News for hackers. Stuff that matters.
Re:Russia lifts ban on Telegram by miked85 on Thursday June 18, 2020 @10:53AM (#23563611)
I would guess this means the gov't now has access to Telegram messages, one way or another.
Re:Russia lifts ban on Telegram by golergka on Thursday June 18, 2020 @11:20AM (#23563889)
There's quite popular conspiracy theory in Russia that says that Telegram was FSB-backed project from the start, and the whole failed ban was implemented to promote it. However, there's still no concrete proof that government has backdoor access to it, so if they do, they're being very careful about it.
Re:Russia lifts ban on Telegram by baybal2 on Thursday June 18, 2020 @11:37AM (#23564068)
The most obvious fact is that Mr. Durov is not walking with a hole in his head, as a double digit portion of anybody who had balls to be audacious about their opposition, and is not known to have an extensive security detail.

The mob has sent hitment to people whose offences were way lesser than that.

Their ways are unyielding, and uncompromising. Putin has a record killing people who grieved him more than a decade ago, keeping trying for years on end. People he killed some times survived 2-3, even 4, assassination attempts over years, just to be eventually killed by yet another one.

Knowing that, it's hard to explain how Telegram kept maintaining an office in Russia.

Re:Russia lifts ban on Telegram by golergka on Thursday June 18, 2020 @01:55PM (#23565696)
It's not that you're wrong; it's that that I wouldn't be so sure that you're right about it.

Russia's leadership is not monolithic, and it's decisions are not rational. Some critics are killed even though they do not pose a significant threat. Some are able to continue their fight. Some have allies on the inside; some are said to actually be controlled by the government.

If anything, history of such politics teaches me that it's chaos all the way down and almost no one has the full picture, neither knows what he's doing.

Re:Russia lifts ban on Telegram by fivre on Thursday June 18, 2020 @04:33PM (#23567682)
This is the most important thing to understand: non-Russian media loves to persist a never-ending charade that the whole of the Russian government is a direct limb of Putin and controlled wholly by him, which is quite far from true. It makes for a good narrative though, and since the Russian government is perhaps closer to that model than others, passes by readers unnoticed.

There are very much parts of the Russian political elite that will use violent and coercive means outside their official mandate to silence individuals. Roskomnadzor isn't really one of those, and is mostly limited to spewing more things onto blocklists to the chagrin of ISPs and people who actually understand the internet.

More likely Telegram is unblocked because someone higher-up finally got around to telling Roskomnadzor to fuck off and stop being a nuisance here, since its order never succeeded in actually blocking Telegram and mostly served to disrupt access to cloud service providers (breaking other, non-Telegram applications) as RKN ineffectually tried to issue block orders for entire AWS and GCP network ranges. Other parts of the government clearly didn't care much about the order (they continued to use Telegram for official business after the block), and it seems like it was either RKN attempting to flex its muscles to impress higher-ups or an unsuccessful attempt to put pressure on Telegram that the government has finally given up on.

Re:Russia lifts ban on Telegram by dgellow on Thursday June 18, 2020 @11:45AM (#23564152)
> Knowing that, it's hard to explain how Telegram kept maintaining an office in Russia.

Telegram has an office in Russia? Do you have sources? I cannot find one to confirm, and as far as I know that's not the case.

Re:Russia lifts ban on Telegram by baybal2 on Thursday June 18, 2020 @11:46AM (#23564172)
Re:Russia lifts ban on Telegram by fuoqi on Thursday June 18, 2020 @12:16PM (#23564545)
Have you even read this article? Because it contains dubios allegations from a single person and an explicit denial from Durov.
Re:Russia lifts ban on Telegram by thesz on Thursday June 18, 2020 @12:42PM (#23564893)
I took a time and read it and also read much more.

It is a good example of "he said she said". But Igor Ashmanov considers Rosenberg a good source on Durov brothers and lets say information above is correct.

That means that Durov is used a part of the real estate he had access to to help development of Telegram. It does not mean that Durov is (not) affiliated with Russian government it just means that for Durov it is useful to use Russian real estate he knows and adores and to use Russian talent.

It looks like Telegram servers are somewhere in Europe, BTW.

