News for hackers. Stuff that matters.
Re:Telegram founder Pavel Durov arrested at French airport by Glacia on Saturday August 24, 2024 @05:08PM (#41341519)
>I can easily guess that assholes in secret service would probably like very much to use that to blackmail him to add backdoors to telegram

Do you unironically believe it's not already backdoored for Russian government?

Re:Telegram founder Pavel Durov arrested at French airport by kgeist on Saturday August 24, 2024 @05:40PM (#41341809)
Durov was notorious in Russia for refusing to cooperate with FSB (successor to KGB), too. I remember when FSB asked him to give access to protester communications on VK (in 2011 during mass protests), he mockingly responded with a picture of a dog with its tongue out (showing your tongue means "I won't give it to ya" in Russian culture). That's why he left Russia, because he felt he'd get arrested soon. Quite ironic that he ended up getting arrested in the "free world", not Russia. Telegram was also banned in Russia for a few years.
Re:Telegram founder Pavel Durov arrested at French airport by codedokode on Saturday August 24, 2024 @05:49PM (#41341904)
And my intuition is that Telegram is going to become banned in Russia soon, as Youtube is being banned now and Telegram is the last popular application where you can find the content about war, protests or elections that govt doesn't like.
Re:Telegram founder Pavel Durov arrested at French airport by kgeist on Saturday August 24, 2024 @05:59PM (#41342004)
Telegram has also large Russian pro-war communities, and it's extensively used by soldiers deployed in Ukraine for communication. If pro-war channels outnumber opposition channels (and they probably do), Telegram probably won't be banned as long the government has no alternative.

The fact of Durov getting arrested could be also used for propaganda purposes (no free speech in the West).

Re:Telegram founder Pavel Durov arrested at French airport by foverzar on Saturday August 24, 2024 @07:26PM (#41342771)
> And my intuition is that Telegram is going to become banned in Russia soon

It had already happened with extreme humiliation of responsible agencies.

> as Youtube is being banned now

It's not banned, it's throttled because google kept abusing backbone networks once their CDNs had started to burn down and claiming that this is totally fine and fixable with direct BGP peerings with ISPs (yeah, right)

It works just fine on mobile internet connection where traffic shaping is an inherent feature and it only works like shit on broadband where ISPs are only capable of sending TCP RST once the queue is over the limit.

> Telegram is the last popular application where you can find the content about war, protests or elections that govt doesn't like

Clearly you are not in touch with people in Russia and have never actually seen their social media. Or just being dramatic.

Re:Telegram founder Pavel Durov arrested at French airport by codedokode on Sunday August 25, 2024 @01:24AM (#41344627)
Do you have any confirmation for what you are claiming? E.g. the claim that all ISPs simultaneously voluntarily decided to throttle Youtube to reduce foreign traffic? It seems to me that you either don't know the details or are simply trolling.

> It's not banned, it's throttled because google kept abusing backbone networks once their CDNs had started to burn down and claiming that this is totally fine and fixable with direct BGP peerings with ISPs (yeah, right)

> It works just fine on mobile internet connection where traffic shaping is an inherent feature and it only works like shit on broadband where ISPs are only capable of sending TCP RST once the queue is over the limit.

This is not true. The connections to googlevideo are throttled by government-operated DPI, not by ISPs. You can verify this by sending following request from a Russian residential or mobile IP address to a Russian hosting provider Selectel:

    curl --connect-to ::speedtest.selectel.ru https://manifest.googlevideo.com/100MB -k -o/dev/null  
The request above is not send to Youtube, it doesn't even leave Russia, but it will be throttled because curl uses "googlevideo.com" in SNI field in ClientHello TLS record. DPI detects the SNI and drops the packets. The download speed will be very low, in the range of kilobytes/sec. However, if you remove googlevideo.com domain from SNI and write

    curl https://speedtest.selectel.ru/100MB -k -o/dev/null  
Then the file will be downloaded at full speed, megabytes/sec. It is a request to the same host, to the same IP address, but it is not throttled anymore.

Also the information about mobile connection not being throttled is outdated and incorrect. Nowadays mobile connections are throttled as well.

The information that all ISPs voluntarily decided to throttle Youtube is implausible. Why would they throttle the speed to allow their competitors to lure away their clients?

