News for hackers. Stuff that matters.
Re:Telegram Desktop reaches version 1.0 by mderazon on Thursday January 12, 2017 @07:12AM (#13381634)
How is it related? AFAIK Signal has sync between desktop and mobile doesn't have to be constantly on to use the desktop client
Re:Telegram Desktop reaches version 1.0 by nicolapcweek94 on Thursday January 12, 2017 @07:30AM (#13381702)
Signal does have sync, but it works exactly the same way as Whatsapp's does, requiring your phone to be on and connected

Telegram's secret chats are also client-specific and not synced, and I have no idea how it would even be possible to have e2e chats synced on multiple devices without having a "main" device that's doing the actual crypto or sharing the secret key

Re:Telegram Desktop reaches version 1.0 by dchest on Thursday January 12, 2017 @07:50AM (#13381786)
If you're interested in learning how to implement end-to-end chats with multiple devices, checkout out Wire security whitepaper (https://wire.com/resource/Wire%20Security%20Whitepaper/downl...) for one way of doing it.

Hopefully, OpenWhisperSystems will release documentation about their implementation in Signal (note: it doesn't require phone, unlike WhatsApp)

Re:Telegram Desktop reaches version 1.0 by nicolapcweek94 on Thursday January 12, 2017 @08:08AM (#13381883)
Thanks! Will definitely read this.

I got fooled by Signal's requirement of a phone for the activation and thought it was also required for normal usage, I guess that's better than Whatsapp, though being able to register and use it without a phone at all would be even better (even Telegram doesn't do this though, IIRC it requires a phone number)

Re:Telegram Desktop reaches version 1.0 by nickik on Thursday January 12, 2017 @08:40AM (#13382074)
You can just use a one time VoiP phone number if you want to use Signal without your real phone number. That's not optimal, but its pretty neat.
Re:Telegram Desktop reaches version 1.0 by dchest on Thursday January 12, 2017 @01:16PM (#13384646)
Agreed on phone numbers. Speaking of Wire, it doesn't require them.
Re:Telegram Desktop reaches version 1.0 by nickik on Thursday January 12, 2017 @08:39AM (#13382063)
You are totally wrong. The phone number aspect has absolutely nothing to do with the e2e client problem.

Its possible to have e2e on multiple clients, with or without a phone number attached to it. There are multiple chat clients that can do it, some with, some without phone number. Signal requires phone number and does it, Wire and Riot do it without a phone number.

Telegram just don't actually care about security or privacy. Unencrypted defaults, all conversation saved on the server, even if you use their 'roll your own' crypt secret chats you lose most of the functionality that actually go people to use Telegram in the first place.

Telegram essentially has no usable e2e crypto to speak off. Secret chats are a usability and security nightmare.

People should use Riot (Matrix) or Wire. Those are much better.

Re:Telegram Desktop reaches version 1.0 by detaro on Thursday January 12, 2017 @07:32AM (#13381711)
> Signal does have sync, but it works exactly the same way as Whatsapp's does, requiring your phone to be on and connected

It doesn't. The phone is only needed for initial setup.