Re:Russia lifts ban on Telegram by thesz on Thursday June 18, 2020 @11:50AM (#23564229)
>The most obvious fact is that Mr. Durov is not walking with a hole in his head, as a double digit portion of anybody who had balls to be audacious about their opposition.

I think you are talking about Clinton Foundation, aren't you? A joke, of course.

Can you help me to access statistics from which you inferred "double digit portion"?

Not that I am pro-Russian-government, I am not. I just sense here something that is not completely right with my view of the world and I want to get better in that regard.

Re:Russia lifts ban on Telegram by tw04 on Thursday June 18, 2020 @02:14PM (#23565896)
Re:Russia lifts ban on Telegram by gdy on Friday June 19, 2020 @04:04AM (#23572187)
It also lists Chechen terrorists. The same kind of list for the US would include thousands of people killed by drone strikes.
Re:Russia lifts ban on Telegram by tw04 on Friday June 19, 2020 @10:20AM (#23574764)
If you're seriously going to downvote me and claim that Russia hasn't been assassinating people then you're either being paid by their government or you're just being a troll. If you want to dispute the list Wikipedia posted, then dispute it. The "But the US kills people too!" is literally completely irrelevant. And if you want to cite a list of US journalists who have been hunted down and assassinated by direction of the President, be my guest - please just hold your breath until your list hits 5 names.
Re:Russia lifts ban on Telegram by sudosysgen on Friday June 19, 2020 @12:02PM (#23575773)
The idea isn't that Russia doesn't assassinate people, it does. The idea is that Russia assassinates everyone that opposes it even when it is against their interest.
Re:Russia lifts ban on Telegram by tw04 on Friday June 19, 2020 @01:01PM (#23576396)
So... we're moving the goal posts? Because OP said he didn't believe that double digit people had been assassinated by Russia, so I provided his proof. I haven't seen anyone claim "Russia assassinates EVERYONE that opposes it" besides you.
Re:Russia lifts ban on Telegram by sudosysgen on Friday June 19, 2020 @07:57PM (#23580171)
The claim was not that more than 9 people were assassinated by Russia, but that 10% or more of the entire opposition was assassinated. Which is absolutely not supported and would lead to at the very least hundreds of thousands of assassinations.
Re:Russia lifts ban on Telegram by thesz on Thursday June 18, 2020 @03:35PM (#23566908)
And now I'd like to see a list of living Russian people who oppose Russian government. The problem, for me, was the claim about double digits part (I think it was about percentage - the double digits thing).
Re:Russia lifts ban on Telegram by mv4 on Thursday June 18, 2020 @04:36PM (#23567725)
Opposing is not enough. Opposing while being popular (or wealthy), now that puts one at risk.

https://en.wikipedia.org/wiki/List_of_journalists_killed_in_...

https://www.rferl.org/a/nemtsov-murder-russia-political-kill...

Re:Russia lifts ban on Telegram by thesz on Saturday June 20, 2020 @03:51PM (#23586637)
You keep presenting a list of homicides and/or contract killings.

Going by exemplar logic in your answer to gdy above, you are either paid by, say, Navalny or you are a troll. Okay then.

Re:Russia lifts ban on Telegram by fuoqi on Thursday June 18, 2020 @11:52AM (#23564262)
Great collection of propaganda bull*t, bro.

Is it Nemtsov "an audacious opposition" in your opinion? As much as I don't like the Putin rule, Nemtsov popularity was really minor to influence anything. If anything it was the "non-systematic opposition" who won most from his death.

Re:Russia lifts ban on Telegram by ZoomZoomZoom on Thursday June 18, 2020 @01:29PM (#23565398)
Sorry, but you managed to write both grotesque and extremely simplified description of Russian political practices.

There's absolutely no point in making any physical moves against Durov even if he was openly anti-Putin and supported opposition in any way. It's never done like that. He's already forced out of the country and is not considered a direct threat. He or his remaining actives may be considered a future asset, on the other hand.

Re:Russia lifts ban on Telegram by akater on Thursday June 18, 2020 @05:26PM (#23568216)
> even if he was openly anti-Putin and supported opposition in any way

This implies he does not support opposition in any way. This is not true. He does support opposition rallies—when they are held to support his cause, true, but such is political climate in Russia that publically supporting those who vocally oppose the state policy is a domain for very few and quite brave.

