maqp

16 ms·

211.
by maqp 2y ago
It doesn't. Groups chats lack E2EE and all desktop chats, including 1:1 lack E2EE.
212.
by maqp 2y ago
Let's get a professional cryptographer without vested interest in the matter to give that assessment https://blog.cryptographyengineering.com/2024/08/25/telegram...
213.
by maqp 2y ago
What a sad way to try to infer this has anything to do with Telegram being so secure Durov has to be arrested, when its really about Durov letting CSAM sit on his servers for a decade.
214.
by maqp 2y ago
It's not a shovel he's selling. It's aching to hosting a gallery portraying disgusting crimes done to actual children. Digital or ink, Durov can't just go behind freedom of speech in this matter.
215.
by maqp 2y ago
This is a horrible analogy, is your side project giving free cloud hosting of up to 1.5GB files for 900 million users with no moderation? Yeah, if it is you should go to jail too if you didn't address the issue of CSAM there for a deca
216.
by maqp 2y ago
Yeah no shit. But sharing cute cat pics deserve human right to privacy. Also, when everything is E2EE, that reduces the metadata about when you say something private. You don't want your opt-in encryption to reveal metadata about how c
217.
by maqp 2y ago
Both tech savvies and laypeople expect private/encrypted messaging app to provide the basic property that only the sender and the intended recipients can read it. This is achieved with end-to-end encryption. Techies know the term, and
218.
by maqp 2y ago
$ sudo apt install telegram Reading package lists... Done Building dependency tree... Done Reading state information... Done E: Unable to locate package telegram Also $ sudo apt install signal-desktop-beta [sudo] password for : Reading pack
219.
by maqp 2y ago
Cryptography is nightmare magic math that cares about the color of the pencil you write it with. It's not enough you know how to design a cipher that is actually secure, you need to know how to implement it so that the calculator you r
220.
by maqp 2y ago
Well you hating on a feature you don't have to use doesn't affect my opinion about the well thought out security design around the rest of the application. I have zero sympathy for the distributed Ponzi scheme that is cryptocurren
221.
by maqp 2y ago
>no one known has gotten in trouble because Telegram handed over their data The correct solution to sleeping with an axe struck on the roof above your bed isn't to not worry about it because axes coming loose on their own aren'
222.
by maqp 2y ago
>If not, why? Because that's the trade-off you make when you want high entropy unique usernames to prevent enumeration attacks. They become long and random. There's still a "phone number". It just looks something like
223.
by maqp 2y ago
Sounds like I should stick to Signal that got this right from the get-go.
224.
by maqp 2y ago
So they take theatrics over logical evaluation of the situation. Cool. Tell them Durov could have locked himself out of their data and spared himself the trip to behind bars.
225.
by maqp 2y ago
Or he's trained in the art of lying "At St. Petersburg State University, Mr. Durov studied linguistics. In lieu of military service, he trained in propaganda, studying Sun Tzu, Genghis Khan and Napoleon, and he learned to make pos
226.
by maqp 2y ago
The problem with codes is you have to remember them. And then you'll need a massive lookup-table. People don't want to have chats based on limited vocabulary. This is why we have modern encryption. It converts the most beautiful p
227.
by maqp 2y ago
You're missing Tor, and metadata reducing messaging like https://cwtch.im/ Also Mullvad Browser is a worthy addition given that its basically Tor Browser with the VPN instead of Tor-gateway. Same excellent metadata red
228.
by maqp 2y ago
Well I'm sure France isn't taking Durov to some black site at this point. But since there's no such thing as distributed computation of single AES block operation, each server must by definition have access to the server&#x27
229.
by maqp 2y ago
This snake oil is spreading like [Herpes] Simplex . Again, the company lies about queues (a programming technique) being a privacy feature. The application can not get rid of the metadata of server knowing which IPs are conversing, unless t
230.
by maqp 2y ago
Yeah, try searching anything older than a year, the amazing snappy search grinds to halt. Meanwhile I'm storing years worth of stuff on Signal with no issues, and it searches ridiculously fast offline with no seconds long pause for buf
231.
by maqp 2y ago
Lol https://www.google.com/search?q=Telegram+"encrypted+messagin...
232.
by maqp 2y ago
Steganography is pointless given that encrypted and metadata protected communication is ubiquitously available to those who need it. Steganography is a niche you read about in your first year of studying the world of privacy and what you co
233.
by maqp 2y ago
>So how many services claiming encryption have this flaw? All.... Telegram is actually one of the only apps I've seen to defend their super-duper secure storage of keys online. All lies of course. The overwhelming majority of secure
234.
by maqp 2y ago
He specifically explains what people think an encrypted app is: >Many systems use encryption in some way or another. However, when we talk about encryption in the context of modern private messaging services, the word typically has a ver
235.
by maqp 2y ago
>Encryption really doesn’t matter as much as the trust of the app here. Any malicious app author can 100% secure encrypt everything in wire and yet leak 100% of your data to some state actor. This is exactly the problem with Telegram. Te
236.
by maqp 2y ago
>It's not e2e encrypted, so what? It's something the majority of users does not need, and that doesn't increase security that much given their downsides. Privacy is a human right. Everyone needs it. And Telegram advertises
237.
by maqp 2y ago
Telegram clients are open source. Anyone can verify that the client does the end-to-end encryption correctly. Telegram has had its own history of really weird issues with its encryption protocol, like the IGE, 2^64 complexity pre-computatio
238.
by maqp 2y ago
https://support.signal.org/hc/en-us/articles/360057625692-In... and move on.
239.
by maqp 2y ago
I know a bit about this topic. For metadata you first want to remove the obvious identifiers, phone numbers, names. You'd want to use something like anonymous@jabbim.pl for your IM account. Next, you'd want to eliminate the IP-add
240.
by maqp 2y ago
>If telegrams encryption is so bad why is Pavel Durov under arrest? Because it was so bad he had access to all that content, and because he had access to it, he should have moderated it, and because he didn't he's now arrested.

More ›