8 ms·

Never forget. RIP Telegram (2013-2013). This whole thing has been interesting to follow because it seems this same thing happens every time someone make macho

by onedev 13y ago

Never forget. RIP Telegram (2013-2013). This whole thing has been interesting to follow because it seems this same thing happens every time someone make macho Crypto-claims. From seeing how confident the Telegram team was to reading all the detractors who were so ready to criticize. It's an interesting dynamic in the Crypto community.

hawkharris 13y ago
RIP Telegram (2013-2013) would make an interesting T-shirt. No one except a few cryptography buffs might understand it, but it would be a funny way to start conversations about information security.
- flux_w42 13y ago
  Would indeed be interesting to get to know some other cryptography-interetsted people on the bus, metro and other public places, so here you go: http://teespring.com/riptelegram http://teespring.com/riptelegram
  - hawkharris 13y ago
    Haha. I love it!
- jlas 13y ago
  HN readers might also understand it.
notastartup 13y ago
RIP Telegram (2013-2013). omg made me lol super hard
- GigabyteCoin 13y ago
  I see you've only been here for 33 days so I'll lend you a hand. This is HN, and we don't make posts like that.
  - aaronbrethorst 13y ago
    Counterexamples: 1) Every Bitcoin thread 2) Every NSA/Snowden thread Source (cough): I've been around for 6.3 years, am in the top 40 users in terms of net karma, and am actually very frustrated with the unfortunate turn the community has taken in the past 12-18 months. And am considering leaving, which makes me sad.
    - Crito 13y ago
      Not sure what either of those two topics has to do with this thread..
      - aaronbrethorst 13y ago
        Absolutely nothing, so downvote away. I'm just expressing my overall frustration with this board.
      - saraid216 13y ago
        There is an unstated willingness to have content-less congratulatory posts on threads of those two topics. Usually puffed up with a few "look how smart I am" sentences. That said, I'm pretty sure my highest karma (~50) comment was a joke about Tau Day back in 2008. Soooooooo.
        aaronbrethorst 13y ago
        My highest scored comment ever was a one line throwaway at 250 or so. So I hear you.
    - GigabyteCoin 13y ago
      Maybe they need to turn down the account-ghosting requirements a few notches?
      - aaronbrethorst 13y ago
        I'm not actually familiar with that one. Clue me in?
yatsyk 13y ago
Hate tone discussion makes me sad. Telegram is very young project and it has bugs for sure. Some guy found potential issue in protocol and developers committed to fix it soon. There is no information that any messages were revealed due to this bug but Telegram should go away and developers should do something else. Whatsapp is less secure then Telegram but I have not seed “Whatsapp RIP” messages. Not so hard to save videos in snapchat but no one propose to close the application. About a year ago YAML vulnerability was found but no one proposed dhh to stop development and focus on race driver career. I think that we need more competition for TextSecure. Terms of bug bounty are very hard to satisfy even with bad protocol but Durov seems decided to play safe with such amount of money. Guy that found problem in MTproto doesn’t win money according to conditions of the bug bounty because message is not decrypted. Disclaimer: I don’t have any affiliation with telegram besides living in the same city as telegram developers.
- makomk 13y ago
  It's impossible to tell whether any messages were revealed due to this bug - that's what makes it so nasty. Users would have had the same level of security if Telegram had no end to end encryption whatsoever and simply promised they wouldn't log or read the messages they had access to; it's seriously that broken. (Worse, there's a good chance this is an intentional backdoor since the way they combine the nonce and Diffie-Hellman result is incredibly fishy.)
- sillysaurus2 13y ago
  You must not have followed Telegram much. From the beginning they've done nothing but pretend their protocol is absolutely secure ("military-grade encryption", "world's most secure protocol", etc) and rejected any attempt from the crypto community to help them fix problems before they endanger people. So, let's put it this way: Was it ok of them to lie through their teeth to users? If so, then that's a sad state of marketing. If not, then what are you proposing here?
  - eps 13y ago
    Hey, you forgot to plug TextSecure.
paveldurov 13y ago
By that logic, Linux, Chrome, Android are RIP at least a hundred times.
- deleted 13y ago
  [deleted]
- golergka 13y ago
  While I'm not saying that Telegram "is RIP" (whatever it means in this thread), Linux, Chrome and Android don't have crypto as their main killer feature.

