News for hackers. Stuff that matters.
Re:Telegram Voice Chats by nikivi on Wednesday December 23, 2020 @04:58AM (#25516113)
I found Durov's plans to monetize Telegram most interesting.

https://t.me/durov/142

Team features (competing with Slack/Discord?), ad tools for telegram channels and premium stickers. Whilst keeping all the existing Telegram features.

Re:Telegram Voice Chats by adkadskhj on Wednesday December 23, 2020 @10:47AM (#25518760)
I really wish Telegram would embrace open source, security audits, etc. It's one of, if not the, best UX chat message apps with so many features it's sort of mindblowing. I'd love to use them. But.. i avoid it, because something doesn't smell right.

Allowing me to pay would be yet another right direction for Telegram, but i just can't move past the audit (and to a lesser extent, FOSS)

Re:Telegram Voice Chats by unicornporn on Wednesday December 23, 2020 @11:37AM (#25519364)
> It's one of, if not the, best UX chat message apps with so many features it's sort of mindblowing.

I'd go as far as saying it's by far the best. I have used the word unnerving to describe the fact it's so beyond the rest of the competition, yet free and without a viable business model.

I use Signal with friends and Matrix with other nerds.

Re:Telegram Voice Chats by behnamoh on Wednesday December 23, 2020 @12:38PM (#25519981)
I totally agree. And I can't understand why FB - a much wealthier corporation - can't fix numerous problems with its Messenger app. Sometimes the messages don't sync correctly, sometimes voice messages don't play, sometimes images are not loaded in high quality, the search sucks, removing a single message requires 3 taps!, etc. etc. None of these happened in tg for me, and yet, I don't know why more people aren't using it.

Given the open-source nature of tg, I would imagine someone would put together a Messenger client based on tg source code. I guess that would solve many problems with FB's own messenger.

Re:Telegram Voice Chats by eitland on Wednesday December 23, 2020 @02:21PM (#25521067)
> yet free and without a viable business model.

This has been bothering me as well but seems to be solved now.

All current messaging features will be free but new team features etc will be paid IIRC and AFAIK.

Re:Telegram Voice Chats by PurpleFoxy on Wednesday December 23, 2020 @05:15PM (#25522895)
It’s mind blowing how the app has had millions of users and massive development for years and it was all paid for by one billionaire’s personal funds without a plan to make the money back. It’s only being monetised now because it costs too much.
Re:Telegram Voice Chats by unicornporn on Thursday December 24, 2020 @02:10PM (#25530413)
> seems to be solved now.

Well, we'll have to see how that pans out...

Re:Telegram Voice Chats by pkulak on Wednesday December 23, 2020 @12:46PM (#25520067)
It goes too far for me. Every time I set it up I have to turn the background to white and turn off emojis that take up the entire window and wipe out all context. I actually prefer the simplicity of Signal's apps.
Re:Telegram Voice Chats by berkes on Wednesday December 23, 2020 @11:32AM (#25519301)
Telegram, the client, is fully FLOSS. You can even find it on f-droid¹, contrary to e.g. Signal, which is only available for installation via closed app stores.

Do you refer to the server-stack? How would that being Open Source help you when you cannot ever verify what a server actually runs?

¹ https://f-droid.org/en/packages/org.telegram.messenger/

Re:Telegram Voice Chats by spicybright on Wednesday December 23, 2020 @01:21PM (#25520410)
That's totally false. Here's the client you can download, compile, and side-load yourself: https://github.com/signalapp/Signal-Android

And here's the server implementation you can also run yourself: https://github.com/signalapp/Signal-Server

Telegram has also been exploited multiple times, while signal has held up against a US federal subpoena.

https://www.theverge.com/2016/10/4/13161026/signal-subpoena-...

Re:Telegram Voice Chats by berkes on Wednesday December 23, 2020 @04:09PM (#25522261)
I did not say, nor wanted to imply that Signal is not FLOSS.

Just that Signal is not on F-Droid. Which has a bit of a history and some drama. It was there, log ago. Still textsecure back then.

Sure, you can build it yourself. And from there, with some hoops to jump, install it on your phone over adb (it's what I did). But that is far from fdroid or some other app store. E.g. there are no updates, which is a crucial feature in a security-critical app.

Re:Telegram Voice Chats by riedel on Wednesday December 23, 2020 @01:36PM (#25520575)
There is also fdroid repos such as [1] that contain signal. Fdroid policy requires approval from the author to be included, which is a bit weird take at FLOSS.

