Tell HN: Telegram is most likely doing client side scanning; I quit Telegram

Re:Tell HN: Telegram is most likely doing client side scanni... by quyleanh on Thursday November 07, 2024 @09:01PM (#42083385)

Talking to "unencrypted", may I ask, by default, for normal chat, all the text, image, video, sticker is uploaded to Telegram server without encryption? Or they are encrypted/hashed/salted but the decryption key is on Telegram side?

[ Parent | on HN ]

Re:Tell HN: Telegram is most likely doing client side scanni... by Tiberium on Thursday November 07, 2024 @10:11PM (#42083732)

It's the latter, there is encryption for everything but of course Telegram has the keys. But I don't think there's information if Telegram stores data encrypted or not.

[ Parent | on HN ]

Re:Tell HN: Telegram is most likely doing client side scanni... by quyleanh on Thursday November 07, 2024 @11:27PM (#42084132)

So we have to trust Telegram just like we trust Apple with iMessage right? Since Apple also has ability to extract information from iCloud backup [1].

Anyway, I don't know why HN crowds tend to aggressive with Telegram. Personally I like it and use it like a social platform.

[1] https://www.reuters.com/article/world/exclusive-apple-droppe...

[ Parent | on HN ]

Re:Tell HN: Telegram is most likely doing client side scanni... by tmottabr on Friday November 08, 2024 @07:15AM (#42086263)

no it is not..

There is E2E encryption for private ono on one conversations, but it is off by default and the option to enable it is buried behind a few screens ans several clicks..

And it is completely unavailable for group chats..

If you want more details, Matthew Green, the famous cryptographer from Johns Hopkins University have reviewed it recently

https://blog.cryptographyengineering.com/2024/08/25/telegram...

[ Parent | on HN ]

Re:Tell HN: Telegram is most likely doing client side scanni... by Tiberium on Friday November 08, 2024 @12:40PM (#42088768)

What do you mean "it's not"? We're not talking about E2E encryption specifically, just any encryption. MTProto uses encryption.

[ Parent | on HN ]

Re:Tell HN: Telegram is most likely doing client side scanni... by tmottabr on Saturday November 09, 2024 @07:09PM (#42097711)

MTProto is the protocol used for secure chats, that is the name of their E2E encryption..

If you do not enable E2E it will not use MTProto and not have E2E encryption.

And all of this is only available for private chats, none is available for groups chats..

[ Parent | on HN ]

Re:Tell HN: Telegram is most likely doing client side scanni... by Tiberium on Sunday November 10, 2024 @04:26PM (#42102722)

I'm sorry, but MTProto isn't just used for E2E chats. It's the actual main protocol that Telegram uses for everything. And yes, for non-secure chats there will be no E2E, but the question was about encryption, not end to end encryption.

[ Parent | on HN ]

Re:Tell HN: Telegram is most likely doing client side scanni... by tmottabr on Monday November 11, 2024 @02:38PM (#42109847)

communication between client and server is always encrypted and they don't even need MTProto for that, a simple TLS connection would be more then enough, and likely better. Also, that is likely true for all modern messaging apps..

The question proposed is that Telegram was monitoring private chats on the client side, but they do not need to do that unless E2E is enabled..

If you do not have E2E enabled then everything you send is in the open while in their servers..

So, if you do not have private chat enabled then Telegram does not need to make any type of client side monitoring, they can just monitor what is going trough their servers because it is all in the open..

[ Parent | on HN ]

Re:Tell HN: Telegram is most likely doing client side scanni... by Tiberium on Monday November 11, 2024 @07:32PM (#42111740)

I think at this point the post I was first replying to was lost :) I wasn't replying to the OP post, I was replying to https://news.ycombinator.com/item?id=42083385

[ Parent | on HN ]