by onedev 13y ago

hawkharris 13y ago

RIP Telegram (2013-2013) would make an interesting T-shirt. No one except a few cryptography buffs might understand it, but it would be a funny way to start conversations about information security.

flux_w42 13y ago
Would indeed be interesting to get to know some other cryptography-interetsted people on the bus, metro and other public places, so here you go: http://teespring.com/riptelegram http://teespring.com/riptelegram
- hawkharris 13y ago
  Haha. I love it!
jlas 13y ago
HN readers might also understand it.

notastartup 13y ago

RIP Telegram (2013-2013). omg made me lol super hard

GigabyteCoin 13y ago
I see you've only been here for 33 days so I'll lend you a hand. This is HN, and we don't make posts like that.
- aaronbrethorst 13y ago
  Counterexamples: 1) Every Bitcoin thread 2) Every NSA/Snowden thread Source (cough): I've been around for 6.3 years, am in the top 40 users in terms of net karma, and am actually very frustrated with the unfortunate turn the community has taken in the past 12-18 months. And am considering leaving, which makes me sad.
  - Crito 13y ago
    Not sure what either of those two topics has to do with this thread..
    - aaronbrethorst 13y ago
      Absolutely nothing, so downvote away. I'm just expressing my overall frustration with this board.
    - saraid216 13y ago
      There is an unstated willingness to have content-less congratulatory posts on threads of those two topics. Usually puffed up with a few "look how smart I am" sentences. That said, I'm pretty sure my highest karma (~50) comment was a joke about Tau Day back in 2008. Soooooooo.
      - aaronbrethorst 13y ago
        My highest scored comment ever was a one line throwaway at 250 or so. So I hear you.
  - GigabyteCoin 13y ago
    Maybe they need to turn down the account-ghosting requirements a few notches?
    - aaronbrethorst 13y ago
      I'm not actually familiar with that one. Clue me in?

yatsyk 13y ago

Hate tone discussion makes me sad. Telegram is very young project and it has bugs for sure. Some guy found potential issue in protocol and developers committed to fix it soon. There is no information that any messages were revealed due to this bug but Telegram should go away and developers should do something else. Whatsapp is less secure then Telegram but I have not seed “Whatsapp RIP” messages. Not so hard to save videos in snapchat but no one propose to close the application. About a year ago YAML vulnerability was found but no one proposed dhh to stop development and focus on race driver career. I think that we need more competition for TextSecure. Terms of bug bounty are very hard to satisfy even with bad protocol but Durov seems decided to play safe with such amount of money. Guy that found problem in MTproto doesn’t win money according to conditions of the bug bounty because message is not decrypted. Disclaimer: I don’t have any affiliation with telegram besides living in the same city as telegram developers.

makomk 13y ago
It's impossible to tell whether any messages were revealed due to this bug - that's what makes it so nasty. Users would have had the same level of security if Telegram had no end to end encryption whatsoever and simply promised they wouldn't log or read the messages they had access to; it's seriously that broken. (Worse, there's a good chance this is an intentional backdoor since the way they combine the nonce and Diffie-Hellman result is incredibly fishy.)
sillysaurus2 13y ago
You must not have followed Telegram much. From the beginning they've done nothing but pretend their protocol is absolutely secure ("military-grade encryption", "world's most secure protocol", etc) and rejected any attempt from the crypto community to help them fix problems before they endanger people. So, let's put it this way: Was it ok of them to lie through their teeth to users? If so, then that's a sad state of marketing. If not, then what are you proposing here?
- eps 13y ago
  Hey, you forgot to plug TextSecure.

paveldurov 13y ago

By that logic, Linux, Chrome, Android are RIP at least a hundred times.

deleted 13y ago
[deleted]
golergka 13y ago
While I'm not saying that Telegram "is RIP" (whatever it means in this thread), Linux, Chrome and Android don't have crypto as their main killer feature.