4 ms·
Absolutely agree. I really wish Telegram would get off the phone number system, especially after the embarrassing hack in Brazil. It's not explicitly Telegram's
by 0xy 6y ago
Absolutely agree. I really wish Telegram would get off the phone number system, especially after the embarrassing hack in Brazil. It's not explicitly Telegram's fault, but if your primary authentication method is insecure it's at least a little bit your fault.
Phone numbers are NOT safe. I don't know why SMS MFA is even a thing, they're worse than passwords.
When you use phone numbers or SMS for security, you are putting the fate of your entire company's security on an underpaid customer service rep at Verizon.
- nickik 6y agoTelegram should maybe just use proper encryption first.
- bjoli 6y agoAnd by default.
- xerxesaa 6y agoCan someone explain to me why MtProto is not considered proper encryption? Genuinely asking, not challenging. At least since version 2.0 it seems it's using AES encryption: https://core.telegram.org/mtproto/description https://core.telegram.org/mtproto/description
- nickik 6y agoBy default its not e2e encrypted and if you want to use e2e you lose lots of capability. That is simply not acceptable in a modern messenger.
- 0xy 6y agoSpeaking as someone who regularly uses private chats, what capability?
- AnonC 6y agoSecret chats are tied to one single device, which may be ok for some people. The bigger disadvantage is that you cannot have group chats that are end to end encrypted. Only person to person chats are allowed as secret chats.
- nickik 6y ago- Group Chat - Multi Device Seems to me that are some of the most useful things about modern chat. Also, why not just use a chat app that is save by default. The whole concept of private chat is insane to me.
- matheusmoreira 6y ago> especially after the embarrassing hack in Brazil What happened?
- 0xy 6y agoNumerous Brazilian judges and politicians had their Telegrams hacked via SIM hijacking.