News for hackers. Stuff that matters.
Re:Ask HN: Why do you avoid Telegram, arguably one of the be... by HelenePhisher on Tuesday April 21, 2020 @07:22AM (#22933885)
No end-to-end encryption per default, and if I activate it I’m not able to see the conversation on other devices. Signal does that better.
Re:Ask HN: Why do you avoid Telegram, arguably one of the be... by vpEfljFL on Tuesday April 21, 2020 @08:04AM (#22934145)
- end-to-end encryption

- able to see the conversation on other devices

You can choose only one. Otherwise I can't see how it would be end-to-end encrypted. Your devices should create some sort of a group chat to make this work.

Group chats have large enough attack surface and "end-to-end encryption" will create false sense of security.

Re:Ask HN: Why do you avoid Telegram, arguably one of the be... by sdwolfz on Tuesday April 21, 2020 @09:11AM (#22934616)
Signal has end-to-end encryption and you are able to see the conversation on other devices from the point you link your devices.

What it does not have is the ability to send your conversation history to your linked devices (which I find a bit odd, if you can trust a device with your present/future conversations, you should be able to trust it with your past, or at least be able to opt in in trusting it with sending over your past conversations). I hope they will provide this in the future.

Re:Ask HN: Why do you avoid Telegram, arguably one of the be... by kdtsh on Tuesday April 21, 2020 @09:43AM (#22934891)
All you need is for the two instances of the app to use separate sets of key pairs, where the keys have been generated on the device itself and the private keys never leave the devices, to share the private key for the conversation between the two devices. I don't know if Signal or any other app does this, but it's 100% conceptually possible.
Re:Ask HN: Why do you avoid Telegram, arguably one of the be... by vekker on Tuesday April 21, 2020 @08:51AM (#22934471)
Huh, why? If you have the same private key on your devices, you can do E2E encryption on the same conversation on multiple devices, no?
Re:Ask HN: Why do you avoid Telegram, arguably one of the be... by HelenePhisher on Tuesday April 21, 2020 @08:42AM (#22934398)
I use Signal on multiple desktops. It's a good experience and really works well. I can choose both.
Re:Ask HN: Why do you avoid Telegram, arguably one of the be... by vpEfljFL on Thursday April 23, 2020 @09:12AM (#22955514)
In general there is a simple rule: either usability or security.

All general consumer grade tools are fighting with this equation: How can we make an app which will appeal to the broad audience which will be easy to use.

I can't say anything about signal but in general if something is easy to use and you can chat super secure with your grandma then most likely it isn't secure how you might think it is and it's actually an issue because you may want to send data which otherwise you wouldn't if you know you're on compromised channel.

Sharing history between e2e encrypted devices is a tricky thing because you should have forward security with some ratchet keys.

Re:Ask HN: Why do you avoid Telegram, arguably one of the be... by detaro on Tuesday April 21, 2020 @08:36AM (#22934366)
Other products manage, so it's clearly not a case of "You can choose only one".
Re:Ask HN: Why do you avoid Telegram, arguably one of the be... by stereotactic on Tuesday April 21, 2020 @08:25AM (#22934285)
How does end to end encryption make that better?

I am genuinely curious. Is your threat model too severe that you really need to hide your conversations?

Re:Ask HN: Why do you avoid Telegram, arguably one of the be... by HelenePhisher on Tuesday April 21, 2020 @08:34AM (#22934347)
I don’t want to discuss the reasons for encrypted communication, sorry. Citizenfour was a good movie though.
Re:Ask HN: Why do you avoid Telegram, arguably one of the be... by hncensorsnonpc on Tuesday April 21, 2020 @10:08AM (#22935091)
Why is this utterly stupid question coming up again and again? Go ask your peers/yourself why feel the need to share all of your conversations with the government and other 3rd parties who in the best case just want to sell you shit.
Re:Ask HN: Why do you avoid Telegram, arguably one of the be... by vpEfljFL on Tuesday April 21, 2020 @08:34AM (#22934348)
Could you please "open source" all your conversations to provide ground for reasoning "I have nothing to hide".

So, and we can discuss threat models.

Thank you.

Re:Ask HN: Why do you avoid Telegram, arguably one of the be... by stereotactic on Tuesday April 21, 2020 @08:58AM (#22934522)
I don't mind; in public groups its for everyone to see.

Snooping by the government or by the corporations? Which one is more insidious?

Re:Ask HN: Why do you avoid Telegram, arguably one of the be... by fsflover on Tuesday April 21, 2020 @09:17AM (#22934663)
I would prefer to have none, hence e2e encryption.
Re:Ask HN: Why do you avoid Telegram, arguably one of the be... by m-p-3 on Tuesday April 21, 2020 @09:31AM (#22934778)
High expectations of privacy. I prefer to hide everything, even mundane stuff, than wished I had and I didn't.