Re:Zuckerberg claims regret on caving to White House pressur...
by drdaeman on Tuesday August 27, 2024 @03:39PM
(#41371996)
It used to have issues, they have improved since, but I don't consider Telegram to be encrypted or private (and I'm also not a crypto expert, so the details elude me anyway) so I haven't really kept track of this.
Honestly, the issue was not about their crypto at all, but about the attitude and how they reacted. It's literally as if someone says "dude, I know a thing about crypto and you might've made a mistake there" and Pavel immediately goes into offensive defense, preaching how they have the best ACM champion PhDs and shifting the burden of proof, basically a canonical Putin/Trump-style of evading an argument.
That's what makes me wary of this guy, not his product.
Re:Zuckerberg claims regret on caving to White House pressur...
by jazzyjackson on Tuesday August 27, 2024 @04:43PM
(#41372779)
Ironically, just being able to produce a valid proof is hardly proof that an implementation has those properties, it just means they put some effort into it.
Re:Zuckerberg claims regret on caving to White House pressur...
by jaykru on Tuesday August 27, 2024 @07:59PM
(#41374605)
This would be a valid point if the client source code wasn't available; you can build the app from source and sideload it onto your Android phone or verify [0] that the build available for your platform matches the code you've audited for compliance to the protocol. Granted I don't know if anyone's performed such an audit, but it's at least an option.
Re:Zuckerberg claims regret on caving to White House pressur...
by ezst on Wednesday August 28, 2024 @01:05AM
(#41376120)
The characteristics of MTProto are barely relevant when it is not used in the real world: group chats cannot be encrypted with it, 1:1 chats have caveats like terrible UX and the need for both parties to be online to initiate a session.
Telegram's crypto may be weird, as the professional cryptographers you allude to have pointed out; I don't know, not being a cryptography expert. But MTProto 2.0 has been shown to enjoy many nice security properties (including a version of forward secrecy, though one afaik not as good as that enjoyed by Signal): formal proofs available here https://github.com/miculan/telegram-mtproto2-verification/tr... and some peer reviewed papers describing the formal verification effort are linked to there as well. Considering that I think calling Telegram's crypto "a mess" is misleading.