Re:Telegram founder Pavel Durov arrested at French airport by foverzar on Wednesday August 28, 2024 @09:43AM (#41379438)
> E.g. the claim that all ISPs simultaneously voluntarily decided to throttle Youtube to reduce foreign traffic

> The information that all ISPs voluntarily decided to throttle Youtube is implausible

> Also the information about mobile connection not being throttled

Why are you trying to build a strawman? That's not what I said. I've said "google kept abusing backbone networks" (e.g. IEXPs), which obviously means it's a matter of the Main Radiofrequency Centre, since it involves nation-wide infrastructure - not some "ISP volunteering".

And I’ve never said that “mobile connection is not being throttled”. In fact, I am stating exactly the opposite, pointing out that traffic shaping is an inherent feature for a mobile ISP. In contrast to broadband, where no one bothered with deep traffic manipulation before, so an ad-hoc throttling solution (yes, typically simply reusing existing law enforcement integrations) works like shit.

> This is not true. The connections to googlevideo are throttled by government-operated DPI, not by ISPs. You can verify this by sending following request from a Russian residential or mobile IP address to a Russian hosting provider Selectel:

One does not need a synthetic test such as yours. One can simply try playing a video from the same browser, switching connection between broadband connected Wi-Fi and a mobile hotspot and notice that broadband doesn’t seem to be working properly, but mobile actually works, even if it’s not Full HD. How come? Does your hypothesis regarding “not by ISPs, but by government-issued DPIs” explain the variance in ISPs behavior? No, it doesn’t. Just as it doesn’t explain why “blocked” YT seems to be “blocked” completely different from your typical weed growers forum. It works differently from how you imagine it.

> Why would they throttle the speed to allow their competitors to lure away their clients?

Speaking of which, apparently some broadband ISPs are now trying to implement throttling properly to give them an edge over the competition: https://www.kommersant.ru/doc/6919868

Re:Telegram founder Pavel Durov arrested at French airport by baxtr on Saturday August 24, 2024 @05:51PM (#41341924)
So you don’t think that there a chance this could be cleverly staged?
Re:Telegram founder Pavel Durov arrested at French airport by kgeist on Saturday August 24, 2024 @06:01PM (#41342030)
Anything is possible, of course. But without evidence, it'd consider it nothing more than a conspiracy theory.
Re:Telegram founder Pavel Durov arrested at French airport by baxtr on Sunday August 25, 2024 @05:39AM (#41345934)
Is there evidence for the other theory?
Re:Telegram founder Pavel Durov arrested at French airport by llm_trw on Saturday August 24, 2024 @05:50PM (#41341908)
To slightly mis-quote the only good Soviet joke that came out after the fall of the USSR:

The Communists lied to us about Communism, unfortunately they didn't lie about the West.

Re:Telegram founder Pavel Durov arrested at French airport by cactusplant7374 on Saturday August 24, 2024 @06:00PM (#41342020)
I don’t get it.
Re:Telegram founder Pavel Durov arrested at French airport by llm_trw on Saturday August 24, 2024 @06:03PM (#41342052)
The USSR was a totalitarian hell hole which had nothing to do with what communism was supposed to be.

It was still better than what happened to the USSR between 1993 and 2000 when the West won the cold war and dictated surrender terms.

Re:Telegram founder Pavel Durov arrested at French airport by kgeist on Saturday August 24, 2024 @06:13PM (#41342140)
Nitpick: USSR was never officially a communist state, it was a "socialist" state. I remember the Soviet government had slogans like "we will build communism by 1980" etc. No one thought they already had communism. IIRC their idea was that, to build communism, you must have some kind of transitional state/ideology first. But something went wrong :)
Re:Telegram founder Pavel Durov arrested at French airport by KennyBlanken on Saturday August 24, 2024 @06:30PM (#41342268)
> Telegram was also banned in Russia for a few years.

And how exactly do you think it got unbanned?

Their "encryption" used to use an in-house algorithm (in house algorithms almost always are vastly inferior to standard ones) and even today encryption stores the keys on their servers (in Russia...) and E2EE has to be enabled per-conversation by hand.

Re:Telegram founder Pavel Durov arrested at French airport by timeon on Saturday August 24, 2024 @06:01PM (#41342024)
> Telegram was also banned in Russia for a few years.

What has changed since then?

Re:Telegram founder Pavel Durov arrested at French airport by kgeist on Saturday August 24, 2024 @06:21PM (#41342201)
IIRC the bans weren't successful because the Telegram client had a system which announced new servers/IPs via push notifications. So they easily evaded it. Plus, the agency responsible for the bans got a bad rep after accidentally banning lots of unrelated services, ruining random businesses in Russia.

