• 0 Posts
  • 381 Comments
Joined 1 year ago
cake
Cake day: June 30th, 2023

help-circle


  • Gaza population was steadily increasing for all these years. This doesn’t bode well with the “prison” sentiment in my opinion. They had institutions. They could teach their own population. Their actions could be more logical. Instead it seems they’ve been spreading terrorist propaganda (literally pushing their children to become merciless terrorists) and spending resources on building offensive tech instead of defenses. I can not justify actions of Israel (though I can understand why the ground operation was started) but there is no way I can agree that actions of hamas had any logical ground.


  • I didn’t mean to say anything that Israel did was okay. But a lot of it is understandable, e.g. the ground operation was very well expected by everyone when it became clear the hostages are not getting released. No matter how you look at it, Gaza was not ready.

    And if we consider the October attack itself, only some of it is understandable (“they couldn’t bear with oppression any longer” sentiment, which itself is problematic at best).






  • It’s barely anonymous, and poorly encrypted. The latter is the reason Durov is in custody

    There is no logic here. If it was poor it would be very easy to track anyone including criminals. You can check the news to find the reasons.

    There have absolutely been cases where a backdoor/weakness/lack of encryption used to catch criminals before

    I meant telegram related cases.

    Some are staying safe, others are being caught precisely because of this.

    I didn’t see any proofs of that.

    Using better encryption schemes is definitely part of that.

    Part of what? I don’t get the point here.


  • is not any different from just having TLS for transport

    Yes, in simple terms, all encrypted transfer protocols are similarly protected from mitm attacks.

    That just means that they store both your data in some encrypted way and the key. They can still read it trivially.

    They can and they said the decryption keys are always kept separately (there are probably more layers than I can describe) from the data to make sure the servers are not used to decrypt the data locally. They can be lying for all I care. The bigger problem is that people somehow assume this a huge threat, while all previous cases didn’t involve anything like that. People are getting into trouble for their public content - protected by some encryption but visible to anyone interested (who then report it to oppressive authorities).

    While some go extra mile to explain to you how you should use e2e for your family group chats, real criminals do their stuff everywhere (especially on telegram) for years, staying safe. Problem is not how weak or strong the encryption is, but that once you are under oppression and do opposition activities, you’re going to learn by yourself how to deal with it. Signal will not save you from people in your group chats if they are there to report on you.




  • You switched the topic of the discussion. My original comment stands, as it corrects some part of your first comment.

    I didn’t suggest anyone to use telegram.

    They have repeatedly worked with governments and worked against the interests of their users.

    Even though those allegations are arguable, I know what you mean. And those cases don’t involve compromising the actual encryption from what I understand.


  • Ah yes, definitely go with a messenger that has known vulnerabilities in its crappy encryption protocol, instead of one with an actual secure E2EE implementation.

    Feel free to go any way you want. I’m not asking you to use telegram.

    You can still make encrypted backups

    Spend time for that, and keep them where? Maybe also need a feature to sync them between mobile and desktop?

    Only Telegram is too incompetent to do that.

    Not an implementation issue but a trust issue.

    Just stop lying. Telegram Secret Chats have been introduced in 2017

    https://telegram.org/evolution see October 2013.

    both Signal and WhatsApp have had E2EE (including for group chats!) for much longer.

    Whatsapp had them inctorudec in 2016.

    Are you mad that Signal is focusing on privacy and security by improving their encryption protocol, instead of wasting time on some UI garbage?

    I’m perfectly fine with that. More apps using electron means less chance for my pc to run garbage applications on a regular basis.

    keep in mind that Telegram can read all of your messages, as well as hand them over to governments.

    Keep in mind that any person in your secret chats can read your message, copy or screenshot it and hand it to anyone else. Those people know much better if you’re doing anything sketchy (or something actually good but against their beliefs), than an app developer.


  • I think you are falling for the “genius inventor” fallacy clueless normies love a lot.

    People advertising signal everywhere look like those kind of normies to me too. Doesn’t mean much.

    The reason it’s not known to be broken is that it’s not a high value target - most people don’t use “secret chats” in TG.

    Fair assumption. But it means you accept most people are stupid enough to not want such a feature or smart enough to not need it. Telegram user base is reported to be 900 million though.






  • has been proven to have critical weaknesses

    Those are not critical, just some aspects being below some arbitrary expectational values. Also it seems there is still no proofs those vector attacks are being used at all.

    Yes it can

    They chose to target convenience over max security. Shoving strongest options to every user by default is agaiantt that. Reasons include: no history is being saved in this mode, and the desktop client doesn’t support it.

    Signal has had group chats for many years now

    Just because it was implemented by others doesn’t mean it’s a way to go for everyone. From what I understand, e2e in group chats means that there is going to be a transaction of keys between all members of the chat on adding any new member, and/or on new message, which excessively increases the burden on clients and servers in case of big active chats.

    You can ask telegram to implement that, but you can’t blame it for keeping it behind some gates. Telegram got implemented e2e between 2 users before other messengers got it working in any form of group chats.

    and use Signal

    I’ll think about it if they ditch electron.