News for hackers. Stuff that matters.
Re:Telegram founder Pavel Durov arrested at French airport by chucke1992 on Saturday August 24, 2024 @05:22PM (#41341624)
> I don't believe there are any western nations that want non-locally-backdoored messaging of any sort

But that's what exactly they want no? EU is literally implementing a regulation that will allow to "circumvent end-to-end encryption to address child sexual abuse material". I believe it failed to pass recently, but they will try again - and nothing stops countries to implement it independently. I think France is the one who was pushing for that in the first place.

Re:Telegram founder Pavel Durov arrested at French airport by T-A on Saturday August 24, 2024 @05:35PM (#41341746)
Re:Telegram founder Pavel Durov arrested at French airport by I_am_uncreative on Saturday August 24, 2024 @07:32PM (#41342811)
I'm not. The Swedish government is a lot like California's: it's a lot less progressive than it pretends to be.
Re:Telegram founder Pavel Durov arrested at French airport by akira2501 on Saturday August 24, 2024 @07:52PM (#41342953)
It's not progressive. It's protectionist. The people they're protecting carry a lot of guilt, and so really like the "progressive" label, it's puts a really nice spin on their particular version of graft and corruption.
Re:Telegram founder Pavel Durov arrested at French airport by ardaoweo on Sunday August 25, 2024 @01:55AM (#41344765)
Yep. If the Swedish government really cared about children, they would do something to stop the massive underage gang violence problem the country has. 12 year olds being used as hitmen for drug gangs is not normal, yet that's the reality.
Re:Telegram founder Pavel Durov arrested at French airport by okr on Sunday August 25, 2024 @03:05AM (#41345097)
gangs of 12 year old roaming the swedish streets? you sure, it's not monty python playing in your head?
Re:Telegram founder Pavel Durov arrested at French airport by zx10rse on Sunday August 25, 2024 @03:20AM (#41345175)
Ignorance is bliss. It literally takes 4 sec to perform a search and find plenty of such cases - https://www.youtube.com/watch?v=3PXZxaKMl9Y (Sky News Investigates: Sweden's deadly gang war)

"How has a peaceful European country ended up the gun murder capital of the EU?" "Things got so bad that the government called in the army to help the police. And there's a new deadly trend emerging in this battle. Gang members as young as 14 are increasingly using explosives to target rivals as they fight over drug turfs. "

Re:Telegram founder Pavel Durov arrested at French airport by jaakl on Sunday August 25, 2024 @04:33AM (#41345584)
Sweden is building now new prison for underage and lacks thousands of seats for inmates. Other countries are talking about renting their spare capacities to them.
Re:Telegram founder Pavel Durov arrested at French airport by bryanrasmussen on Sunday August 25, 2024 @04:38AM (#41345612)
https://www.macrotrends.net/global-metrics/countries/SWE/swe...

things tend to be relative, hence statistics are a thing. The gun murder capital of Europe without some hard data as to what that means sounds a bit like the radiation poisoning center of Antarctica, gang members as young as 14 can definitely be increasingly doing things if before they started increasing there were zero gang members below 14 using explosives etc.

Another problem is just taking what the police say as being "true", for example the police say there are 62000 people in Stockholm (a city of slightly over 920000) "linked" to criminal gangs - https://www.reuters.com/world/europe/sweden-has-around-62000... this article uses the word linked twice, in the title linked to criminal gangs, and later in the article "the authorities have struggled for years to contain violence linked to organised crime." I wonder if they have 62000 people who are violent in their linkage, somehow I doubt it but this seems to be the impression.

Hey, I bet there is a problem, how big of a problem, probably not as big as these news stories imply. Why not? Well because if I had a really big nasty problem I wouldn't just imply it, I would lay it out, plenty of engagement to go around, but if my engagement could benefit from exaggerating the problem then I will imply instead of stating plainly.

At any rate more than 6% of the population of Stockholm is currently not involved in a violent gang war which one might infer from the reportage.

Re:Telegram founder Pavel Durov arrested at French airport by zx10rse on Sunday August 25, 2024 @06:02AM (#41346055)
I love responses like this. Well there is only one way to find out statistically since you love statistics.

If you are not an inmate I will assume that you are a free person living in a western society. Since you are free person you a free to go and live in Stockholm, lets just say for the statistics you are going to live in a slightly not so friendly neighbourhood where the lying police said that it is an area populated with predominantly 14 years old gang members, now since police by your own words cannot be trusted we will assume that their information is not correct and the area is perfectly fine and safe.

Please run the maths and tell me with just 5% probability to get executed by a 14 years old gang member by walking down the street you live in to get to your home lets just say 100 times how likely is this event to occur? Of course the question that follow is are you going to take that chance ? I already know the answer.

Now you can choose to deny reality and look away, but the good thing about reality is, that it is just like gravity it just hits you sometimes.

I don't know if your PM have to call in the army to help with gang related crimes the situation seem pretty bad to me, again you are free to prove me wrong statistically, and take your chances.

Re:Telegram founder Pavel Durov arrested at French airport by bryanrasmussen on Sunday August 25, 2024 @08:06AM (#41346706)
>I love responses like this.

I know we're supposed to think everybody is being honest here, but I don't think you do love responses like this.

>Well there is only one way to find out statistically since you love statistics.

right, to get the rates of deaths by violence, rates of death by gang related violence, compare that to other parts of the world with gang related violence etc. etc. I mean I agree, everybody knows how to do statistics!

>Since you are free person you a free to go and live in Stockholm,

I stand corrected, not everybody knows how to do statistics.

>again you are free to prove me wrong statistically, and take your chances.

but anyway that is not how statistics works.

>Of course the question that follow is are you going to take that chance ? I already know the answer.

You know the answer as to whether I am willing to move to a part of Stockholm the police identify as high crime from "a western society" based on a hacker news argument with someone who evidently doesn't know how statistics work?

Amazing!!

>Please run the maths and tell me with just 5% probability to get executed by a 14 years old gang member by walking down the street you live in to get to your home lets just say 100 times how likely is this event to occur?

