News for hackers. Stuff that matters.
Re:Telegram has launched a pretty intense campaign to malign... by mmmdaaa on Monday May 13, 2024 @07:37AM (#40342070)
This is a response to the following post from Telegram creator Durov

https://t.me/durov/274

Re:Telegram has launched a pretty intense campaign to malign... by danpalmer on Monday May 13, 2024 @08:15AM (#40342436)
- "I don't like where one of their board worked" (find someone high up in the cryptography ecosystem who hasn't been involved in this sort of thing somewhere in their career)

- "I don't like where their funding comes from" (US govt regularly funds secure software because they depend on it for their own operations, see: Tor)

- "An alarming number of people think their chats were leaked". It's easy to state things without sources. Also an alarming number of people think Facebook listens to them through their phones' mic. People are bad at opsec. Not news.

- "No reproducible builds. They closed a GitHub request from the community." Well, except Android is reproducible, and they explicitly state on that closed issue that they don't do feature requests via GitHub and asked the reporter to raise in the proper channel.

- "Telegram is the only service with reproducible builds". Telegram barely has encrypted chats, reproduce all you like, that doesn't make the chats secure. Signal has E2E encryption and verifiable builds for Android, that's a strictly better security position.

Re:Telegram has launched a pretty intense campaign to malign... by nabakin on Monday May 13, 2024 @01:43PM (#40345979)
> An alarming number of people think their chats were leaked

Easily explained by direct access to the phone or Pegasus (or Pegasus-like) spyware. Both of which Telegram is also vulnerable to.