When Libertarian Party of Russia was organizing a rally in 2017 to protest Telegram ban, Durov contacted the Party himself. (I'm a member of LP RU.)

I don't count on Telegram security but Durov's public image and actions are certainly noticeable and appreciated by opposition.

Re:Russia lifts ban on Telegram by ZoomZoomZoom on Friday June 19, 2020 @04:50AM (#23572515)
> This implies he does not support opposition in any way. This is not true.

It implied just that I don't know for sure and it does not change a lot. Even Khodorkovsky is not considered a threat worthy of eliminating - he much better serves the cause being a propaganda target. Durov has even more to offer to Russian gov't (digital technology is the new arms race) so he has even lesser chance of bodily harm.

Re:Russia lifts ban on Telegram by brnt on Thursday June 18, 2020 @01:45PM (#23565582)
But isn't it remarkable that Telegram after all of these years still doesn't do E2EE by default, Telegram rolls its own crypto (of which the first version had significant problems) and still Telegram is used so much in Russia?
Re:Russia lifts ban on Telegram by tryauuum on Thursday June 18, 2020 @02:08PM (#23565837)
Minor correction. Telegram does not use its own crypto, it uses well-known cryptographic primitives. (However community criticised telegram for the poor choice of those well-known primitives)
Re:Russia lifts ban on Telegram by duxup on Thursday June 18, 2020 @11:27AM (#23563975)
>However, there's still no concrete proof that government has backdoor access to it, so if they do, they're being very careful about it.

Sadly I feel like that is a very real possibility for any software / hardware produced in any significantly non free country.

It can happen in other countries, but the likelihood of you hearing about it seems much much higher.

It's a sad situation as I don't like the idea of being suspicious by default of other developers / products simply because their country of origin, but I have trouble avoiding the obvious fact that even a well meaning developer / company based in those countries would / could easily be pressured into introducing some sort of access (doesn't matter how) and it's simply unlikely we'd know.

Re:Russia lifts ban on Telegram by freeflight on Thursday June 18, 2020 @12:21PM (#23564621)
Most developed countries have access like that already baked in by law [0], some countries even go as far as denying any reasonable expectation of privacy for data you share with third-parties [1] so the data-Kraken of intelligence services can just slurp it all up in bulk [2].

In that context, in a post-Snowden world, it's kinda grating to still have people talk about all the evil things that supposedly happen in "non free countries", while mostly being completely unaware about what their own, supposedly "free", countries are doing, often on a global scale because they are supposedly way more likely to "hear" about it, while still not being able to change anything about it.

[0] https://en.wikipedia.org/wiki/Lawful_interception

[1] https://en.wikipedia.org/wiki/Third-party_doctrine

[2] https://opendatacity.github.io/stasi-vs-nsa/english.html

Re:Russia lifts ban on Telegram by duxup on Thursday June 18, 2020 @12:52PM (#23564990)
I'm not really concerned about what people are or aren't aware of.

It's fairly obvious that more free countries allow for a greater chance in changes of law than non free countries.

The Snowden of China would not get his day in court....

Re:Russia lifts ban on Telegram by freeflight on Thursday June 18, 2020 @01:46PM (#23565592)
> The Snowden of China would not get his day in court....

Because the Snowden of the US did?

Re:Russia lifts ban on Telegram by e12e on Thursday June 18, 2020 @02:30PM (#23566090)
Re:Russia lifts ban on Telegram by duxup on Thursday June 18, 2020 @04:17PM (#23567495)
He gets his too.

Not sure he'd get the same type of trail in China, Russia, or if it would go that far.

Re:Russia lifts ban on Telegram by vkou on Thursday June 18, 2020 @01:55PM (#23565695)
He certainly got his day in the court of public opinion, half the country thinks he's a traitor.

If I were him, I, uh, would not try my hand in a court of law.

Re:Russia lifts ban on Telegram by duxup on Thursday June 18, 2020 @01:51PM (#23565651)
Isn't that up to Snowden?

I don't think the Snowden of China gets such an option.

