News for hackers. Stuff that matters.
Re:Arrest of Pavel Durov, Telegram CEO, charges of terrorism... by jeroenhd on Sunday August 25, 2024 @12:04PM (#41348345)
> So even Telegram employees can't decrypt the chats

I very much doubt that. If Durov wanted to, they could decrypt all of those messages.

That fancy encryption system is worthless when someone can hijack the session of any of the users in a chosen group. This is a risk in many crypto messengers, but those usually come with optional key verification whereas Telegram doesn't have that outside of encrypted one-on-one chats.

Re:Arrest of Pavel Durov, Telegram CEO, charges of terrorism... by NayamAmarshe on Sunday August 25, 2024 @12:19PM (#41348488)
Because of the nature of the encryption, it allows more convenience compared to WhatsApp and Signal. For example, on Telegram you can (and we do) have a million people in a group without exposing their phone numbers. This has proven itself to be extremely useful to protestors. Signal failed massively, you couldn't add too many people and you always had the risk of exposing the phone numbers.

Along with that, you can use Telegram on as many devices as you want. The chats instantly appear after login. WhatsApp and Signal both are lacking here.

So there are always tradeoffs when it comes to encryption and convenience.

Telegram's focus has been on the convenience side and providing assurance using a clean record of protecting user-data from governments, which is why Telegram was created in the first place.

Can the encryption be improved? Of course yes! I'd love to! but I think much of the criticism by the WhatsApp loving crowd is not only disingenuous, but also harmful.

Re:Arrest of Pavel Durov, Telegram CEO, charges of terrorism... by lukan on Sunday August 25, 2024 @01:24PM (#41349226)
"The chats instantly appear after login. "

I agree, that is very convenient. Also for the secret police officer..

I use telegram as social media, but I really would not use it to organize protest somewhere. Then the whole safety depends on whether Durov made a deal with the secret police, or them infiltrating the servers to know everything about anyone involved. What they liked at what time, what pictures they shared, etc.

Re:Arrest of Pavel Durov, Telegram CEO, charges of terrorism... by NayamAmarshe on Sunday August 25, 2024 @03:08PM (#41350252)
> them infiltrating the servers to know everything about anyone involved

That's not a possibility. Split-key encryption doesn't allow such a thing to happen.

Re:Arrest of Pavel Durov, Telegram CEO, charges of terrorism... by fsflover on Sunday August 25, 2024 @03:45PM (#41350606)
Can you be more specific how the split-key encryption would prevent the Telegram CEO from reading all chats and users' info?
Re:Arrest of Pavel Durov, Telegram CEO, charges of terrorism... by EasyMark on Sunday August 25, 2024 @05:23PM (#41351567)
That’s my concern as well, maybe none of the devs have the capability, but if -anyone- does it’s Durov, so why not just grab him under false pretenses and throw the book at him, trying to scare him into compliance with anything they want or face the rest of his life in the worse French prison they can find for him.
Re:Arrest of Pavel Durov, Telegram CEO, charges of terrorism... by lxgr on Monday August 26, 2024 @03:53PM (#41361140)
How does it allow me to access all my chats from a new device then, without providing any encryption key?
Re:Arrest of Pavel Durov, Telegram CEO, charges of terrorism... by kobalsky on Sunday August 25, 2024 @02:48PM (#41350050)
> That fancy encryption system is worthless when someone can hijack the session of any of the users in a chosen group

what do you mean? user sessions are remotely hijackeable?

Re:Arrest of Pavel Durov, Telegram CEO, charges of terrorism... by EasyMark on Sunday August 25, 2024 @05:21PM (#41351549)
This is likely why the grabbed Durov, he has the keys to the kingdom. Telegram is a remarkably small company and not a 800lb gorilla and it would be very easy for him to provide whatever they need if he folds.