[1] https://calyxos.gitlab.io/calyx-fdroid-repo/fdroid/repo?fing...

Re:Telegram Voice Chats by wil93 on Wednesday December 23, 2020 @07:31PM (#25523951)
> Telegram has also been exploited multiple times

Source?

Re:Telegram Voice Chats by j-james on Wednesday December 23, 2020 @08:57PM (#25524399)
Re:Telegram Voice Chats by tpoacher on Saturday December 26, 2020 @05:48PM (#25547057)
This had nothing to do with code vulnerabilities let alone open-source in general. It was a social engineering hack relying on default voicemail passwords.
Re:Telegram Voice Chats by adkadskhj on Wednesday December 23, 2020 @11:56AM (#25519530)
> Do you refer to the server-stack? How would that being Open Source help you when you cannot ever verify what a server actually runs?

Primarily yes, and while true - that's an extreme and a bit pointless, imo. I can say the same about Linux, which i'm on now, as i've never verified what i'm _actually_ running. Or Matrix servers i'm connected to, and what they're _actually_ running.

Yet the idea remains that something some people have analyzed is better than something "no one" (outside Telegram lol) has analyzed.

Your question feels as if we may as well all be running entirely closed source. I'm unsure why the benefits and/or supporting arguments for FOSS need to be stated here. Is there a degree of your question i'm missing?

edit: Oh and, of course, the FOSS nature is even more important in the case where the majority of Telegram communication seems to lack security. If this was a zero knowledge platform i'd be far less concerned about their serverside implementation.

Re:Telegram Voice Chats by raziel2p on Wednesday December 23, 2020 @12:26PM (#25519856)
There's a big difference between something that's possible with some effort (i.e. compile the Linux kernel from source, compare the binaries with what ships with your distro), and it doesn't need to be you personally that does it. If a distro has 100k users, only 1 of them has to discover and make a scandal out of it. Projects like Debian take it even further and make a promise that it should be easy to reproduce the builds of their packages.

That's literally impossible with any closed-source server-side software. You can't even inspect the binary as you can with a client.

Re:Telegram Voice Chats by selfishgene on Wednesday December 23, 2020 @07:08PM (#25523787)
Re:Telegram Voice Chats by berkes on Wednesday December 23, 2020 @12:25PM (#25519847)
> that's an extreme and a bit pointless, imo.

I understand the confusion. I was talking about the current situation where you cannot run your own server or even choose amongst servers.

It is pointless if you can view the source-code of that server, but have no way to check if the one server that you can ever use, runs that code at all.

It makes sense in a federated or decentralised setup, where you can run your own servers, choose instances, or even build your own version of the client with other backend-urls baked in. For Telegram all it offers is validation that the code is good, or not good. Without any power to do anything about that.

Re:Telegram Voice Chats by kifhuwzrsa on Wednesday December 23, 2020 @01:04PM (#25520248)
Signal is available from their website and the build on their website includes a self update feature.
Re:Telegram Voice Chats by perardi on Wednesday December 23, 2020 @11:02AM (#25518958)
Despite the potential security issues, I still use Telegram.

Where possible, I prefer to type on my proper desktop keyboard, because I am a stubborn old man and you kids with your phones, and Telegram is just so nice in that context. It uses no resources, the UI largely gets out of the way, and message sync and delivery is 99.9% reliable in my experience. (Looking at you, Messages app.)

I do worry on some level that, by not paying, I am the product in some sense. And I wish they had a full security audit. But, I have so many other potentially insecure ways for people to get my info, and really I’m too boring to stalk anyways, so I just can’t make myself too bothered.

Re:Telegram Voice Chats by pkulak on Wednesday December 23, 2020 @12:56PM (#25520167)
It's not your info that people can get, it's your chats, which makes "info" sound like the understatement of the year. Less so the past year that we've been in the same house at all times, but I generally chat with my SO all day long about everything on my messaging app. It's _not_ okay to have years of that history stored on a Russian app server based in Dubai. A security audit doesn't matter. I'll take for granted that the chats get to the server securely before being stored in plain text forever. Even if I could trust the current company to be 100% altruistic, I can't trust that data to be safe with them forever. Through state-sponsored attacks, company sales, new CEOs, new boards, etc.
Re:Telegram Voice Chats by selfishgene on Wednesday December 23, 2020 @07:08PM (#25523792)
Re:Telegram Voice Chats by elliebike on Wednesday December 23, 2020 @01:41PM (#25520623)
I joined this, replied to the post, and now I'm being sent lots of creepy messages and dick pics from the men of the internet :/

Telegram has no option for "Only allow contacts to message me", it turns out.