Re:Russia lifts ban on Telegram by sudosysgen on Friday June 19, 2020 @12:05PM (#23575810)
Snowden has the choice of a fake trial in which he is not allowed to present the evidence that is appropriate under the espionage act.
Re:Russia lifts ban on Telegram by freeflight on Thursday June 18, 2020 @04:43PM (#23567787)
It's only up to Snowden because he managed to successfully evade getting captured, even tho the US went trough quite some lengths [0] trying to capture him and already had a plane ready to rendition him back to the US [1].

If they caught him, he would not have been able to properly defend himself because US law would prohibit him from making his case [2].

Heck, if they would have caught him before his Hong Kong meeting, they could simply have "vanished" him and nobody would have been any the wiser, as Greenwald, Poitras, and MacAskill would have had a very difficult time proving the legitimacy of the leaked documents.

So no, neither the Snowden of the US, nor of China gets any of these options, that's why this whole false dichotomy of "free countries vs nonfree countries" is just another facette of the constantly going on propaganda war.

The best chance whistleblowers like that have is trying to escape the sphere of influence of whoever they blew the whistle on. For Chinese, Russian, Iranian, and others that's large parts of the world they will be welcomed in, for US whistleblowers it's pretty much only a handful of countries out of whom only a very few are actually able to keep them save/not straight up hand them over.

[0] https://en.wikipedia.org/wiki/Evo_Morales_grounding_incident

[1] https://www.theguardian.com/us-news/2016/feb/05/edward-snowd...

[2] https://whistleblower.org/in-the-news/wsj-op-ed-why-edward-s...

Re:Russia lifts ban on Telegram by duxup on Thursday June 18, 2020 @04:55PM (#23567918)
I suspect if the US wished to vanish him, it would be done.

There's a whole world of talk of Snowden and others supposedly going to be vanished and it for whatever reason the fact that it hasn't happened seems entirely lost on folks who talk about it.

> "free countries vs nonfree countries" is just another facette of the constantly going on propaganda war.

I don't know what you're trying to say about that. I think there are real differences between freedoms allowed in different nations and they have real impacts.

Re:Russia lifts ban on Telegram by 082349872349872 on Thursday June 18, 2020 @11:33AM (#23564023)
... produced in any country.

I wonder if the money Crypto AG made will have been worth any future reputation cost for Zug's economy.

https://www.luzernerzeitung.ch/wirtschaft/bund-stoppt-nachfo... "... verkaufte die Crypto AG im Auftrag des US-Geheimdienstes CIA und des deutschen Bundesnachrichtendienstes Jahrzehnte lang manipulierte Chiffriergeräte an diverse Staaten."

Re:Russia lifts ban on Telegram by duxup on Thursday June 18, 2020 @11:37AM (#23564070)
Like I said it can happen anywhere, but the likelihood and ease of it happening in less free countries seems significantly different.

I don't believe any country means all countries are equivalent as far as the risks go.

The amount of news / data about it will of course be higher in more free nations.

Re:Russia lifts ban on Telegram by luckylion on Thursday June 18, 2020 @12:17PM (#23564559)
> Like I said it can happen anywhere, but the likelihood and ease of it happening in less free countries seems significantly different.

Why? Bureaucracy, Intelligence Services and state-level paranoia transcends political ideologies and systems.

> The amount of news / data about it will of course be higher in more free nations.

On the other hand, we'd hear a lot more about anything from Moscow in our media, so I doubt there's a lot to be talked about as of now. It's only one big leak away, of course, but so far, I don't see a lot of support for your theory.

Re:Russia lifts ban on Telegram by duxup on Thursday June 18, 2020 @12:23PM (#23564645)
Because in free countries there's a actually the potential for individuals and groups to refuse to cooperate and make the request known.

If China comes to you and tells you to hand over the keys, you don't go to court or the news media ... in the west you can actually refuse and we see that happen and play out in the courts and etc.

Re:Russia lifts ban on Telegram by luckylion on Thursday June 18, 2020 @12:41PM (#23564879)
Yeah, you have the theoretical potential to not comply with a national security letter and just go public. Good luck with that.
Re:Russia lifts ban on Telegram by duxup on Thursday June 18, 2020 @12:50PM (#23564976)
In free countries there are court cases about such things.

Not in less free countries.

It seems like you're holding all nations to be equal if there isn't perfection. I think that's a poor way to measure anything involving people.

The Snowden of China doesn't get his day in court, maybe never talked if his family back home was at risk.