If "with just 5% probability to get executed" then the answer to "how likely is this event to occur?" is 5%. However as this is "by walking down the street you live in to get to your home lets just say 100 times" then that would mean 5 out of every 100 times somebody walks home they get executed.

Given the earlier number of people in the article linked with crime was 62000, and assuming that everybody walks home at least once per day and 5% of people walking home get executed by 14 year olds it follows that in your world 3100 people per day are getting executed by 14 year olds in Stockholm, that seems a lot. I mean in 30 days that would be more than the number of people linked with crime!

If that were true I don't think the EU would just be proposing to help inmates in their prisons but might be sending peace keeping forces in to help.

Re:Telegram founder Pavel Durov arrested at French airport by bryanrasmussen on Sunday August 25, 2024 @09:53AM (#41347326)
obviously there are a number of points where I've fudged the numbers here, as I don't care much, for example with 3100 being killed the 5% of 62000 would be decreasing as it would no longer be 62000 - but I will leave that to other people to figure out.
Re:Telegram founder Pavel Durov arrested at French airport by bryanrasmussen on Sunday August 25, 2024 @11:07AM (#41347819)
also since only 62 people were violently shot in Sweden during the year I guess that also indicates this 5% thing just doesn't add up, unless these people are getting violently exploded I guess.
Re:Telegram founder Pavel Durov arrested at French airport by underbiding on Sunday August 25, 2024 @08:35AM (#41346856)
These kind of responses (yours, zx10rse) are the absolute worst appeals to anecdote and bias I can think of. Someone actually comes along with a logical argument so you just give up and say "yeah well uhhh I'd like to see you try". Sad.
Re:Telegram founder Pavel Durov arrested at French airport by bryanrasmussen on Sunday August 25, 2024 @11:03AM (#41347793)
actually in that article from Reuters it says there were 62 deadly shootings in Sweden in the year.

Which is hilarious because it also says there are 62000 gang linked people in Stockholm.

One thing you are always told to watch out for is big round numbers in stats, because it is pretty unlikely it is just 62000 and not 62119 or something (not a big stats guy, just something I've read)

At any rate the article says 62000 linked to gangs, and 62 killings (pretty weird that). So a 0.1% violence among the linked to gangs people (if all the murders were linked to gangs), but out of the full pop of Sweden 10,490,000 this is a 0.000591% rate of murder, the U.S as a whole has 0.0075 murder rate right now.

Zoom in on parts of the U.S you get a much higher murder rate - https://usafacts.org/articles/which-cities-have-the-highest-...

like I said everything is relative, and Sweden does not have as big a problem as the reporting lets on.

Re:Telegram founder Pavel Durov arrested at French airport by codedokode on Sunday August 25, 2024 @04:57AM (#41345708)
I am curious, is the rise of violent crime somehow linked with migration from Asia and Africa or it is a completely unrelated issue and most of the criminals come from families who have lived in Sweden for many generations?
Re:Telegram founder Pavel Durov arrested at French airport by johnyzee on Sunday August 25, 2024 @09:20AM (#41347101)
It's largely second generation immigrants (yes, mostly from Africa and the Middle East, since that's where most immigration - in the shape of refugees - comes from).

And take it from someone who actually lives in the area (as opposed to HN speculators): YES it has gotten significantly worse over the last five years (having already been bad for decades), and YES 14 year old hitmen with explosives and automatic weapons are now an actual thing, not just a couple of incidents.

The politics of this is so inflamed, which makes it harder to discuss, much less solve the problems. I am not against immigration per se, from any given country. But right now, it is obviously causing major problems that need to be handled with extreme prejudice.

Re:Telegram founder Pavel Durov arrested at French airport by defrost on Sunday August 25, 2024 @05:09AM (#41345764)
"Sky News Investigates" is synonomous with Murdoch Press grossly exaggerates small issues to be world threatening edge of the seat click baiting prequels to the coming apocolypse.

At least in Australia and in the UK. Maybe they're a moderate and balanced presenter of truth on the ground in Sweden.

Seems unlikely.

I'm fully aware this reads as "attacking the source" but there's no rabid attack intended here just a frank pragmatic assessment of what "Sky News Investigates" actually means.

Re:Telegram founder Pavel Durov arrested at French airport by wordofx on Sunday August 25, 2024 @03:17AM (#41345165)
Swedish media cannot report on anything negative related to migrants. If a migrant commits a crime they say “someone was robbed here” if a Swedish person commits the same crime. It basically gives all the personal details of the person.

You speak to people in Sweden and they tell you about the crime and rapes happening.

Re:Telegram founder Pavel Durov arrested at French airport by okr on Sunday August 25, 2024 @03:51AM (#41345336)
Since ppl exaggerate individual cases to a generic form, i remain sceptical about "gang of 12 year old". not to say, it doesnt exists. everything is hyperbole on the internet.
Re:Telegram founder Pavel Durov arrested at French airport by tovazm on Sunday August 25, 2024 @04:38AM (#41345605)
It’s quite common for migrant families to takes a few years off their kids age when they arrive, so they’ll adapt more easily, learnt the language and whatnot.
Re:Telegram founder Pavel Durov arrested at French airport by okr on Sunday August 25, 2024 @05:36AM (#41345919)
This makes sense to me, to change the birthdate, to get additional support. A lot of young people looking a tad older. But when crimes are reported, where do officials get the birthdates from? Or do they reporting most likelies?
Re:Telegram founder Pavel Durov arrested at French airport by boxed on Sunday August 25, 2024 @04:47AM (#41345649)
I've lived in Sweden all my life. This is 100% real. These gangs have guns, knives, sometimes even hand grenades.
Re:Telegram founder Pavel Durov arrested at French airport by estomagordo on Sunday August 25, 2024 @04:24AM (#41345544)
This is of course a blatant lie. Anyone familiar with Sweden (or rational thought) will know this. But underlying for our international friends.

It's a bizarre lie, not the least because it so obviously does not hold up to even the most basic scrutiny.

Re:Telegram founder Pavel Durov arrested at French airport by boxed on Sunday August 25, 2024 @04:52AM (#41345678)
The state has stopped all statistics collection on ethnicity of criminals. The universities have stopped all such research, enforced by the research ethics boards.