After lots of messages, they eventually offer to auto archive and mute people not on your contacts, but it's still fairly visible on the app.

Perhaps Telegram should work on better abuse management before adding voice chat! I used to love the app but now I am considering uninstalling.

Re:Telegram Voice Chats by mediaman on Wednesday December 23, 2020 @02:57PM (#25521486)
That's bizarre. I just looked at the app and they support contacts-only limits for everything (voice, presence, profile photo, forwarded messages) _except_ for regular messages.

You can't reject images from non-contacts either. It's either images from everyone or nobody.

Does your chats list get filled up with these unsolicited messages from randos?

It seems like they should at the very least offer a mechanism to accept a contact request before any messages can be sent.

It's also an interesting example in the vastly different experience that different demographics can have in an app - say, women, or minorities often the recipients of abuse - and how blind an app maker can be to that experience if it's not intentionally studied.

Re:Telegram Voice Chats by elliebike on Thursday December 24, 2020 @03:28PM (#25531119)
> Does your chats list get filled up with these unsolicited messages from randos?

It was, then telegram desktop popped up with "it appears you are getting a lot of messages, would you like to automatically mute + archive those not in your contacts" or somesuch. Still, the archived folder is at the top

The only thing that stopped it was deleting my message from the community. Guess I won't be participating again :(

It certainly is an interesting example - I know nothing of their team, however things like this are also another reason as to why a diverse team is important!

Re:Telegram Voice Chats by phillc73 on Wednesday December 23, 2020 @02:53PM (#25521438)
In Settings / Privacy and Security / Blocked Users there's a "+ Block User" option. Clicking this brings up a list of all chats and people who have messaged your directly. Selecting a name blocks a user.

Maybe even easier is pressing and long holding the name of someone who has sent you a message. In the vertical dots menu is then an option to block the user.

I'm running v7.1.3 from F-Droid.

I do agree though that an option to block direct messages from those not in my Contacts, or at least some kind of review process to allow a specific message from someone not in Contacts, could be a nice addition.

Re:Telegram Voice Chats by elliebike on Thursday December 24, 2020 @03:31PM (#25531133)
Yup, the former works! Took me a while to find it haha.

The hold + three dots thing isn't there on iOS sadly.

Even something like Instagram's message requests would be a welcome addition!

Re:Telegram Voice Chats by BoumTAC on Wednesday December 23, 2020 @02:11PM (#25520945)
It does. If you block people sending spam, they won't be able to contact new people. They will have to wait people to contact them to engage the conversation.
Re:Telegram Voice Chats by dotancohen on Wednesday December 23, 2020 @02:49PM (#25521396)
Go to `Settings -> Privacy and Security`. For each option (calls / groups / etc) change "Everybody" to "Contacts".
Re:Telegram Voice Chats by mediaman on Wednesday December 23, 2020 @02:59PM (#25521514)
Look again: none of the available options are for restricting incoming messages to contacts (at least on iOS).
Re:Telegram Voice Chats by justapassenger on Wednesday December 23, 2020 @12:36PM (#25519959)
After you strip out corporate BS from this announcement (taking stabs at whatsapp, for selling to ads company), themselves they're going to become one more ads supported business.

Basically "Ads companies are horrible and not to be trusted. Btw, welcome to our new business model - ads"

Re:Telegram Voice Chats by forgotmypw17 on Wednesday December 23, 2020 @07:22AM (#25516808)
here is a copy for those not using tgram

--

As Telegram approaches 500 million active users, many of you are asking the question – who is going to pay to support this growth? After all, more users mean more expenses for traffic and servers. A project of our size needs at least a few hundred million dollars per year to keep going.

For most of Telegram’s history, I paid for the expenses of the company from my personal savings. However, with its current growth Telegram is on track to reach billions of users and to require appropriate funding. When a tech project reaches this scale, typically there are two options – start earning money to cover the costs, or sell the company.

Hence the question – which path will Telegram take? I’d like to make a few points to clarify our plan:

1. We are not going to sell the company like the founders of Whatsapp. The world needs Telegram to stay independent as a place where users are respected and high-quality service is ensured. Telegram must continue to serve the world as an example of a tech company that strives for perfection and integrity. And, as the sad examples of our predecessors show, that is impossible if you become part of a corporation.

