBy building a phenomenal chat app and gradually (deliberately) building features around it to create a complete WeChat-like ecosystem, Telegram will probably improve people's uptake of chat-centric utilities in the markets they're targeting. I think the fundamental component to their success is just how snappy and 'live' their chat conversations feel. Everything including their backend perf, chat bubble animations, etc seems to be finely tuned to make conversations feel alive and active.
- blauditore 9y agoIt is super performant and stable though. I'm often surprized how easily it works through a shaky slow connection while others end up in an endless loading icon.
- jcelerier 9y agoand then they say that Qt isn't able to do pretty animations :p
- welder 9y agoI wish Keybase Chat supported mobile. https://keybase.io/blog/keybase-chat https://keybase.io/blog/keybase-chat
- anubisresources 9y agoKeybase chat does support mobile, I use it all the time
- fwdpropaganda 9y agoEDIT: For clarity, the comment below has nothing to do with Telegram Login, but Telegram itself. Telegram gets a lot of hate on HN, but I have to say that of all large messaging apps Telegram has by far the best UX. That said, I can see it slowly turning into a walled garden. For example, in public channels (distinct from groups, they're broadcast only) it should be possible to link to their content from the outside. Instead if you try that they force you to download the app to see the content. EDIT2: As someone noted you can link each individual post on a channel, but you can't see and scroll through a list of posts as you can from inside the app. I wish we had a messaging app with a market as large as WhatsApp's, UX as good as Telegram, security as good as Signal, run by an organization like Mozilla.
- herbst 9y agoAgreed. I love the UX. And it's also a less evil choice compared to many US centric alternatives. Edit:// Evil might is the wrong word. But if you have the choice between a self enforced world police with a history of using information against people in foreign countries and a country that is mostly involved in their own shit and area the choice is IMO easy
- ryanlol 9y ago>a country that is mostly involved in their own shit and area https://en.wikipedia.org/wiki/Russian_military_intervention_in_Ukraine_(2014%E2%80%93present) https://en.wikipedia.org/wiki/Russian_military_intervention_... https://en.wikipedia.org/wiki/Russo-Georgian_War https://en.wikipedia.org/wiki/Russo-Georgian_War By using telegram you are directly supporting the Kremlin.
- herbst 9y agoYou realize there is a difference between reclaiming land and claiming or fighting wars in foreign land. Not that i think any of both is right. But only one directly changes _my_ life.
- 9y ago
- sneak 9y agoReminder: Telegram’s crypto is bogus, and use of this app should be continually and consistently discouraged. It is a car with seatbelts that don’t work; a car without any seatbelts is better.
- herbst 9y agoAre there known vulnerabilities or do you mean the missing audits and security through obscurity approach? Because bogus in this context is a very strong word.
- sneak 9y agoIt’s not binary; home-brewed original cryptosystems can be bogus without a known vulnerability published. All of the peer review by qualified professionals has been negative. Don’t take my word for it, go look it up.
- CiPHPerCoder 9y agoFor the lazy: https://security.stackexchange.com/a/49802/43688 https://security.stackexchange.com/a/49802/43688
- lloeki 9y agoBe sure to check the links and dates, and also read the comments to that answer before forming an opinion too fast. As an aside this is a very bad SE answer as SE policy is to include conclusive information within the answer itself, and here the only relevant part is merely being linked to.
- deleted 9y ago[deleted]
- sneak 9y agoIt’s not end to end encrypted by default. This is the baseline standard for an encrypted messenger in 2018.
- mtgx 9y agoBut doesn't this mean you're really logging in with your phone? It's 2018. Why are we still trusting the phone network for anything related to authentication? Surely companies like Telegram can't use the excuse that they didn't know how horribly insecure SMS and the phone network in general is, no? I don't know how Telegram does it, but it keeps picking the wrong security options. It's like a gift they have.
- blauditore 9y agoI think the main motivation is making it harder to create (many) fake accounts. A phone number is probably the best trade-off between usabilty and verifiability.
- gant 9y agoTelegram can layer a password on top of your mobile number in a sort of reverse-two-factor way, but it's kind of a bad joke as I've mentioned above.
- fwdpropaganda 9y agoNo, in Telegram the phone number is used only as a sort of username. You can login to Telegram just with a password and the 2FA token gets to you inside the appp itself. Not SMS.
- gant 9y agoIf you don't have a 2FA password enabled and you're not online on another device you can login with your phone number.