I think that facts are facts. There are no facts that are not worth knowing. Banning collecting statistics is a sure way to make sure you are blind and ignorant and reality will smack you hard until you wake up. The young teenagers throwing bombs and executing people on the street is that reality.

Re:Telegram founder Pavel Durov arrested at French airport by carlosjobim on Sunday August 25, 2024 @04:12AM (#41345471)
Open a newspaper when you find the time. Even government aligned mainstream media is reporting on it.
Re:Telegram founder Pavel Durov arrested at French airport by wordofx on Sunday August 25, 2024 @02:50PM (#41350069)
Unsure why my comment was flagged. If you want to see how much of the newspapers are censored in Sweden you’re free to go live there for a while, and witness the crime that happens and lack of support from police or media attention when the crime is committed by anyone who isn’t white and Swedish.
Re:Telegram founder Pavel Durov arrested at French airport by estomagordo on Sunday August 25, 2024 @04:22AM (#41345532)
You talk as if this is a problem that is easily solved. Of course government wish this could he solved.

A tip is that whenever you reach a ludicrous conclusion "they do nothing to stop underage violence", it's probably your analysis that is ludicrous and not the object being analyzed.

Re:Telegram founder Pavel Durov arrested at French airport by LtWorf on Sunday August 25, 2024 @12:02PM (#41348310)
Well they will send brochures to schools now. That will fix it for sure I guess...
Re:Telegram founder Pavel Durov arrested at French airport by estomagordo on Monday August 26, 2024 @12:59AM (#41354147)
A remark as staggeringly strange as it is common.

Yes, the police and social services has compiled written information that they want to share with parents of at-risk children.

This seems a strange thing to ridicule.

Re:Telegram founder Pavel Durov arrested at French airport by LtWorf on Monday August 26, 2024 @02:00AM (#41354423)
We'll see next year how this strategy failed I guess.
Re:Telegram founder Pavel Durov arrested at French airport by LtWorf on Tuesday August 27, 2024 @03:41PM (#41372024)
Ah I heard today in the (swedish) news that they were advising parents to check which apps the kids are using.

The main issue being "an encrypted messenger". So whatsapp=gang… unclear if telegram is ok since it's normally not e2ee.

I am skeptical this will achieve anything useful.

Re:Telegram founder Pavel Durov arrested at French airport by a1o on Saturday August 24, 2024 @06:42PM (#41342386)
Re:Telegram founder Pavel Durov arrested at French airport by walterbell on Saturday August 24, 2024 @10:30PM (#41343845)
Durov 2024 interview, https://www.happyscribe.com/public/the-tucker-carlson-podcas... [text] & https://tuckercarlson.com/the-tucker-carlson-interview-pavel... [video]

> Telegram has been used by protesters in places like Hong Kong, Belarus, Kazakhstan, even in Barcelona back in the day. It's been a tool for the opposition to a large extent. But it doesn't really matter whether it's opposition or the ruling party that is using Telegram. For us, we apply the rules equally to all sides. We don't become prejudiced in this way.

> It's not that we are rooting for the opposition or we are rooting for the ruling party. It's not that we don't care, but we think it's important to have this platform that is neutral to all voices because we believe that the competition of different ideas can result in progress and a better world for everyone.. You don't want to be geopolitically aligned. You don't want to select the winners in any of these political fights.

Re:Telegram founder Pavel Durov arrested at French airport by panarky on Saturday August 24, 2024 @11:11PM (#41344036)
Durov is full of shit.

He'd have you believe that all messages are welcome on Telegram, that no material is censored, that it's all about free expression, that they're too small to provide moderation.

But when an account is flagged for spam, Telegram rapidly responds and restricts or kills the account. So they can and do moderate content.

It's just that accounts can get flagged for CSAM hundreds of times and Telegram takes no action.

They're making a choice to provide a platform for this material. That's against the law and prison time is absolutely justified.

Re:Telegram founder Pavel Durov arrested at French airport by walterbell on Saturday August 24, 2024 @11:17PM (#41344066)
In cases where there is public evidence of illegal activity, where incidents have been reported to law enforcement, does Telegram provide LE with account information (e.g. phone number) for further investigation? Similar to Apple transparency reports? https://www.apple.com/legal/transparency/

https://restoreprivacy.com/telegram-sharing-user-data/

> the operators of the messenger app Telegram have released user data to the Federal Criminal Police Office (BKA) in several cases. According to SPIEGEL information, this was data from suspects in the areas of child abuse and terrorism. In the case of violations of other criminal offenses, it is still difficult for German investigators to obtain information from Telegram, according to security circles.

Signal and Telegram were publicly sparring in May 2024, https://threema.ch/en/blog/posts/chat-apps-government-ties-a...

> two popular chat services have accused each other of having undisclosed government ties. According to Signal president Meredith Whittaker, Telegram is not only “notoriously insecure” but also “routinely cooperates with governments behind the scenes.” Telegram founder Pavel Durov, on the other hand, claims that “the US government spent $3 million to build Signal’s encryption” and Signal’s current leaders are “activists used by the US state department for regime change abroad.”

Re:Telegram founder Pavel Durov arrested at French airport by codedokode on Sunday August 25, 2024 @04:43AM (#41345627)
> In the case of violations of other criminal offenses,

"other offences" probably means copyright issues?

Re:Telegram founder Pavel Durov arrested at French airport by bryanrasmussen on Sunday August 25, 2024 @04:43AM (#41345631)
>“notoriously insecure”

sounds logical and can probably be checked!

>"routinely cooperates with governments behind the scenes.”

sounds logical and being a big company I suppose true.

>“the US government spent $3 million to build Signal’s encryption”

sounds probable, meaning they got funding from some NSA project.

>“activists used by the US state department for regime change abroad.”

this sounds a bit crazy!

Re:Telegram founder Pavel Durov arrested at French airport by bryanrasmussen on Sunday August 25, 2024 @12:05PM (#41348348)
evidently I'm getting downvoted because people have some opinions about these statements but they're also not able to enunciate what those opinions are even though they must be at odds with my opinions. The classiest type of HN downvoter there is!
Re:Telegram founder Pavel Durov arrested at French airport by cryptonector on Sunday August 25, 2024 @01:20AM (#41344608)
> But when an account is flagged for spam, Telegram rapidly responds [...]

