News for hackers. Stuff that matters.
Re:The Arrest of Pavel Durov Is a Reminder That Telegram Is ... by diggan on Monday August 26, 2024 @04:22PM (#41361585)
How does that prove that Telegram as a whole is not secure? The only thing that would demonstrate is that your normal, not-E2E encrypted, messages aren't E2E encrypted, which yeah, of course they aren't.

I think you might confuse what the mud puddle test aims to demonstrate. It's to be able to confirm E2E encryption, which if you do that test with Telegram + Secret Chats (which is the E2E encryption feature in Telegram), you'll see you cannot recover those messages.

Re:The Arrest of Pavel Durov Is a Reminder That Telegram Is ... by fsflover on Monday August 26, 2024 @04:31PM (#41361717)
> How does that prove that Telegram as a whole is not secure?

It depends on what you mean by "as a whole". I mean that Telegram by default can read all your private chats, unless you manually enabled e2ee and suffer from related bad UX. On Linux desktop (and phones) it doesn't even allow to enable e2ee at all.

Re:The Arrest of Pavel Durov Is a Reminder That Telegram Is ... by diggan on Monday August 26, 2024 @05:38PM (#41362485)
> It depends on what you mean by "as a whole". I mean that Telegram by default can read all your private chats

Yes, this is the expectation. You use someone else's platform that doesn't have E2E, you assume they can read your messages and will help law enforcement to do the same. No surprise there.

Doesn't mean their E2E feature isn't secure, or that the platform as a whole isn't secure. Facebook surely shares their Facebook + Whatsapp data with US law enforcement, we wouldn't call Facebook/Whatsapp insecure just because of that.

Re:The Arrest of Pavel Durov Is a Reminder That Telegram Is ... by fsflover on Monday August 26, 2024 @06:12PM (#41362753)
> we wouldn't call Facebook/Whatsapp insecure just because of that.

I and many others certainly would.

Re:The Arrest of Pavel Durov Is a Reminder That Telegram Is ... by rsynnott on Tuesday August 27, 2024 @07:17AM (#41366296)
Whatsapp does, as far as anyone can tell, have e2e encryption. Now in principle it may be vulnerable to a government forcing Facebook to compromise it, but it's there.
Re:The Arrest of Pavel Durov Is a Reminder That Telegram Is ... by kgeist on Monday August 26, 2024 @04:38PM (#41361820)
>On Linux desktop (and phones) it doesn't even allow to enable e2ee at all.

There's "New secret chat" option on my Android client. Or what do you mean by "phones" here?

Re:The Arrest of Pavel Durov Is a Reminder That Telegram Is ... by fsflover on Monday August 26, 2024 @05:19PM (#41362310)
I mean on GNU/Linux desktop and GNU/Linux phones.
Re:The Arrest of Pavel Durov Is a Reminder That Telegram Is ... by rsynnott on Tuesday August 27, 2024 @07:16AM (#41366285)
> The only thing that would demonstrate is that your normal, not-E2E encrypted, messages aren't E2E encrypted, which yeah, of course they aren't.

I mean, if nothing else, that's a bad default. This makes it worse than, say, WhatsApp or the apple messaging thing, nevermind the likes of Matrix or Signal.