Re:Russia lifts ban on Telegram by luckylion on Thursday June 18, 2020 @03:14PM (#23566598)
> In free countries there are court cases about such things. Not in less free countries.

Russia literally had court proceedings about Telegram, which this post is about. Is Russia not a "less free country"? Or are those not "real court cases" while "ours" are totally real (but you can't talk about them and must play charades, and the opposing side has super powers written into the law)? If you need help carrying those goal posts, let me know.

> The Snowden of China doesn't get his day in court, maybe never talked if his family back home was at risk.

Neither does the Snowden of the US of A, you know, that one guy... right, Snowden, who has to hide in Russia of all places to not get shipped off to Gitmo. And even if he took that route, I'm sure the apologists would say "well, this is one of those small imperfections but he's fortunate that he's not in Russia".

Re:Russia lifts ban on Telegram by duxup on Thursday June 18, 2020 @03:34PM (#23566892)
Snowden can in fact get his day in court.

His choice to not do so is understandable, but it's an option.

I'm a little lost on what you're saying at this point. I can't imagine you or I want to get into the judicial differences between the US and Russia.

Re:Russia lifts ban on Telegram by sudosysgen on Friday June 19, 2020 @12:07PM (#23575829)
Snowden has the choice of a court where he will not be able to defend himself. This is exactly how it works in China, Russia, or the former USSR.
Re:Russia lifts ban on Telegram by 082349872349872 on Sunday June 21, 2020 @04:52PM (#23595311)
As I understand it, Snowden is perfectly willing to go on trial in the US, as long as said trial is conducted in public.
Re:Russia lifts ban on Telegram by charlangas on Thursday June 18, 2020 @11:25AM (#23563954)
Agreed! I read the headline and my first thought was "Guess it's time to stop using Telegram now"
Re:Russia lifts ban on Telegram by buran77 on Thursday June 18, 2020 @11:30AM (#23563995)
Implausible undeniability, a brilliant way to plant the seeds of uncertainty. For the people who have enough reasons to be concerned about intercepted communications, the ones who were the core reason for the blocking (like activists) this can't sit well.
Re:Russia lifts ban on Telegram by Avamander on Thursday June 18, 2020 @05:47PM (#23568439)
> Implausible undeniability, a brilliant way to plant the seeds of uncertainty

All that while having open-source and much safer alternatives. I don't see a problem here.

Re:Russia lifts ban on Telegram by thesz on Thursday June 18, 2020 @11:45AM (#23564160)
Are you sure these reasons for blocking were activists and not something more nefarious?
Re:Russia lifts ban on Telegram by buran77 on Thursday June 18, 2020 @06:06PM (#23568675)
Of course I'm not sure. But activists are usually a safe bet in such cases. Whoever the reason for the ban they're probably having some doubts right now.
Re:Russia lifts ban on Telegram by AlfeG on Thursday June 18, 2020 @02:01PM (#23565759)
This ban is useless. Telegram keep working without issues. I haven't hear about any issues about connecting to Telegram servers in RF. Some govn't entites are using Telegram, some high profile people from Ministry using Telegram.
Re:Russia lifts ban on Telegram by fuoqi on Thursday June 18, 2020 @11:32AM (#23564014)
IIRC Telegram always was willing to share with security services message history from non-secret chats and groups. The problem was the idiotic requirement to give keys for E2EE chats.
Re:Russia lifts ban on Telegram by eitland on Thursday June 18, 2020 @02:22PM (#23565991)
Telegram say they have gone pretty far to make sure they cannot get hold of private messages - even the ones who aren't E2E-encrypted.

How? As far as I understand by having the client download encrypted messages from one Telegram server and keys from another and then place those servers in different datacenters in different jurisdictions.

FTR: of course I am aware that unlike E2E-encrypted messaging in this case you have to trust the vendor. If you do is up to you. I trust them more than WhatsApp (who are E2E-encrypted but backup to NSA^HGoogle and try to extract all kinds of metadata) and less than Signal (even though Signal has had at least one horribly security glitch).

One more thing: Telegram are also pretty open on the fact that they take down public terrorist content.