In my experience it's the channel's admins who respond, not Telegram's.

If that's the case then CSAM not getting actioned is probably just channel admins allowing content that they approve of.

Re:Telegram founder Pavel Durov arrested at French airport by panarky on Sunday August 25, 2024 @01:46PM (#41349432)
In my experience, CSAM accounts get flagged many times, channel owners remove the account from their channels, but the account continues to post the material elsewhere.
Re:Telegram founder Pavel Durov arrested at French airport by cryptonector on Sunday August 25, 2024 @07:01PM (#41352278)
This wouldn't surprise me in the least. My guess is that Telegram just doesn't put much effort into busting either spam or CSAM. They let channel admins do it.

I suspect that Telegram could put significantly more effort into CSAM suppression and enforcement, but I seriously doubt this is really what's up with the French arrest of Durov.

Re:Telegram founder Pavel Durov arrested at French airport by EVa5I7bHFq9mnYK on Sunday August 25, 2024 @05:49AM (#41345987)
Spam is very easily defined and identified, no need to read anything or to look at any images. If you message someone for the first time, they can click a report button and bam it's automatic weekly spam ban for you. Do it three times, forever ban.
Re:Telegram founder Pavel Durov arrested at French airport by nnurmanov on Sunday August 25, 2024 @04:21AM (#41345530)
The major state owned Kazakhstan telecom company did peering with Telegram, they say now it is 10ms is better, but the real reason might be to have means to cutoff Telegram if anything wrong happens
Re:Telegram founder Pavel Durov arrested at French airport by attendant3446 on Sunday August 25, 2024 @03:36AM (#41345257)
No wonder it's Swedish, a country with zero privacy
Re:Telegram founder Pavel Durov arrested at French airport by the_third_wave on Sunday August 25, 2024 @04:53AM (#41345683)
Ylva Johansson, a "former" Communist who joined the social democratic party when that turned out to be a more sure-fire way to gain power is decidedly not the Swedish government. It it people like her and the policies they implemented which pushed the "Sweden Democrats" (a somewhat conservative nationalist party, their program resembles they of the social democratic party in the 1950's-1960's) to become the second-biggest party in the country.
Re:Telegram founder Pavel Durov arrested at French airport by inglor_cz on Sunday August 25, 2024 @07:23AM (#41346450)
And yet the current Swedish government appointed her again to the European Commission.
Re:Telegram founder Pavel Durov arrested at French airport by nioj on Sunday August 25, 2024 @11:33PM (#41353783)
It doesn't look like she will be the Swedish government's pick: https://www.politico.eu/article/sweden-picks-next-eu-commiss...
Re:Telegram founder Pavel Durov arrested at French airport by vessenes on Saturday August 24, 2024 @06:22PM (#41342208)
I think you read my clumsy sentence backwards. They absolutely want to get in the middle of messaging, all of them. This is behind many of the calls for E2E interop as well -- all the proposals I'm aware of call for termination somewhere in the middle; you can imagine who'd like to be at that termination middle point. This is why Apple will not "move over" to RCS, ever, as a first class transport -- it's fundamentally no more secure than OTA plaintext to existing persistent threat actors.
Re:Telegram founder Pavel Durov arrested at French airport by sgc on Saturday August 24, 2024 @06:59PM (#41342525)
So just give me an apple messaging client on my non-apple devices. It is insanely, practically criminally, anti-social to lock your messaging system into your devices alone. It's like the Joker is running the business decisions over there. Who cares, let's just watch the world burn.
Re:Telegram founder Pavel Durov arrested at French airport by op00to on Saturday August 24, 2024 @07:20PM (#41342723)
Asking cause I don’t know - can you provide iOS level iMessage encryption safely on Android when you don’t control the hardware?
Re:Telegram founder Pavel Durov arrested at French airport by cherryteastain on Saturday August 24, 2024 @08:27PM (#41343176)
Safety wise, Signal (or PGP email) on GrapheneOS is probably as good as it gets since it's all audited free open source code.
Re:Telegram founder Pavel Durov arrested at French airport by throwaway48540 on Saturday August 24, 2024 @08:37PM (#41343246)
I didn't know Signal app had access to a secure enclave chip.
Re:Telegram founder Pavel Durov arrested at French airport by Brian_K_White on Sunday August 25, 2024 @01:51AM (#41344750)
That is not the definition of secure.
Re:Telegram founder Pavel Durov arrested at French airport by throwaway48540 on Sunday August 25, 2024 @04:30AM (#41345568)
It's not, but it's a feature that makes it incomparable to iMessage.
Re:Telegram founder Pavel Durov arrested at French airport by Brian_K_White on Sunday August 25, 2024 @11:43AM (#41348119)
I don't see how.
Re:Telegram founder Pavel Durov arrested at French airport by throwaway48540 on Sunday August 25, 2024 @05:26PM (#41351600)
I don't see how integration with a special separated chip designed specifically to increase cryptographic security can't make a difference.
Re:Telegram founder Pavel Durov arrested at French airport by Brian_K_White on Sunday August 25, 2024 @11:17PM (#41353708)
That just means you lack imagination. "special chip specifically designed to increase cryptographic security" means nothing and says nothing. You may as well go ahead and toss in some "military grade" in there too since it's just free words, throw in as many as you want.

It doesn't show how it actually is the only or best way to attain the goal.

And since Apple's implimentation is a black box whos internal workings are not under the users control and not auditable by anyone outside of Apple, it's automatically less secure, in the sense that you should trust it less than some other equivalent that is under the users control and publicly auditable, or just some other mechanism entirely if no other such open platform enclave implimentation exists.

Signal or anything else that doesn't use the secure enclave may indeed be, or may not be less secure than something that does use the secure enclave. The simple existence and use of the enclave does not automatically define superior or inferior security. It also possible that anything else might be less secure, but only on iPhones because or limitations Apple imposes on everything on the platform except for themselves, which I don't think should count.

It's also possible to devise a mechnaism that benefits from the enclave without needing to use the enclave directly. All software on the device can rely on trusting the OS to keep one app from reading another app, because they can trust that the OS itsef can only come from Apple and the bootloader woukld refuse to boot anything else, etc.