Maybe they also understood that if you can't defeat them, lead them. Currently, Telegram has a lot of pro-war, pro-Kremlin channels.

Re:Telegram founder Pavel Durov arrested at French airport by codedokode on Saturday August 24, 2024 @06:07PM (#41342096)
The procedures and setup for censoring the Internet were significantly improved; no need to go to the court, no need to exchange data with ISPs, black boxes with DPI are installed at every large ISP, compared to blacklists of IP/hostname hat were sent to ISPs before.

I think this might become a future for most of the countries; China and Russia are just several years ahead.

Re:Telegram founder Pavel Durov arrested at French airport by greatgib on Saturday August 24, 2024 @05:14PM (#41341561)
Since forever I stay suspicious but so far Telegram as an impeccable track record. Never there was a single instance of case where there would be even a suspicion of proof that insider knowledge of conversations was accessed/used.

Also, it is clear that Durov is a dissident and personally experienced and run away of the dictatorial state. So I think that it is probably one of the tech personality that I trust the most in the world.

Re:Telegram founder Pavel Durov arrested at French airport by Glacia on Saturday August 24, 2024 @05:27PM (#41341668)
Obviously FSB is not going to make a press release and be like "We have the keys LOL" so there would never be definitive proof.

Fun fact: Telegram at some point was blocked in Russia for not giving FSB access to data. Later telegram was unblocked and is used extensively in Russia. It's not hard to figure out why it was unblocked.

Re:Telegram founder Pavel Durov arrested at French airport by roveo on Saturday August 24, 2024 @05:53PM (#41341946)
Telegram wasn't fully blocked in Russia even for a single day. They tried to block it and failed miserably. The team actively circumvented the blocking by deploying to new IPs faster than they were blocked, and in addition to that every IT guy in Russia had a tgproxy instance running for family and friends.

After a while they just stopped trying and decided that it's less reputational damage to just let it be.

Re:Telegram founder Pavel Durov arrested at French airport by Glacia on Saturday August 24, 2024 @06:13PM (#41342144)
>After a while they just stopped trying and decided that it's less reputational damage to just let it be.

That's not true. It's legally unblocked. the reason why it was unblocked was never published. "It was unblocked because they gave up" is just your interpretation of the events. Pretty naive one, in my opinion.

Re:Telegram founder Pavel Durov arrested at French airport by k1ndl1 on Saturday August 24, 2024 @05:50PM (#41341909)
It was unblocked because of the backlash from people, incl. Russian politicians who are heavy Telegram users. FSB has nothing to do with it.
Re:Telegram founder Pavel Durov arrested at French airport by Glacia on Saturday August 24, 2024 @05:58PM (#41341997)
>It was unblocked because of the backlash from people, incl. Russian politicians who are heavy Telegram users. FSB has nothing to do with it.

Saying Russian government would give a shit about people opinions, funny joke.

Re:Telegram founder Pavel Durov arrested at French airport by perchlorate on Saturday August 24, 2024 @05:53PM (#41341954)
This is pure FUD. They're still trying to block it, the latest three attempts happened this week. Two of them were done in the middle of the night as training exercise, maybe for 3-4 hours each, and the last one then happened in the middle of the day. All three broke large parts of the internet and were quickly reverted.

When something newsworthy happens in some region, all messengers get blocked in that region for days, Telegram included. They don't care about collateral damage to other websites then.

Re:Telegram founder Pavel Durov arrested at French airport by CoastalCoder on Saturday August 24, 2024 @06:03PM (#41342046)
I'm curious how the people attempting news blackouts reason about it.

I doubt they explicitly say to themselves, "Today I do evil for fun and profit.". I wonder what their rationalization is.

Re:Telegram founder Pavel Durov arrested at French airport by Glacia on Saturday August 24, 2024 @06:07PM (#41342090)
You're the one who is spreading FUD. Telegram was officially (legally) unblocked in 2020. There is 0 evidence there is an active force trying to block Telegram in Russia. Which is very busy blocking every non-russian platform btw. As you yourself pointed out, most likely the reason why TG was down is because of attempts to block other platforms.
[dead]
Re:Telegram founder Pavel Durov arrested at French airport by Glacia on Saturday August 24, 2024 @06:22PM (#41342205)
And? I use TG everyday. I know about the times when TG is down. as YOUR OWN links show, usually it's not just telegram who is down, so it's clear it's mass block.
Re:Telegram founder Pavel Durov arrested at French airport by cactusplant7374 on Saturday August 24, 2024 @06:02PM (#41342044)
What is an example of something that is newsworthy?
Re:Telegram founder Pavel Durov arrested at French airport by perchlorate on Saturday August 24, 2024 @06:14PM (#41342150)
Here is a couple of typical examples when blocking is limited to a single region:

https://storage.googleapis.com/gsc-link/cbe9d20e.html

https://t.me/agentstvonews/4973

https://t.me/meduzalive/94295

Re:Telegram founder Pavel Durov arrested at French airport by ivanmontillam on Saturday August 24, 2024 @05:49PM (#41341903)
> It's not hard to figure out why it was unblocked.

