News for hackers. Stuff that matters.
Re:Signal app downloads spike as US protesters seek message ... by 0xy on Friday June 05, 2020 @02:32AM (#23425651)
Absolutely agree. I really wish Telegram would get off the phone number system, especially after the embarrassing hack in Brazil. It's not explicitly Telegram's fault, but if your primary authentication method is insecure it's at least a little bit your fault.

Phone numbers are NOT safe. I don't know why SMS MFA is even a thing, they're worse than passwords.

When you use phone numbers or SMS for security, you are putting the fate of your entire company's security on an underpaid customer service rep at Verizon.

Re:Signal app downloads spike as US protesters seek message ... by matheusmoreira on Friday June 05, 2020 @10:47AM (#23429158)
> especially after the embarrassing hack in Brazil

What happened?

Re:Signal app downloads spike as US protesters seek message ... by 0xy on Saturday June 06, 2020 @01:16AM (#23437012)
Numerous Brazilian judges and politicians had their Telegrams hacked via SIM hijacking.
Re:Signal app downloads spike as US protesters seek message ... by nickik on Friday June 05, 2020 @03:23AM (#23425917)
Telegram should maybe just use proper encryption first.
Re:Signal app downloads spike as US protesters seek message ... by xerxesaa on Friday June 05, 2020 @05:43AM (#23426660)
Can someone explain to me why MtProto is not considered proper encryption? Genuinely asking, not challenging.

At least since version 2.0 it seems it's using AES encryption: https://core.telegram.org/mtproto/description

Re:Signal app downloads spike as US protesters seek message ... by nickik on Friday June 05, 2020 @06:42PM (#23434835)
By default its not e2e encrypted and if you want to use e2e you lose lots of capability. That is simply not acceptable in a modern messenger.
Re:Signal app downloads spike as US protesters seek message ... by 0xy on Saturday June 06, 2020 @01:15AM (#23437008)
Speaking as someone who regularly uses private chats, what capability?
Re:Signal app downloads spike as US protesters seek message ... by AnonC on Sunday June 07, 2020 @05:37AM (#23446055)
Secret chats are tied to one single device, which may be ok for some people. The bigger disadvantage is that you cannot have group chats that are end to end encrypted. Only person to person chats are allowed as secret chats.
Re:Signal app downloads spike as US protesters seek message ... by nickik on Sunday June 07, 2020 @10:25PM (#23452994)
- Group Chat

- Multi Device

Seems to me that are some of the most useful things about modern chat.

Also, why not just use a chat app that is save by default. The whole concept of private chat is insane to me.

Re:Signal app downloads spike as US protesters seek message ... by bjoli on Friday June 05, 2020 @03:53AM (#23426072)
And by default.