Re:Russia lifts ban on Telegram by insensible on Thursday June 18, 2020 @11:57AM (#23564319)
I read the court case in translation at the time. The opposite is true. The government acknowledged in court that keys for E2EE chats were not possible to surrender, but they had terrorists using non-E2EE groups to coordinate an attack and Telegram didn't produce those keys either.
Re:Russia lifts ban on Telegram by fuoqi on Thursday June 18, 2020 @12:07PM (#23564441)
Can you link it? The relevant law written in a really stupid manner, it requires to give keys for decrypting communications, which in case of TLS means session keys. Of course no sane company would log them, so they have nothing to give in the first place. But refusing to share keys speaks nothing about sharing messages themselves.

One justification for sharing keys could be that security services want to use data recorded by SORM (and nowadays we also have the goddamn Yarovaya law) as an evidence and to do that you have decrypt it. Luckily for us modern security frameworks are built around ephemeral keys and forward secrecy.

Re:Russia lifts ban on Telegram by lxglv on Thursday June 18, 2020 @02:53PM (#23566337)
Or it may mean, that they decided to stop budgeting effort that led to almost zero result. RossTelekomNadzor was banning IP-ranges from the main cloud providers, that resulted in major outages of other services (that were not multi-clod) except Telegram.

People, who used Telegram did not stop using it since the very first day of official ban.

Re:Russia lifts ban on Telegram by maqp on Friday June 19, 2020 @11:10AM (#23575256)
The Russian state knew the ban wasn't effective, they just wanted to save face for being humiliated wrt Telegram not handing private TLS keys.

They never needed those keys however, they've always had the capability to hack the server.

Re:Russia lifts ban on Telegram by mattigames on Thursday June 18, 2020 @11:26AM (#23563969)
Someone should run a service where they have a chatbot pretend to be a terrorist on every chat app on every country and if the police reacts it means messages are being intercepted, like a status page of how much communication is being tracked.
Re:Russia lifts ban on Telegram by miked85 on Thursday June 18, 2020 @11:44AM (#23564145)
I am pretty sure the excuse that "I was just pretending" wouldn't go over too well with authorities.
Re:Russia lifts ban on Telegram by mattigames on Thursday June 18, 2020 @12:09PM (#23564458)
It would undoubtedly bring some heat, one would have to do it anonymously and also do so from a country with strong free speech laws, where you can either argue in court it was for research purposes or that role-playing a terrorist does not constitute a crime.
Re:Russia lifts ban on Telegram by Nextgrid on Thursday June 18, 2020 @11:52AM (#23564250)
Assuming the chatbot operator can be identified. What if the whole thing is done pseudonymously/anonymously?
Re:Russia lifts ban on Telegram by ZoomZoomZoom on Thursday June 18, 2020 @01:37PM (#23565493)
Hypothetically speaking, would you be willing to attempt to set it up?
Re:Russia lifts ban on Telegram by Nextgrid on Thursday June 18, 2020 @02:37PM (#23566166)
If someone were to do it, wouldn't it defeat the whole purpose of the system by answering "yes" to this question and letting the backdoor users know that someone is now laying traps to catch them using those backdoors in the act?

However, the effort of setting this up could be better spent on making (or contributing to) a messaging app that's open-source and secure by design, where you don't need such setups to detect backdoors because they are near-impossible to introduce (open-source code and lack of a central server).

Re:Russia lifts ban on Telegram by mattigames on Thursday June 18, 2020 @03:14PM (#23566590)
And the most likely thing to happen is that after you have spend years creating it nobody would use it.
Re:Russia lifts ban on Telegram by ZoomZoomZoom on Friday June 19, 2020 @04:43AM (#23572446)
It was completely rhetorical question. I implied no one would take the risks.
Re:Russia lifts ban on Telegram by mattigames on Friday June 19, 2020 @10:44AM (#23575008)
There are people willing to be a tor relay I bet that kind of people would be willing to help to an extent.
Re:Russia lifts ban on Telegram by maqp on Friday June 19, 2020 @11:08AM (#23575236)
They've always had that capability.

1. Hack the server

2. Read every dissident groups' messages.

3. No step 3.

Re:Russia lifts ban on Telegram by sudosysgen on Friday June 19, 2020 @11:58AM (#23575740)
Which is why dissident groups, at least those I know of, do not communicate sensitive info except by one-to-one secret chat.