News for hackers. Stuff that matters.

A comment on WhatsApp gives users an ultimatum: Share data with Facebook or stop using app. Parent comment

Re:WhatsApp gives users an ultimatum: Share data with Facebo... by utf_8x on Wednesday January 06, 2021 @05:54PM (#25663826)
IMO it works just as well and unlike Telegram it's actually credible... The telegram crypto is an absolute disaster and they have been pretty shady and defensive when asked about it in the past. Not to mention the back-end is closed-source. Also, the desktop clients still don't support encryption, many years after it's been first requested.
[ Parent | on HN ]
Re:WhatsApp gives users an ultimatum: Share data with Facebo... by j-james on Wednesday January 06, 2021 @06:16PM (#25664081)
Telegram's MTProto 2.0 encryption protocol was recently proved correct, but I haven't seen any peer review or discussion on the paper yet.

https://arxiv.org/abs/2012.03141

[ Parent | on HN ]
Re:WhatsApp gives users an ultimatum: Share data with Facebo... by domano on Wednesday January 06, 2021 @06:10PM (#25664018)
Do you have some links regarding their disastrous encryption? The security guys i know speak highly of telegram and AFAIK it has been open sourced recently, but i am open to new information.
[ Parent | on HN ]
Re:WhatsApp gives users an ultimatum: Share data with Facebo... by utf_8x on Wednesday January 06, 2021 @06:14PM (#25664053)
The Telegram backend is still closed-source as far as I know. The problem with their crypto is that nobody really knows if it's secure or not because it's closed and unverified.

Ever heard the first rule of encryption? "Never roll your own crypto". Well they broke the rule and they won't let anyone check if the crypto is secure or not.

Not to mention encryption is off by default and your plaintext messages are stored on their servers...

[ Parent | on HN ]
Re:WhatsApp gives users an ultimatum: Share data with Facebo... by blehn on Wednesday January 06, 2021 @07:38PM (#25665359)
Cite some sources. They clearly do not store your messages in plaintext on their servers

https://telegram.org/privacy#3-3-your-messages https://telegram.org/privacy#4-1-storing-data

[ Parent | on HN ]
Re:WhatsApp gives users an ultimatum: Share data with Facebo... by fsflover on Thursday January 07, 2021 @07:53AM (#25670422)
> in plaintext

They have the encryption key, so the difference is not huge.

[ Parent | on HN ]
Re:WhatsApp gives users an ultimatum: Share data with Facebo... by blehn on Thursday January 07, 2021 @12:08PM (#25673769)
Stored on different servers in different jurisdictions, right? Sure it's not ideal if you want maximum security of your data, but it _is_ a huge difference from simply storing plain text.
[ Parent | on HN ]
Re:WhatsApp gives users an ultimatum: Share data with Facebo... by domano on Thursday January 07, 2021 @10:01AM (#25671802)
I do apologize, i had Threema in my mind and mixed them up.
[ Parent | on HN ]