There are infinite ways to attain any goal. The way Apple designed their secure enclave and os platform is just one way.

Re:Telegram founder Pavel Durov arrested at French airport by throwaway48540 on Monday August 26, 2024 @04:26AM (#41355087)
Yeah but android devices don't have it at all, so Signal on Android can't use it.
Re:Telegram founder Pavel Durov arrested at French airport by Brian_K_White on Monday August 26, 2024 @02:47PM (#41360350)
So what? Android also doesn't have a tyre inflator, so apps on Android can't use it.
Re:Telegram founder Pavel Durov arrested at French airport by throwaway48540 on Monday August 26, 2024 @05:13PM (#41362252)
Indeed, and that makes Android OS incomparable to tire inflator firmware. Just like Signal is incomparable to iMessage.
Re:Telegram founder Pavel Durov arrested at French airport by Brian_K_White on Monday August 26, 2024 @07:59PM (#41363359)
Incorrect.

Orthogonal facets are orthogonal.

If we are talking about the security of a messaging system, then the only thing that matters to compare, is the security of the messaging system, not any particular implimentation detail.

All messaging systems are "comparable". If one relies on a secure enclave and one does not, it's hardly any more different than if one is painted yellow and one is painted green.

Messaging apps on phones painted blue and with tyre inflators are exactly "comparable" to ones on phones painted yellow with secure enclaves.

Re:Telegram founder Pavel Durov arrested at French airport by cherryteastain on Monday August 26, 2024 @06:43AM (#41355847)
Apple's marketing buzzword silicon did nothing to shield Apple users against highly motivated and capable adversaries [1]. When the underlying OS is compromised (and with closed source OSes there is no way to ascertain) there is nothing that will save you.

[1] https://en.m.wikipedia.org/wiki/Pegasus_(spyware)

Re:Telegram founder Pavel Durov arrested at French airport by funny_falcon on Sunday August 25, 2024 @05:15AM (#41345799)
AFAIK, Signal doesn’t provide any way to prove its application were built from non-modified audited free open source code. Indeed there are evidences it behaves “a bit” differently.

So unless you’ve built application by yourself, you have no guarantee of it’s sequrity.

Re:Telegram founder Pavel Durov arrested at French airport by t0bia_s on Sunday August 25, 2024 @04:34PM (#41351136)
Signal is centralised protocol, which is main weakness. Instead, use decentralised, federated solution like matrix.org.

PGP is impractical for regular email communication unfortunately and pointless on platform like gmail.

Re:Telegram founder Pavel Durov arrested at French airport by anticensor on Monday August 26, 2024 @12:06AM (#41353926)
Signal is thin server ephemeral, matrix is thin client strongly persistent. They have securiry tradeoffs as different as they can be.
Re:Telegram founder Pavel Durov arrested at French airport by lmm on Saturday August 24, 2024 @08:38PM (#41343258)
In principle you can do the same thing of having keys in a secure enclave that can only be accessed if the bootloader and OS were signed with an appropriate key and not revoked. In practice there would certainly be a larger attack surface because you've now got n different hardware secure enclaves, n different bootloaders, and n different OS implementations, and a flaw in any one of them is potentially all that an attacker needs. Would you allow apple to apply a high standard and e.g. blacklist manufacturers who repeatedly had holes in their implementation? Would you trust Huawei's implementation to not have a hidden backdoor accessible only to the Chinese state and not discoverable otherwise? (Do you trust Apple's implementation to not have the same for the US/Israel?)
Re:Telegram founder Pavel Durov arrested at French airport by stavros on Saturday August 24, 2024 @09:26PM (#41343522)
When your threat model is "someone on the network intercepting messages", it doesn't matter if you control the hardware. When your threat model is "someone owns my device", it still doesn't matter if you control the hardware, because, in that scenario, Apple is the bad actor you're trying to protect against.

There's no scenario where a third party has compromised your phone without Apple's collaboration, which is the only scenario where the secure enclave would maybe protect you (and even then, the bad actor would just read your messages off the screen or memory directly).

Re:Telegram founder Pavel Durov arrested at French airport by unsupp0rted on Sunday August 25, 2024 @04:56AM (#41345703)
> It is insanely, practically criminally, anti-social to lock your messaging system into your devices alone.

Why? I'm allowed to connect two or more tin cans by a string. Why can't Apple?

If you don't have a tin can, then you can't join.

Re:Telegram founder Pavel Durov arrested at French airport by fsflover on Monday August 26, 2024 @10:57AM (#41357777)
> So just give me an apple messaging client on my non-apple devices.

Why do you need it when you have Matrix and Signal? Why do you trust a closed, non-auditable Apple software?

Re:Telegram founder Pavel Durov arrested at French airport by dijit on Saturday August 24, 2024 @05:30PM (#41341697)
A handful of EU MEPs keep pushing backdoored encryption and it keeps getting veto’d.

There are two legistive bodies in the EU, one is only allowed to propose law, the other is only allowed to vote on it.

Lots of braindead laws get put to a vote, theres no requirement that they get through.

I understand that raising the alarm is helpful, but it would be helpful if people took a second to understand how the EU works, the politicians involved and how their motions are perceived by the rest of parliament.

Re:Telegram founder Pavel Durov arrested at French airport by arlort on Saturday August 24, 2024 @05:45PM (#41341857)
3 actually, (the second body you described can be categorised as bicameral)

Which would be pedantry if it weren't that one of the two chambers is much more in line with the former

Re:Telegram founder Pavel Durov arrested at French airport by inglor_cz on Sunday August 25, 2024 @07:25AM (#41346460)
Chat Control isn't pushed by a "handful of EU MEPs", but the European Commission.

Notably, it can be agreed upon in the EC using qualified majority, unilateral veto doesn't apply.

The last time they tried (in June), the qualified majority wasn't reached, but the difference was slim.

Re:Telegram founder Pavel Durov arrested at French airport by a0123 on Saturday August 24, 2024 @06:32PM (#41342288)
To be clear, the legislation in France and in the EU that is most likely behind this arrest is that companies have to at least try to do some moderation. There is an understanding that not everything can be moderated (obviously, the entire Internet would be banned otherwise) but there has to be a genuine attempt.

