Conversation

Notices

1. Embed this notice
   GrapheneOS (grapheneos@grapheneos.social)'s status on Sunday, 25-Aug-2024 08:45:55 JST GrapheneOS

   Telegram has full access to all of the content of group chats and regular one-to-one chats due to lack of end-to-end encryption. Their opt-in secret chats use homegrown end-to-end encryption with weaknesses. Deleting the content from the app likely won't remove all copies of it.

   • kaia likes this.
   • Embed this notice
     No Gods , no Masters! RESIST (palin@mastodon.social)'s status on Sunday, 25-Aug-2024 13:14:32 JST No Gods , no Masters! RESIST

     in reply to

     @GrapheneOS CEO of Telegram was just arrested in France and Putin is mad because the guy may have Russian intelligence that France can now tap into.

   • Embed this notice
     GrapheneOS (grapheneos@grapheneos.social)'s status on Sunday, 25-Aug-2024 13:14:33 JST GrapheneOS

     in reply to

     Telegram is capable of handing over all messages in every group and regular one-to-one chat to authorities in France or any other country. A real private messaging app like Signal isn't capable of turning over your messages and media. Telegram/Discord aren't private platforms.

     clacke repeated this.
   • Embed this notice
     GrapheneOS (grapheneos@grapheneos.social)'s status on Sunday, 25-Aug-2024 13:14:34 JST GrapheneOS

     in reply to

     Telegram has heavily participated in misinformation campaigns targeting actual private messaging apps with always enabled, properly implemented end-to-end encryption such as Signal. Should stop getting any advice from anyone who told you to use Telegram as a private messenger.

     clacke repeated this.
   • Embed this notice
     Support GrapheneOS 667 (supportgrapheneos_667@social.tchncs.de)'s status on Sunday, 25-Aug-2024 13:14:44 JST Support GrapheneOS 667

     in reply to

     @GrapheneOS

     https://www.reuters.com/world/europe/telegram-messaging-app-ceo-pavel-durov-arrested-france-tf1-tv-says-2024-08-24/

   • Embed this notice
     Jessie (they/she) 🍓 🏳️‍⚧️ 🍉 (queermatters@mstdn.social)'s status on Friday, 30-Aug-2024 11:38:44 JST Jessie (they/she) 🍓 🏳️‍⚧️ 🍉

     in reply to

     @GrapheneOS The depressing part about this, is that I always thought that companies would want to treat "confidential" data like nuclear waste. Turns out I was really freakin wrong.

     clacke likes this.
   • Embed this notice
     GrapheneOS (grapheneos@grapheneos.social)'s status on Friday, 30-Aug-2024 11:38:46 JST GrapheneOS

     in reply to

     Companies should treat user data as toxic waste rather than as something they want to gather and hoard for business models like targeted advertising. It's not a good thing to have a bunch of sensitive data which could be obtained by adversaries or requested by a government.

   • Embed this notice
     GrapheneOS (grapheneos@grapheneos.social)'s status on Friday, 30-Aug-2024 11:38:47 JST GrapheneOS

     in reply to

     A major example of how Telegram's opt-in secret chat encryption has gone seriously wrong before: https://words.filippo.io/dispatches/telegram-ecdh/.

     The practical near term threat is for the vast majority of chats without end-to-end encryption: 100% of Telegram group chats and the regular 1-to-1 chats.

   • Embed this notice
     GrapheneOS (grapheneos@grapheneos.social)'s status on Friday, 30-Aug-2024 11:38:52 JST GrapheneOS

     in reply to

     • Doerk

     @doerk Many people do, look at the angry replies to the same thread on X including harassment directed at our team because of it which is not something we expected. Russian military and special forces uses both for operational communications including coordinating artillery strikes, etc...

     clacke likes this.
   • Embed this notice
     Doerk (doerk@nrw.social)'s status on Friday, 30-Aug-2024 11:38:54 JST Doerk

     in reply to

     @GrapheneOS Did anyone ever believe that communication over Telegram or Discord is secure???

   • Embed this notice
     Winfried Angele 🇺🇦🇪🇺 (winfried@fosstodon.org)'s status on Friday, 30-Aug-2024 17:30:40 JST Winfried Angele 🇺🇦🇪🇺

     in reply to

     • L3p0

     @GrapheneOS @L3p0 end-to-end encryption of group chats is pointless anyway if you don’t know each group member personally

   • Embed this notice
     GrapheneOS (grapheneos@grapheneos.social)'s status on Friday, 30-Aug-2024 17:30:40 JST GrapheneOS

     in reply to

     • Winfried Angele 🇺🇦🇪🇺
     • L3p0

     @winfried @L3p0 Having potentially untrustworthy people in the chat who might leak it is a much different thing from mass surveillance of all chats being trivial.

     clacke likes this.
   • Embed this notice
     Alex L 🕊 🇵🇸 (alxlg@mastodon.social)'s status on Friday, 30-Aug-2024 17:30:54 JST Alex L 🕊 🇵🇸

     in reply to

     @GrapheneOS

     Also, since you are clearly using "homegrown" as a derogatory term here, it would be fair to mention the reasons given by Telegram for this choice, even if you don't agree with them, to let people have their own opinion, since it's about politics and not a technical matter.

   • Embed this notice
     GrapheneOS (grapheneos@grapheneos.social)'s status on Friday, 30-Aug-2024 17:30:54 JST GrapheneOS

     in reply to

     • Alex L 🕊 🇵🇸

     @alxlg It's not about politics and is a technical matter. We linked to an article about the encryption being broken due to their design approach to the cryptography not following best practices. They continued not following best practices and cryptographers still have the consensus that multiple of the design choices are weaknesses which can and should have been avoided. Cryptography falls apart very easily from tiny errors. Why not read the article we linked in the 4th post?

     clacke likes this.
   • Embed this notice
     Alex L 🕊 🇵🇸 (alxlg@mastodon.social)'s status on Friday, 30-Aug-2024 17:30:55 JST Alex L 🕊 🇵🇸

     in reply to

     @GrapheneOS

     Okay, this is not new though. The news is that the owner of a messaging platform has been arrested because he didn't give to the authorities the informations about users they asked (legitimately or not).

     I'd expect a comment on that, not a criticism of the implementation of said messaging platform.