- herbst 9y agoA majority of banking, at least in Europe, depends on SMS as authentificiation. As well as most other 2fa services depend on it as last resort fallback. It's 2018 but this problem is far from solved. (there is a lengthy rant about that somewhere in my post history)
- X-Istence 9y ago
- gant 9y agoTelegram's security is a joke. They show the first and last letter of your password and the length (the number of asterisks they put in the middle changes) when you sign in. Next to some pretty bad implications (do they store the password in cleatext or just the length and two letters?) , that password is down to about 1/5 of its original entropy. Told them a year ago, they don't seem to care. EDIT: Yes, Telegram uses passwords if you enable them. This is what the questionable query looks like: https://i.imgur.com/BAnddlg.png https://i.imgur.com/BAnddlg.png
- welder 9y agoTelegram doesn't use passwords...
- gant 9y agoFine. They call it a passcode: https://telegram.wiki/desktop/tdesktoppasscode https://telegram.wiki/desktop/tdesktoppasscode
- CiPHPerCoder 9y agoWait, how are they turning the passcode into a 2048-bit key? Is this an RSA key? How do they ensure it's not factorable, etc.?
- StavrosK 9y agoThey probably just create the key and then encrypt it with the pass code, as people usually do in these cases.
- tomsmeding 9y agoThey do? On which login do they show that information? I've only seen the kind-of two-factor one where you have to enter a code sent in a text message or with a telegram message to a different device.
- 9y ago
- mitchas 9y agoWould love to see this added to Firebase.
- tcd 9y ago> our widget asks for your phone number I'm good.
- brwsr 9y ago> Telegram Login for Websites Or in other words: We are ready to sell your private data now. Because that's what actually happens when you login to another website via Telegram login.
- cdancette 9y agoThat's nonsense. First, it's you who decide to use telegram to login to a website (as you would login with Facebook / google). Secondly, you see what informations will be shares with the website. Lastly, there is no money involved. It's totally free to use.
- dsacco 9y ago> First, it's you who decide to use telegram to login to a website (as you would login with Facebook / google). Yes, this is implicit in what the parent is saying. The point is, your data can be shared if you volunteer it by using this feature. > Secondly, you see what informations will be shares with the website. At a minimum, you are sharing the fact that your identity logged into the application. A profile of logins associated with your identity can be built, and a profile of how many Telegram users logged into a particular website can also be built. Both (and particularly the latter) are valuable. > Lastly, there is no money involved. It's totally free to use. This has nothing to do with whether or not your data is actually shared or sold with third parties. I'm not necessarily agreeing with the parent that Telegram is going to start selling user data, but your arguments here do nothing to diminish the fact that they could do so en masse. A graph of your logins should probably be considered "private data."
- 1001101 9y agoI wonder what the people who are railing about Kaspersky think about this development.
- tptacek 9y agoSure, since you asked: It's bad. Don't use this.
- jnmandal 9y agoWhile this is very clever, I'm not a fan of the implementation. I wish there was a documented oauth2 option and not just an iframe and some script. Script seems innocuous but Im not a fan of having the iframe on my page, and its hard to control the style. Obviously we can reverse engineer this a bit but I would prefer to just have a more robust API w/ proper docs.
- newscracker 9y agoI don't use WhatsApp. I use Telegram almost always and am impressed with the speed of development and introduction of new features. In my limited trials with Wire and Signal, Telegram just blows them out of the water in features, reliability and speed. I know the background about its crypto being criticized, but until other apps catch up, I can't move to them. I've already spent a lot of capital to push a few people to use Telegram and haven't regretted that move from an user experience point of view. On topic, I don't like these third party login systems much. Yes, they could provide better security compared to what smaller websites with less competent teams could, but associating a login with a provider also means I'm putting more eggs in one basket, so to speak. I also don't like the privacy implications, regardless of what Telegram states. It's sad that Mozilla Persona didn't take off and was shelved. It seemed like the best solution for this requirement.
- dsacco 9y ago> In my limited trials with Wire and Signal, Telegram just blows them out of the water in features, reliability and speed. When you say features, which ones do you mean? Do you mean the user interface?
- masklinn 9y agoThey certainly can't mean the security. But comparing to e.g. Line or WeChat maybe the entire social & stickers & attending services thing. Signal is a pretty bare-bones chat client, and WhatsApp only slightly less so.
- lufte 9y agoI personally love their bot API and the option to create custom stickers. Although not "features", having an open API for writing clients for whatever platform I choose and the fact that their official clients are open source are also a big plus.
- corndoge 9y agoSo you use an encrypted messenger, but your choice on encrypted messenger is influenced not by the quality of the crypto implementation but rather by the ability to add bots and custom stickers. Why don't you just use Snapchat?
- katmmmmm 9y agoHi everyone….i want to sincerely and openly thank elizabethkate778@gmail.com company for there service….They saved me infidelity and lies of my cheating wife. They were able to hack her phone so i listen to every call she either made or receive, hacked her email passwords and Facebook….i know there are lots of people out there looking for good hack and evidence about one thing or the other. be open and real with them so they can even be at the best of their service to you. Do contact them by email on elizabethkate778@gmail.com They are ready to serve you and help you out. try them today you will be happy sure