News for hackers. Stuff that matters.
Re:Signal app downloads spike as US protesters seek message ... by AnonC on Friday June 05, 2020 @02:18AM (#23425589)
I don't think that's a great idea until Signal stops exposing the phone number of the user to everyone else (for all the bashing that Telegram gets on cryptography, it has mechanisms to hide one's phone number and even the fact that one has a Telegram account from others).
Re:Signal app downloads spike as US protesters seek message ... by 0xy on Friday June 05, 2020 @02:32AM (#23425651)
Absolutely agree. I really wish Telegram would get off the phone number system, especially after the embarrassing hack in Brazil. It's not explicitly Telegram's fault, but if your primary authentication method is insecure it's at least a little bit your fault.

Phone numbers are NOT safe. I don't know why SMS MFA is even a thing, they're worse than passwords.

When you use phone numbers or SMS for security, you are putting the fate of your entire company's security on an underpaid customer service rep at Verizon.

Re:Signal app downloads spike as US protesters seek message ... by matheusmoreira on Friday June 05, 2020 @10:47AM (#23429158)
> especially after the embarrassing hack in Brazil

What happened?

Re:Signal app downloads spike as US protesters seek message ... by 0xy on Saturday June 06, 2020 @01:16AM (#23437012)
Numerous Brazilian judges and politicians had their Telegrams hacked via SIM hijacking.
Re:Signal app downloads spike as US protesters seek message ... by nickik on Friday June 05, 2020 @03:23AM (#23425917)
Telegram should maybe just use proper encryption first.
Re:Signal app downloads spike as US protesters seek message ... by xerxesaa on Friday June 05, 2020 @05:43AM (#23426660)
Can someone explain to me why MtProto is not considered proper encryption? Genuinely asking, not challenging.

At least since version 2.0 it seems it's using AES encryption: https://core.telegram.org/mtproto/description

Re:Signal app downloads spike as US protesters seek message ... by nickik on Friday June 05, 2020 @06:42PM (#23434835)
By default its not e2e encrypted and if you want to use e2e you lose lots of capability. That is simply not acceptable in a modern messenger.
Re:Signal app downloads spike as US protesters seek message ... by 0xy on Saturday June 06, 2020 @01:15AM (#23437008)
Speaking as someone who regularly uses private chats, what capability?
Re:Signal app downloads spike as US protesters seek message ... by AnonC on Sunday June 07, 2020 @05:37AM (#23446055)
Secret chats are tied to one single device, which may be ok for some people. The bigger disadvantage is that you cannot have group chats that are end to end encrypted. Only person to person chats are allowed as secret chats.
Re:Signal app downloads spike as US protesters seek message ... by nickik on Sunday June 07, 2020 @10:25PM (#23452994)
- Group Chat

- Multi Device

Seems to me that are some of the most useful things about modern chat.

Also, why not just use a chat app that is save by default. The whole concept of private chat is insane to me.

Re:Signal app downloads spike as US protesters seek message ... by bjoli on Friday June 05, 2020 @03:53AM (#23426072)
And by default.
Re:Signal app downloads spike as US protesters seek message ... by dastx on Friday June 05, 2020 @09:02AM (#23428002)
I disagree. Telegram addresses a different issue from Signal. I see signal as a tool to message people you already know and/or trust, but you do not want a third party to be able to listen in. At the point, it doesn't matter if the other party knows my number or not.

Telegram on the other hand is better for issues like this, where large numbers of people need to communicate anonymously without prying eyes.

They're addressing the same issue for different markets. That's all it is.

Re:Signal app downloads spike as US protesters seek message ... by Vinnl on Friday June 05, 2020 @02:41AM (#23425714)
Given that they're working on that, that's very likely going to be the case before we've managed to get everyone to use it
Re:Signal app downloads spike as US protesters seek message ... by Hamuko on Friday June 05, 2020 @03:23AM (#23425916)
How is that different from WhatsApp, which is the default for everyone in a lot of places?
Re:Signal app downloads spike as US protesters seek message ... by AnonC on Friday June 05, 2020 @07:50AM (#23427428)
GP here. It’s no different from WhatsApp in this sense. But WhatsApp is even worse because it shares communication metadata with Facebook (though message content is end to end encrypted).
Re:Signal app downloads spike as US protesters seek message ... by wayoutthere on Friday June 05, 2020 @01:44PM (#23431430)
The hardcore anarchists have been using cash burners from day 1. But I'm seeing more people in the "concerned citizen" category taking this route too.
Re:Signal app downloads spike as US protesters seek message ... by Evidlo on Friday June 05, 2020 @03:35AM (#23425974)
And don't forget centralization.