If you're implying it's backdoored, that's a wild mental gymnastics you made there.

No hate, but your comment is speculative in nature.

Re:Telegram founder Pavel Durov arrested at French airport by hamilyon2 on Saturday August 24, 2024 @05:22PM (#41341625)
The latest evidence of wide cooperation of telegram and Russian officials: https://roskomsvoboda.org/ru/post/shutdown-v-baymake/
Re:Telegram founder Pavel Durov arrested at French airport by codedokode on Saturday August 24, 2024 @05:29PM (#41341687)
The article doesn't contain the evidence though; it claims that someone changed access to private for a Telegram group that covered the protests. However, as the article says, it could be done not only by Telegram, but by one of the administrators.
Re:Telegram founder Pavel Durov arrested at French airport by Glacia on Saturday August 24, 2024 @05:38PM (#41341783)
Except there were multiple different groups that magically happen to go private at the same time.

I'm not even going to mention how many people were arrested over telegram messages in russia.

Re:Telegram founder Pavel Durov arrested at French airport by lxgr on Saturday August 24, 2024 @05:24PM (#41341649)
“Track record” is an incredibly poor indicator for the lack of a government backdoor, thinking back to Snowden, for example.
Re:Telegram founder Pavel Durov arrested at French airport by ceinewydd on Saturday August 24, 2024 @05:17PM (#41341586)
https://x.com/filosottile/status/987376021589692416?s=21

I'm not sure that counts as an impeccable track record.

Re:Telegram founder Pavel Durov arrested at French airport by codedokode on Saturday August 24, 2024 @06:03PM (#41342053)
By the way, Dropbox had a person from the govt (Condoleezza Rice) on the Board of Directors, and people still entrusted their data to it.
Re:Telegram founder Pavel Durov arrested at French airport by chucke1992 on Saturday August 24, 2024 @05:18PM (#41341592)
> Do you unironically believe it's not already backdoored for Russian government?

Yes. You should read the history of Durov and why Telegram was created in the first place.

Re:Telegram founder Pavel Durov arrested at French airport by z_open on Saturday August 24, 2024 @05:23PM (#41341631)
Why don't you post it yourself. And why should I care about what he says when telegram has some of the worst default encryption settings among commonly used messaging apps in the west?
Re:Telegram founder Pavel Durov arrested at French airport by chucke1992 on Saturday August 24, 2024 @05:31PM (#41341700)
Except Telegram is considered one of the most secured apps around. Obviously it cannot stop people from being stupid when they expose themselves.

The very reason why France is not happy is that because they cannot get access to private chats and stuff. EU was (and is) pushing for the end of E2E encryption after all (it failed this time, but they will try again).

Durov created Telegram because the russian government was trying to take over his original social network - VK (basically imagine USA gov taking over Facebook). Thus he sold his shared and left the country.

I do find it hilarious to see apologists of government over-reach like you.

Re:Telegram founder Pavel Durov arrested at French airport by z_open on Saturday August 24, 2024 @05:34PM (#41341731)
What about group chat encryption? You can not possible say telegram is more secure than signal or WhatsApp.

What did I say that made me an apologist for government overreach? I recommend users use Signal? Your accusation is unfounded when I was complaining about a lack of encryption.

Re:Telegram founder Pavel Durov arrested at French airport by chucke1992 on Saturday August 24, 2024 @05:46PM (#41341865)
With Whatsapp it is pretty obvious at this point that it is in cahoot with governments in regards of backdoors and stuff. With Signal? Who knows? Maybe too.

Governments don't go after services that they can access freely.

Re:Telegram founder Pavel Durov arrested at French airport by timeon on Saturday August 24, 2024 @05:45PM (#41341849)
> I do find it hilarious to see apologists of government over-reach like you.

Can you point to the relevant part of the comment?

