clot27

joined 1 year ago
[–] [email protected] 5 points 10 months ago* (last edited 10 months ago)

Messages are stored on the server, not on the device

Yes, pretty much necessary to provide multidevice support

end-to-end encryption not enabled by default

True that and telegram sucks big here, but I donth think e2ee can be enabled in a feasible way for multiple devices.

uses proprietary encryption, making security audits difficult

The MTProto isnt open source but its fully documented, there have been security audits on it.

dubious financial backing

No. Pavel Durov have always said since starting he paid for telegram's servers from his pocket, in recent years telegram has started monetisation programs to cover its costs.

Russian developers

The founders were born in Russia, but they now have dual citizenship of UAE and France. If you are talking about politically questionable, even signal have been accused of having backdoors for CIA.

[–] [email protected] -3 points 10 months ago (6 children)

Users can’t report it because there is no way to tell for them

Atleast the one who breached can tell? no telegram users data have been seen on dark web yet, no person/org have claimed to get any vulnerability in their system. Also if its that easy to breach why govt's keep banning telegram for not giving them userdata? despite telegram is the biggest app where most terrorist orgs operate, hub of piracy and illegal things, you can call it "public" darkweb.

[–] [email protected] -5 points 10 months ago

good as no encryption at all.

0 data breaches till date.

[–] [email protected] 3 points 10 months ago* (last edited 10 months ago) (1 children)

the fact that E2EE is opt-in already makes this app ridiculous

in matter of privacy, yes. But it have cool features so.

They’re stored in plain text on Telegram servers

No, non secret chats use mptroto but with different schema, thats not plain servers. And no data breach have been reported in telegram yet if it was "that" easy to breach them. From my last comment: "Also the research you shared is based on mtproto 1.0 which telegram abandoned almost a decade ago and there have been No such defects found in mtproto 2 yet."

[–] [email protected] 3 points 10 months ago (8 children)

which a bored student with a laptop can MITM in seconds

No, how can a bored student breach e2ee in seconds? note that no such cases have been reported by any telegram user so far.

[–] [email protected] 1 points 10 months ago (2 children)
[–] [email protected] -4 points 10 months ago* (last edited 10 months ago) (7 children)

I am not talking about mtproto lmao. I was talking about their opt-in e2ee feature. Edit: Also the research you shared is based on mtproto 1.0 which telegram abandoned almost a decade ago and there have been No such defects found in mtproto 2 yet.

[–] [email protected] 2 points 10 months ago

sorry for the inconvenience, thing is this website supports multiple domains and is banned in some countries so we have to use different domains to access it, which might give red flags.

[–] [email protected] 4 points 10 months ago (4 children)

weird, works for me in firefox with all privacy features enabled, can you please try this link: https://telegra.ph/Why-WhatsApp-Will-Never-Be-Secure-05-15

[–] [email protected] 2 points 11 months ago

Why most of the links redirect to reddit? I dont want to open that website.

[–] [email protected] 1 points 11 months ago

the first optimized settings image dont load

view more: ‹ prev next ›