Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
maqp
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
43 ms
·
481.
▲
by
maqp
6y ago
If you only use Signal for sensitive stuff, you leak extremely valuable metadata about when you discuss sensitive stuff. When you use Signal for everything, it's harder to tell if you asked for bananas or for a revolution ;)
482.
▲
by
maqp
6y ago
If you'd understand security is a property of all features you'd understand that Telegram lacks even basic features like group chats and cross-platform chats. From that viewpoint Telegram is outright dangerous to use: it leaks a m
483.
▲
by
maqp
6y ago
Channels != group chats != supergroups. Supergroups and channels don't have expectation of privacy. They're not about protecting the content but about spreading sousveillance material, message etc. There only your anonymity matter
484.
▲
by
maqp
6y ago
Belarus isn't Russia however, they can most likely take down a lot more of the internet just to "bring order to chaos". The IP-address delivery via push notification was a nice idea, if they'd only be on that level with
485.
▲
by
maqp
6y ago
Signal is working on V2 groups with moderation right now.
486.
▲
by
maqp
6y ago
The clients wouldn't feature E2EE for groups even if you'd write your own server from scratch so no, nobody should use Telegram for anything.
487.
▲
by
maqp
6y ago
Facebook is also filled with great features, but since they're not private we don't really consider those features but tasty baits for stealing our personal data. The question is, why should Telegram whose author is literally call
488.
▲
by
maqp
6y ago
Connection resilience. You mean when Telegram's EU server had an issue last time, it was down from Ireland to Egypt to Israel to Finland :D That resilience?
489.
▲
by
maqp
6y ago
The comprehensive encryption is still not something everyone was bumped into. There's still insecure rooms, there's still backwards compatibility with insecure rooms. There's still bots and bridges and all the possible things
490.
▲
by
maqp
6y ago
Because Telegram uses phone's contact list for contact discovery. There's nothing unusual about this. This how Signal, Riot, Threema, Wire and dozens and dozens of messengers work.
491.
▲
by
maqp
6y ago
https://www.youtube.com/watch?v=YpuRcmPnSTM
492.
▲
by
maqp
6y ago
"Sadly, if you stop trusting Durov - you are screwed" Or if anyone hacks Telegram server, you're also screwed.
493.
▲
by
maqp
6y ago
Because that removes the need of server to know your contact list? Telegram knows who you are and who you talk to, they store your contact list. Signal knows who you are, but they don't store your contact list. Also, Signal is already
494.
▲
by
maqp
6y ago
There isn't magic that hides list of server IP-addresses from state entities with access to clients source where it's listed https://github.com/zhukov/webogram/blob/c5fc5107cad2a476a03d... .
495.
▲
by
maqp
6y ago
They're working on V2 groups, AFAIK it's in internal beta right now.
496.
▲
by
maqp
6y ago
What about totalitarian state with 1,000,000 USD of extra cash to spend to buy a zero-day, that then exploits the server and reads any message from there?
497.
▲
by
maqp
6y ago
" None of the two offer you their server's code. " Signal server source code: https://github.com/signalapp/Signal-Server "The vast majority of Telegram's usage is not end-to-end encrypted at al
498.
▲
by
maqp
6y ago
Where is their MTProxy tutorial?
499.
▲
by
maqp
6y ago
"- if you receive a stream of unencrypted postcards from Grandma on vacation" That's such a bullshit excuse. Everything goes with outer layer of encryption these days, what matters is will Telegram offer to lock themselves ou
500.
▲
by
maqp
6y ago
Indeed, E2EE is not available at all for group chats.
501.
▲
by
maqp
6y ago
Ah you mean reading communications of the opposition. https://en.wikipedia.org/wiki/ECHELON#Public_disclosures_(19... discusses it: 'Congressional investigators determined that "targeting of US political figu
502.
▲
by
maqp
6y ago
No. Still not E2EE by default, still no E2EE for groups, still no E2EE for desktop clients. Why do you want to imagine Telegram magically got better when it's so obvious it didn't?
503.
▲
by
maqp
6y ago
Signal will most likely run on dividends from shares/investments owned by the Signal Foundation.
504.
▲
by
maqp
6y ago
I totally understand where you're coming from but in order to be better than Durov who claimed Signal had backdoor without any evidence, we can't say he's selling user data without evidence. We also can't claim he's
505.
▲
by
maqp
6y ago
Signal has the Note-to-self feature that's E2EE. Telegram's chat to self is not end-to-end encrypted.
506.
▲
by
maqp
6y ago
That would be a great reason to stop using it. If they never plan to use that data then they're idiots for designing a system that makes them liable for all that user data they accumulate in case it leaks. And if there's one const
507.
▲
by
maqp
6y ago
Both are thought + location + picture + file + link sharing platforms. Perhaps you're not publishing to as wide audience, but still, they're extremely similar.
508.
▲
by
maqp
6y ago
"With Telegram it's possible to delete messages for everyone" If the phone is in airplane mode, or faraday bag it's not receiving any "delete message" commands. Also, with Telegram the case is, when the Belarus
509.
▲
by
maqp
6y ago
Source on this "kill switch"?
510.
▲
by
maqp
6y ago
Telegram knows who you are because you register with your phone number. Telegram group messages are not end-to-end encrypted. Telegram desktop messages are not end-to-end encrypted. Telegram's messages are never end-to-end encrypted by
More ›