4 ms·

Obviously if you want high security you can enable an actual password on your account. I’m not convinced this is more insecure than sending it though conventio

Obviously if you want high security you can enable an actual password on your account. I’m not convinced this is more insecure than sending it though conventional means - telecoms are well and truly compromised and don’t give a shit about it. If you’re gonna get dubious security anyway, at least you can save some money by not having to pay for it. Locking your Insta account means they’re effectively only getting a couple attempts per day - the rate-limit is working at thwarting targeted attacks towards your account. The reason it keeps going on anyway is because they aren’t targeted attacks and are hoping to win the lottery and get into any account by sheer luck (just to spam - this is not a targeted attack and they’d have no interest in your chat history).

lxgr 3y ago
So regular users don't deserve reasonable security? That seems out of line with Telegram's ostensible focus on security and privacy. I'm not surprised at all, though. > I’m not convinced this is more insecure than sending it though conventional means - telecoms are well and truly compromised and don’t give a shit about it. If you’re gonna get dubious security anyway, at least you can save some money by not having to pay for it. The telco is still in the loop, though, so this still increases the number of parties with potential access to the verification messages. I could see it as a second factor, but as the only factor (by default), it's outright scary.