Re:Telegram founder Pavel Durov arrested at French airport by StrLght on Saturday August 24, 2024 @05:54PM (#41341960)
How is this even relevant? Telegram doesn’t have E2EE enabled by default. Group chats aren’t encrypted at all.
Re:Telegram founder Pavel Durov arrested at French airport by palata on Saturday August 24, 2024 @05:33PM (#41341720)
There is no need for a backdoor since the vast majority of messages on Telegram are not end-to-end encrypted. Just read from the server!
Re:Telegram founder Pavel Durov arrested at French airport by timcobb on Saturday August 24, 2024 @06:37PM (#41342334)
Yeah why would it be backdoored by the Russian government? Because Durov is Russian?
Re:Telegram founder Pavel Durov arrested at French airport by GaggiX on Saturday August 24, 2024 @05:27PM (#41341670)
>Do you unironically believe it's not already backdoored for Russian government?

Yes as Telegram was banned in Russia for a long time (or at least they tried) before giving up.

Re:Telegram founder Pavel Durov arrested at French airport by marcinzm on Saturday August 24, 2024 @05:39PM (#41341798)
If they backdoored it between those events then it’d be logical to unban it.
Re:Telegram founder Pavel Durov arrested at French airport by GaggiX on Saturday August 24, 2024 @05:52PM (#41341932)
There was no need, Russia did try by banning a lot of IP ranges but Telegram at the end was still running.
Re:Telegram founder Pavel Durov arrested at French airport by alephnerd on Saturday August 24, 2024 @05:24PM (#41341642)
> Do you unironically believe it's not already backdoored for Russian government?

To people arguing against this, Russia's Sovereign Wealth Fund RDIF has an ownership stake in Telegram after co-raising with Abu Dhabi's Mudabala in 2021 [0]

Either way, Telegram is at the whims of MbZ, and if the UAE ever needs something from Russia, they'll use Durov and Telegram as collateral. The UAE's done the same thing with Pakistan (Musharraf, Nawaz Sharif), India (Dawood Ibrahim), Israel-Palestine (Mohammad Dahlan), Serbia (Belgrade Waterfront Project and Mohammad Dahlan), Turkiye (Mohammad Dahlan), etc.

If the Telegram founders were truly opposed to Russia, they would have immigrated to Israel, the UK, Germany, Netherlands, or the US like most business dissidents in Russia. If VK wasn't stolen by an oligarch, they would have remained in Russia to this day.

[0] - https://www.bloomberg.com/news/articles/2021-03-23/russia-mu...

Re:Telegram founder Pavel Durov arrested at French airport by tssge on Saturday August 24, 2024 @05:20PM (#41341614)
[deleted]
Re:Telegram founder Pavel Durov arrested at French airport by lxgr on Saturday August 24, 2024 @05:28PM (#41341673)
Telegram has, by design, message content accessible to whoever runs the servers. WhatsApp has gone to great lengths to not have that.

Obviously there’s client security, potential backdoors, unencrypted backups, and many other things to worry about. But I don’t see a scenario where it fares worse than Telegram, and many where it’s significantly better.

Re:Telegram founder Pavel Durov arrested at French airport by bn-l on Saturday August 24, 2024 @05:57PM (#41341985)
Whatsapp has to have some kind of escape hatch if not back door simply because of the amount of heat it doesn’t get (think of all the regimes who are ok with it).
Re:Telegram founder Pavel Durov arrested at French airport by lxgr on Saturday August 24, 2024 @06:04PM (#41342062)
I believe that escape hatch to be cloud backups, which are heavily encouraged by the UI and not end-to-end encrypted by default. iMessage has made the same compromise.

As long as enough people click that checkbox, law enforcement has access and Meta/Apple are out of the news without having lied about or hidden anything.

Re:Telegram founder Pavel Durov arrested at French airport by jimbob45 on Saturday August 24, 2024 @05:55PM (#41341969)
My understanding is that WhatsApp has never made claims comparable to Telegram or Signal.

I also can’t tell if you’re being sincere. I was under the impression that Telegram was considered significantly less secure than Signal and that the matter was mostly settled. I’ve been seeing the following talking points repeated for years now.

https://www.reddit.com/r/signal/comments/xk1jdw/comment/ipbv...

Re:Telegram founder Pavel Durov arrested at French airport by evilfred on Saturday August 24, 2024 @05:30PM (#41341699)
telegram is undoubtedly influenced by the Russian govt https://www.wired.com/story/the-kremlin-has-entered-the-chat...