Which every company does more or less. The fact that Telegram doesn't reach this extremely low, very low bar is quite something.

Re:Telegram founder Pavel Durov arrested at French airport by codedokode on Saturday August 24, 2024 @06:39PM (#41342358)
Telegram allows to report illegal posts; I suggest that France arrests those who saw the posts but didn't report them instead.
Re:Telegram founder Pavel Durov arrested at French airport by NoxiousPluK on Saturday August 24, 2024 @06:45PM (#41342416)
To be fair, anyone that has used Telegram for a while know that this is just a mock option to fool regulators. You can report all you want; zero action is taken. There are dozens of accounts that joined groups I'm in to spam CSAM. We've reported them, kicked/banned them from the group. Months later you can look them up and they're still there and still active. They even post CSAM in their public (visible for everyone on their profile) stories.
Re:Telegram founder Pavel Durov arrested at French airport by kspacewalk2 on Saturday August 24, 2024 @07:53PM (#41342958)
The amount of obviously illegal content on Telegram makes it plain that, for all intents and purposes, it is an un-moderated platform. They sporadically moderate when there's serious pressure, but for the most part do nothing.
Re:Telegram founder Pavel Durov arrested at French airport by cft on Saturday August 24, 2024 @06:51PM (#41342465)
I tried to market something very small on Telegram and was surprised how fast my account got restricted.
Re:Telegram founder Pavel Durov arrested at French airport by NoxiousPluK on Saturday August 24, 2024 @07:16PM (#41342680)
Yes they do combat spam, but barely CSAM.
Re:Telegram founder Pavel Durov arrested at French airport by 55555 on Sunday August 25, 2024 @12:49AM (#41344474)
I’ve used tg daily for 7+ years and have never seen CSAM. What kind of groups are you in? Genuine question. I assume some sort of “teen” porn groups?
Re:Telegram founder Pavel Durov arrested at French airport by NoxiousPluK on Sunday August 25, 2024 @05:30AM (#41345881)
Absolutely not. This stuff happens in a lot of technology groups, custom ROM groups, even a small (but public) board game group got overrun with it once; multiple accounts posting dozens of CSAM videos/images in a minute after joining - kept going for a few weeks.
Re:Telegram founder Pavel Durov arrested at French airport by realitychk on Sunday August 25, 2024 @08:09AM (#41346721)
Any community allowing LGBT will soon be filled with CSAM.

Do yeah that includes ROM hacking, speed running, etc.

Re:Telegram founder Pavel Durov arrested at French airport by estomagordo on Sunday August 25, 2024 @04:28AM (#41345560)
How would I even know if zero action is taken? I see shit and I report it. I don't see it again.
Re:Telegram founder Pavel Durov arrested at French airport by NoxiousPluK on Sunday August 25, 2024 @05:28AM (#41345869)
Because we saw the same accounts pop up in other groups sometimes weeks later, so we started to keep track of the usernames after banning them. If you check their profile it's easy to see that they are active months later.
Re:Telegram founder Pavel Durov arrested at French airport by estomagordo on Monday August 26, 2024 @12:57AM (#41354139)
Surely "anyone" doesn't follow up on accounts they report?
Re:Telegram founder Pavel Durov arrested at French airport by dmix on Saturday August 24, 2024 @08:20PM (#41343137)
It's so disingenuous to say it's just a small requirement. It always starts off small than grows and grows into ever widening topics and unfavourable people. We've seen that plenty of times on the internet and in history. The good intentions in the early days won't make any difference in 20yrs from now.
Re:Telegram founder Pavel Durov arrested at French airport by spwa4 on Saturday August 24, 2024 @06:39PM (#41342357)
What keeps amazing me is that this is supposed to make children's lives better, by helping social services.

Of course, such legislation only has any chance in hell of improving lives if the standard of living for children, the education, the ... IN social services is good. It is very easy to see this WILL put more children into such a situation, and that's about the only thing such legislation will definitely do. It is completely absurd to think this is going to end drugs, abuse or whatever else they're looking for.

Is that the case? Is it the case that the standard of living, education, ... in social services is good?

No. Not at all. There's constant scandals and if a child that gets into a social services institution makes it into university, just one, any given year, that's national news. Prostitution in social services is common, drugs and crime are everywhere.

It seems there is A LOT more work to be done on the other side of social services first. They seem to perform VERY badly once they actually catch someone. So why do this? Because it isn't to help children. At the very best they see this as a cheap way to look like they're improving social services.

Re:Telegram founder Pavel Durov arrested at French airport by BLKNSLVR on Saturday August 24, 2024 @07:49PM (#41342935)
They're building the penthouse suite with all the luxuries you could imagine, but the foundation is rotting away and, if anything, becoming more ignored rather than increasingly important.

It lays bare that their motivation is blanket surveillance for their own political ends and nothing to do with protecting children in the slightest.

Social Services are one of the most consistently underfunded and under-resources arms of government.

Australia has recently had to "increase the bar" at which mandatory reporting is required because the resources don't exist to even consider investigation of cases where the child's life isn't in immediate danger.

It's gross, but it seems politics around the world has found it's shared water level, and that level is happy with exploiting exploited children.

Re:Telegram founder Pavel Durov arrested at French airport by ranndino on Saturday August 24, 2024 @10:13PM (#41343759)
Telegram is not a behemoth like Facebook so doesn't have their resources to moderate everything. Even Facebook isn't particularly good at it. They mostly rely on software which often produces false positives.

This arrest is completely preposterous and is just an attempt to get Durov to play ball with France's privacy destroying authorities.

