sysopTelegram CEO Pavel Durov Arrested in France
NoxiousHell yeah. I always hated Telegram, because of its countless false promises, misleading claims, bad encryption (which isn't even enabled by default) and shady background.
That bad encryption was not cracked for now. The other one, that is used to process chats between 2 users in end to end mode, can’t be enabled by default because it assumes no history is kept and no support for group chats.
Also, the arrest doesn’t seem to be related to any of the things you mentioned. If anything it shows there are no ways for (certain) governments to affect the messenger, for now.
That bad encryption was not cracked for now.
There’s no need if you control the server.
End to end encryption was created specifically so that the server could not access the data.
So how many people use E2EE with Telegram?
And their ToS forbids alternative clients doing that. Say, using Pidgin with PGP or OTR. Since Pidgin plugins for TG and these exist, it’s not a limitation for me, but most people, again, don’t use Pidgin to chat in TG.
Alternate clients are blocked from using that functionality because they may include ability to capture data somewhere, for example taking a screenshot of a protected chat.
I meant normal E2EE, not TG’s “encrypted chats”.
And it’s not “that functionality”, it’s literally encoding messages into another layer over TG being forbidden.
There is no normal e2ee because there is no standard for implementation, especially when it comes to group chats with >2 people.
There are a few standards. OMEMO for group chats, though that, of course, requires support in the protocol itself, unlike OTR or PGP.
It doesn’t look like any of those are used by “major” messengers. Especially signal. This means “major” players prefer their own implementations, which removes the meaning from calling unused stuff a “standard”.
OMEMO is literally what’s used by Signal, but standardized separately and adopted for XMPP. You didn’t even bother to look it up apparently.
OTR is a time-honored standard. The issue is that it doesn’t work with multiple logins.
PGP is an even more time-honored standard. The issue is that keys aren’t temporary.
Also in cryptography the absolutely basic rule is to trust cryptographers, not “major players”, so what you wrote is not as smart as you think. Actually quite ignorant.
Cool. So that gives people authority to say “if it’s used by signal and is standardized then it should be used by everyone”?
No, just that it’s a real thing and whatever there is in TG is something bogus.
Something not being standardized doesn’t mean it’s bogus.
I think you are arguing against your own imagination. Something not being vetted by someone competent does mean it’s bogus in cryptography. Standardization is an unconnected subject. Most police forces over the world right now are using something standardized, but known to be utter crap.
I think you are falling for the “genius inventor” fallacy clueless normies love a lot.
TG’s E2EE is simply garbage until known otherwise. There’s no more depth to it. The reason it’s not known to be broken is that it’s not a high value target - most people don’t use “secret chats” in TG.
I think you are falling for the “genius inventor” fallacy clueless normies love a lot.
People advertising signal everywhere look like those kind of normies to me too. Doesn’t mean much.
The reason it’s not known to be broken is that it’s not a high value target - most people don’t use “secret chats” in TG.
Fair assumption. But it means you accept most people are stupid enough to not want such a feature or smart enough to not need it. Telegram user base is reported to be 900 million though.
So where am I advertising Signal?
But it means you accept most people are stupid enough to not want such a feature or smart enough to not need it. Telegram user base is reported to be 900 million though.
I didn’t get this.