News for hackers. Stuff that matters.

A comment on Facebook-owned sites were down. Parent comment

Re:Facebook-owned sites were down by aldanor on Monday October 04, 2021 @01:41PM (#28749980)
After using Telegram, WhatsApp is a complete piece of garbage, if it disappeared from the face of the earth it would be sure for the best as people would move on to alternative messengers.
[ Parent | on HN ]
Re:Facebook-owned sites were down by mixedCase on Monday October 04, 2021 @02:51PM (#28750651)
Does Telegram have E2E messages by default, and using a sensible encryption protocol? If not, I disagree.
[ Parent | on HN ]
Re:Facebook-owned sites were down by aldanor on Monday October 04, 2021 @03:16PM (#28750841)
IIRC, e2e by default for audio/video; for text chats, can be enabled by marking chat as 'secret'. Is it true E2E? Probably not (i.e. Telegram has keys that can be turned over to any government, noone argues with that)

Does WhatsApp have a true E2E either? Ask hundreds of moderators employed by Facebook who review WhatsApp messages flagged as improper and the chat history around them...

However, accepting the fact that neither of the services is truly secure, Telegram experience as a service is much better for an average user.

[ Parent | on HN ]
Re:Facebook-owned sites were down by mixedCase on Monday October 04, 2021 @03:21PM (#28750901)
> for text chats, can be enabled by marking chat as 'secret'. Is it true E2E? Probably not (i.e. Telegram has keys that can be turned over to any government, noone argues with that)

That was my problem, and your confirmation means it's still as good as nothing.

> Does WhatsApp have a true E2E either? Ask hundreds of moderators employed by Facebook who review WhatsApp messages flagged as improper and the chat history around them...

If one of the ends decides to share a message, it's still E2E. That is the big difference.

[ Parent | on HN ]
Re:Facebook-owned sites were down by aldanor on Monday October 04, 2021 @03:40PM (#28751131)
> If one of the ends decides to share a message, it's still E2E. That is the big difference.

True. But you can't prove that "one of the ends" must necessarily be a human and not the logic in the app code, or an intended backdoor? E.g., an automated logic scanning for 'malicious' messages on-device.

[ Parent | on HN ]