2. Telegram is here to stay for a long time. We began developing our apps for our personal use over 8 years ago and have come a long way since then. In the process, Telegram changed the way people communicate in several aspects – encryption, functionality, simplicity, design, speed. This journey has just started. There’s much more we can – and will – bring to the world.

3. In order to make points 1 and 2 possible, Telegram will begin to generate revenue, starting next year. We will do it in accordance with our values and the pledges we have made over the last 7 years. Thanks to our current scale, we will be able to do it in a non-intrusive way. Most users will hardly notice any change.

4. All the features that are currently free will stay free. We will add some new features for business teams or power users. Some of these features will require more resources and will be paid for by these premium users. Regular users will be able to keep enjoying Telegram – for free, forever.

5. All parts of Telegram devoted to messaging will remain ad-free. We think that displaying ads in private 1-to-1 chats or group chats is a bad idea. Communication between people should be free of advertising of any sort.

6. In addition to its messaging component, Telegram has a social networking dimension. Our massive public one-to-many channels can have millions of subscribers each and are more like Twitter feeds. In many markets the owners of such channels display ads to earn money, sometimes using third-party ad platforms. The ads they post look like regular messages, and are often intrusive. We will fix this by introducing our own Ad Platform for public one-to-many channels – one that is user-friendly, respects privacy and allows us to cover the costs of servers and traffic.

7. If Telegram starts earning money, the community should also benefit. For example, If we monetize large public one-to-many channels via the Ad Platform, the owners of these channels will receive free traffic in proportion to their size. Or, if Telegram introduces premium stickers with additional expressive features, the artists who make stickers of this new type will also get a part of the profit. We want millions of Telegram-based creators and small businesses to thrive, enriching the experience of all our users.

This is the Telegram way.

It will allow us to keep innovating and keep growing for decades to come. We will be able to launch countless new features and welcome billions of new users. While doing that, we will remain independent and stay true to our values, redefining how a tech company should operate.

Re:Telegram Voice Chats by tenryuu on Wednesday December 23, 2020 @11:11AM (#25519058)
You can read the whole thing without an account, it is a public channel and the entire message is displayed on the t.me link. It's a bit jarring on a desktop browser because it looks like the post is cut off, but it's just a really really weird overflow with scrolling
Re:Telegram Voice Chats by forgotmypw17 on Wednesday December 23, 2020 @02:52PM (#25521435)
When I reached the page, I only saw a ,,view in telegram,, button.
Re:Telegram Voice Chats by ruined on Wednesday December 23, 2020 @04:35PM (#25522503)
it loads the page content with js for some reason
Re:Telegram Voice Chats by cblconfederate on Wednesday December 23, 2020 @08:37AM (#25517493)
They should integrate direct payments/donations.
Re:Telegram Voice Chats by aaomidi on Wednesday December 23, 2020 @09:49AM (#25518106)
Technically already exists through payment bot api
Re:Telegram Voice Chats by hungryforcodes on Wednesday December 23, 2020 @12:29PM (#25519891)
But who knows that? It's poorly documented, obviously, as I'm a big Telegram fan, and this is the first I've heard of it.
Re:Telegram Voice Chats by ffpip on Wednesday December 23, 2020 @01:06PM (#25520266)
Telegram's documentation is fantastic. Everything is updated, and their API allows building your own app. It's that open

https://core.telegram.org/bots/payments

^ first result for telegram bot payments

Re:Telegram Voice Chats by hungryforcodes on Wednesday December 23, 2020 @07:25PM (#25523910)
Nice, I hadn't seen this before. Thanks!
Re:Telegram Voice Chats by bigdatov on Wednesday December 23, 2020 @11:57AM (#25519543)
As comment below noted they do have payments integrated which nobody uses, however, two main issues are that: from Durov's vocal libertarian leaning stems their attempt to launch TON blockchain network (that was stopped by SEC) and also a sizable userbase proportion uses it for shady stuff (e.g., lotta Russians buy drugs with Bitcoin bought via exchange bots). Had they succeeded at this it would've brought together two sides of not only drug markets but like all kinds of shit (think everything not deemed appropriate by Visa/MasterCard) on a convenient platform with plenty of features.

Sad to see those plans gone but what else there is to expect from authorities if you're about to make their jobs 10x harder.