News for hackers. Stuff that matters.
Re:Telegram is not as private and secure as most of its user... by valenterry on Monday December 07, 2020 @06:06AM (#25331057)
1. I wouldn't call that obvious. I could claim that any messenger that doesn't use OTP is unsecure, because in comparison they are. So this is a generic complaint that applies to literally all existing communication tooling available to normal folks. Hence, not helpful.

2. Only if you give it access, so also not obvious

Re:Telegram is not as private and secure as most of its user... by est31 on Monday December 07, 2020 @06:09AM (#25331078)
There is an extreme amount of difference in security between e.g. the axotlotl prototocol and only transport encrypting to and from the server. The benefits of OTP might become real decades in the future if we develop large quantum computers (or if we become a Kardashev type 2 civilization and suddenly can afford spending the energy required to boil all oceans on earth multiple times over to crack encrypted content by brute force).
Re:Telegram is not as private and secure as most of its user... by valenterry on Monday December 07, 2020 @06:43AM (#25331251)
Oh, the benefits of OTP are huge right now. Just to mention two:

1. the implementation can be trivial and so there isn't really an algorithm that can be broken or a backdoor in a RNG on your device.

2. Protection against MITM attacks (or anything related to problems with certificates, even bugs in your software)

That's an extreme amount of difference in security compared e.g. the axotlotl protocol.

Now, the authors of Signal are smart guys and of course they used the axotlotl protocol for obvious reasons, namely to increase usability. But you can say exactly the same about telegram too. It only becomes a matter of where you draw the line.

Re:Telegram is not as private and secure as most of its user... by OJFord on Monday December 07, 2020 @06:09AM (#25331074)
> 2. Only if you give it access, so also not obvious

Or rather invalid, unless you make it valid, and then obvious.