Re:Telegram founder Pavel Durov arrested at French airport by ssijak on Sunday August 25, 2024 @12:38AM (#41344428)
Not being a behemot is not an excuse if they are not moderating criminal behavior at all. I dont know if that is the case, just pointing that logic is not sound.
Re:Telegram founder Pavel Durov arrested at French airport by toofy on Sunday August 25, 2024 @04:53AM (#41345680)
lately when i see arguments like yours one thing keeps popping into my head. i’m not sure how i feel about the following yet but it’s been on my mind a bit for the past couple of years:

if someone is incapable of making good faith genuine attempts to mitigate against atrocious things happening openly in the property they control, then isn’t this fairly solid evidence they’re just not capable of owning that property? if they make such an excuse, it would seem to me they’re either too irresponsible or just plain incompetent.

again, i’m not sure how i feel about the implications of this, but the whole “we just don’t have the resources” feels like a cowards excuse rather than reality—particularly as someone already pointed out, they seem to gather their wits to make a sizable dent when it’s spam.

Re:Telegram founder Pavel Durov arrested at French airport by Ray20 on Sunday August 25, 2024 @05:57AM (#41346028)
According to this rule, approximately 100% of officials must be thrown out of their jobs right this second. I think you are mostly correct about irresponsibility, incompetence, and excuses, but I don't see why there should be legal consequences for people who did not take on any obligations. Especially in the situation, when people who take on, like all officials, have no responsibility
Re:Telegram founder Pavel Durov arrested at French airport by toofy on Sunday August 25, 2024 @06:26AM (#41346182)
it’s still a bit muddy why he was arrested, but it seems like it’s due to his constant dismissal of any responsibility.

i’m not sure of the specifics of what you mean by 100% of officials must be thrown out” but if im understanding what you’re implying, i disagree, most land owners, elected officials, capable owners of organizations take meaningful or genuine good faith efforts to address open corruption in their spaces . and if they don’t, then yes, why wouldn’t we hold them responsible?

it seems like you’re indicating there should be no consequences for people who don’t take on obligations…

> i don’t see why there should be legal consequences for people who did not take on any obligations.

of course they take on obligations, it’s partially why we pay executives so much because they’re taking on obligations. this isn’t some pauper struggling to pay rent on his studio apartment—he was arrested after traveling from one country to another in his private jet.

again, i haven’t spent much energy on the implications from effect iteration of this but we have pretty solid evidence of what happens when we allow these wannabe kings to claim they should have nothing but positive personal benefits while externalizing any negatives onto the rest of us.

“you should pay me obscene amounts and treat me like a king while i take no responsibility whatsoever” is absurd. and we’re seeing the cascading effects of this absurdity in real time.

Re:Telegram founder Pavel Durov arrested at French airport by Ray20 on Sunday August 25, 2024 @07:00AM (#41346349)
>most land owners, elected officials, capable owners of organizations take meaningful or genuine good faith efforts to address open corruption in their spaces

And I am saying that zero percent of them do that. And somebody saying that Durov "take meaningful or genuine good faith efforts to address open corruption in their spaces". My point is that there is no way to verify the degree of "good faith genuinity", so we cant use that parameter in aspect of legal actions.

Re:Telegram founder Pavel Durov arrested at French airport by ben_w on Sunday August 25, 2024 @08:05AM (#41346696)
> My point is that there is no way to verify the degree of "good faith genuinity", so we cant use that parameter in aspect of legal actions.

That's literally a thing that happens during trial, at least for certain crimes and legal systems.

Can't speak to this specific case because (1) IANAL, and (2) my grasp of the French language is so bad that I can't even reliably say the French for "I don't speak French".

https://www.criminal-lawyers.com.au/criminal-defences/lack-i...

Re:Telegram founder Pavel Durov arrested at French airport by toofy on Sunday August 25, 2024 @08:33AM (#41346849)
> there is no way to verify the degree of "good faith genuinity", so we cant use that parameter in aspect of legal actions.

of course there is…

one of the reasons people justifiably bring up spam in these “my free speech” cases is because it shows definitively that the “free speech absolutists” don’t actually care about free speech—if they truly believed all speech is as valuable as all other speech then spam would have the same weight of priority as non-spam speech for them, yet they have no problem silencing spam.

off the top of my head, we would consider their guard rails against spam and have they implemented those same guard rails against the things they’re being charged for? if not, then obviously they’re not making real attempts.

of course there are multiple ways to determine whether they’ve made meaningful attempts. i think this is all moot though, if my understanding is correct, he’s resisted doing anything at all which is why he’s been charged.

as i said in a different post though, it’s still muddy on the specifics, we’ll know more later—we’re just wildly guessing at this point.

Re:Telegram founder Pavel Durov arrested at French airport by parineum on Sunday August 25, 2024 @01:05PM (#41349016)
> if they truly believed all speech is as valuable as all other speech

That's a strawman. They believe all speech should be held legally equal, not that's it's value is equal.

It's that any speech has the potential to be extremely valuable to the person not responsible for regulating it.

Re:Telegram founder Pavel Durov arrested at French airport by EVa5I7bHFq9mnYK on Sunday August 25, 2024 @06:07AM (#41346086)
"The property" you mean the council housing where all the ganging, killing, raping and terror plotting occurs, right? Sure, the administration of said council should be jailed ASAP.
Re:Telegram founder Pavel Durov arrested at French airport by RandomThoughts3 on Sunday August 25, 2024 @06:18AM (#41346149)
It is indeed completely illegal to own a property where illegal activities happen, know it and do nothing about it in France. Reporting the issue to the police is an adequate step. And yes, people have been jailed for owning apartments where terror plotting happened. Thank you for this good exemple.

For the good of the discussion, I would however appreciate if you kept your baseless fantasies about council housing - which is both numerous and very safe in France, a country which tries to do something to mitigate poverty - out of it.

Re:Telegram founder Pavel Durov arrested at French airport by EVa5I7bHFq9mnYK on Sunday August 25, 2024 @06:43AM (#41346270)
District 13 excellent series of movies shows that council housing ("banlieues") is exactly where these crimes happen.
Re:Telegram founder Pavel Durov arrested at French airport by ben_w on Sunday August 25, 2024 @08:10AM (#41346728)
> Captain Damien must team up with Leito, a local insurgent from District 13, to defuse a neutron bomb that has fallen into the hands of a local drug lord, Taha, and rescue Leito's sister Lola.

This "shows" those things in much the same way that First Contact "shows" how one may convert a Titan missile into a 3-person faster-than-light spacecraft in a post-nuclear-war Bozeman, Montana.

