4 ms·

6 years is a short time in cryptography. That isn't battle-tested. "Even worse, security doesn't provide immediate feedback. A dead patient on the operating ta

by kuhhk 8y ago

6 years is a short time in cryptography. That isn't battle-tested. "Even worse, security doesn't provide immediate feedback. A dead patient on the operating table tells the doctor that maybe he doesn't understand brain surgery just because he read a book, but an insecure cryptosystem works just fine. It's not until someone takes the time to break it that the engineer might realize that he didn't do as good a job as he thought. Remember: Anyone can design a security system that he himself cannot break. Even the experts regularly get it wrong." -- Bruce Schneier Source: https://www.schneier.com/crypto-gram/archives/2009/0915.html https://www.schneier.com/crypto-gram/archives/2009/0915.html

p2detar 8y ago
Yep, I'm familiar with Schneier's comments. I still find the whole thing funny though. For example, services like Viber seem to have 260 mil. active monthly users [1] which is a tad more than Telegram's 200 mil. on monthly basis, however, I don't hear people bashing Viber that much even though it practices security through obscurity [2]. Hats off to Telegram for at least publishing their stuff and I remain curious as to how it will all unfold in the future. [1] - https://en.wikipedia.org/wiki/Viber#Market_share https://en.wikipedia.org/wiki/Viber#Market_share [2] - https://techcrunch.com/2016/04/20/viber-defends-new-end-to-end-encryption-protocol-against-criticism/ https://techcrunch.com/2016/04/20/viber-defends-new-end-to-e...
- r3bl 8y ago
  It's a simple problem of where the market is. India, Russia, and Brazil isn't the target market for people like Schneier. If you narrow the market to the US, Statista reports that Telegram has twice as many users in the US as Viber. I'm from one of those countries where Viber is hugely popular (by far more popular than WhatsApp and Telegram), and I hate it with passion. Kind of like Telegram, its end-to-end encryption was also home-made last time I've checked, but at least it's turned on by default.

by kuhhk 8y ago

p2detar 8y ago

Yep, I'm familiar with Schneier's comments. I still find the whole thing funny though. For example, services like Viber seem to have 260 mil. active monthly users [1] which is a tad more than Telegram's 200 mil. on monthly basis, however, I don't hear people bashing Viber that much even though it practices security through obscurity [2]. Hats off to Telegram for at least publishing their stuff and I remain curious as to how it will all unfold in the future. [1] - https://en.wikipedia.org/wiki/Viber#Market_share https://en.wikipedia.org/wiki/Viber#Market_share [2] - https://techcrunch.com/2016/04/20/viber-defends-new-end-to-end-encryption-protocol-against-criticism/ https://techcrunch.com/2016/04/20/viber-defends-new-end-to-e...

r3bl 8y ago
It's a simple problem of where the market is. India, Russia, and Brazil isn't the target market for people like Schneier. If you narrow the market to the US, Statista reports that Telegram has twice as many users in the US as Viber. I'm from one of those countries where Viber is hugely popular (by far more popular than WhatsApp and Telegram), and I hate it with passion. Kind of like Telegram, its end-to-end encryption was also home-made last time I've checked, but at least it's turned on by default.