Re:Telegram founder Pavel Durov arrested at French airport by RandomThoughts3 on Sunday August 25, 2024 @08:47AM (#41346923)
Banlieues are not “council housing”. HLM is council housing. Banlieues literally means suburbs.
Re:Telegram founder Pavel Durov arrested at French airport by EVa5I7bHFq9mnYK on Sunday August 25, 2024 @11:09AM (#41347827)
Well, suburbs where these social houses are located and where police is afraid to go, stop pretending you dont know what all this is about.
Re:Telegram founder Pavel Durov arrested at French airport by toofy on Sunday August 25, 2024 @06:36AM (#41346238)
if the administration took zero good faith demonstrable attempts to address it, then they should at least be removed from the position, yes.

if they refuse to take steps whatsoever, yes, that’s a problem. why does it feel like you both understand the problem yet are defending the problem at the same time?

Re:Telegram founder Pavel Durov arrested at French airport by salawat on Sunday August 25, 2024 @09:26AM (#41347139)
>if someone is incapable of making good faith genuine attempts to mitigate against atrocious things happening openly in the property they control, then isn’t this fairly solid evidence they’re just not capable of owning that property?

Even if true, what then? It doesn't follow said property can be ethically transferred to anyone else; otherwise you've just thrown out all semblance of property rights. You've sold off the world to the HOA's, as it were; now anyone who objects to the way you maintain your grounds has a button to push to make sure you are deprived of any grounds you keep. Be they real, or digital.

If I make a platform that shuffles bits around, and a bunch of users start using it for CP and terrorism (lets assume perfect enforcement/investigative capability up until piercing the platform, so probability 1 on the CP/terrorism front); I don't think the choice then is "lets shluff this to someone responsible to admin/make a tap". The only ethically tenable approach would be "well, no more moving bits around by anyone for anyone else anymore". And at that point we've unmade computing essentially.

No one, and I mean "Not One Single Entity, government or otherwise" can be trusted to not to abuse privileged access; and once put into the position to abuse, abstain from doing so. Abuse is probability 1. This is part of why I believe Stallman was right. The concept of the user account has been a disaster for the human species. As it is by the prescribing of unique identifiers to discern one operation on behalf of someone from another that has created a world in which we can even imagine such horrifying concepts as a small group unilaterally managing the entirety of the rest of humanity, for any purpose.

For me it is a sobering thought on the impact of automated business systems. I've practically 180'd on actual character of my own life's work. It's got me in a spot where I'm strongly considering burning my tools. Extreme? Maybe. Sometimes though, you have to accept that there are extremely unpleasant consequences out there that cannot be satisfactorally mitigated.

So I have a return question for you. Are you sure that the question you asked is the one you should be asking, or should you be asking yourself, "how many lives are acceptable casualties in order to continue operating within the bounds of my assumed ethical envelope?" Because there is a counter of people effected; you may not be able to read it or write it, but it's there.

Re:Telegram founder Pavel Durov arrested at French airport by ben_w on Sunday August 25, 2024 @07:59AM (#41346671)
As many people say when Facebook's failures came to light: a tech company cannot pass the buck by blaming their inability to perform their legal obligations on scale.

If a business can't do a thing it is required to do, their CEO's option is "close business" or "break law".

Re:Telegram founder Pavel Durov arrested at French airport by LtWorf on Sunday August 25, 2024 @12:08PM (#41348377)
They occasionally remove copyright violating files, so they do something.
Re:Telegram founder Pavel Durov arrested at French airport by loceng on Saturday August 24, 2024 @07:19PM (#41342709)
Using this as a means to manufacture consent to implement-enforce such systems, and then what regulation will be used to counter the tyrannical takeover of these systems - who may be the most vile child predators seeking control-power to be able to do what they want - to pillage, rape, and murder as they please?
Re:Telegram founder Pavel Durov arrested at French airport by timeon on Saturday August 24, 2024 @05:42PM (#41341823)
> EU is literally implementing a regulation

Does it?

Re:Telegram founder Pavel Durov arrested at French airport by exceptione on Sunday August 25, 2024 @06:26AM (#41346190)
Nope. There was a proposal pushed by corporate lobby groups that got shot down.

The EU usually takes 3 steps forward, 1 to 2 steps backwards.

Re:Telegram founder Pavel Durov arrested at French airport by namaria on Sunday August 25, 2024 @03:32AM (#41345235)
> literally implementing

> it failed to pass recently

These two sentences cannot be both true

Re:Telegram founder Pavel Durov arrested at French airport by LightBug1 on Sunday August 25, 2024 @03:33AM (#41345240)
In the UK, I have a stormtrooper standing behind me in my bedroom as I type this. He just asked me to explain the context of the message I'm writing to you now.
Re:Telegram founder Pavel Durov arrested at French airport by tome on Sunday August 25, 2024 @04:04AM (#41345416)
Perhaps you got thrown by the double negative?

> I don't believe there are any western nations that want non-locally-backdoored messaging of any sort

means

> I believe every western nation wants all messaging to be locally-backdoored

Re:Telegram founder Pavel Durov arrested at French airport by andrewshadura on Sunday August 25, 2024 @06:03AM (#41346063)
No, it doesn't?
Re:Telegram founder Pavel Durov arrested at French airport by tome on Sunday August 25, 2024 @03:29PM (#41350483)
Thanks, yes, I should have said

> I believe no western nation wants any messaging to be non-locally-backdoored

Re:Telegram founder Pavel Durov arrested at French airport by tome on Tuesday August 27, 2024 @09:41AM (#41367421)
Actually, this seems to be the clearest way of getting rid of negatives:

> I believe all western nations want all messaging to be free of remote backdoors

Re:Telegram founder Pavel Durov arrested at French airport by froggit on Thursday August 29, 2024 @05:32PM (#41395506)
> > I believe all western nations want all messaging to be free of remote backdoors

!=

>> I believe every western nation wants all messaging to be locally-backdoored

Re:Telegram founder Pavel Durov arrested at French airport by tome on Saturday August 31, 2024 @03:53PM (#41411457)
Correct. andrewshadura pointed that out above, too. The former is equivalent to the original formulation that I was trying to simplify.