15 points

telegram chats are also not end to end encrypted to my knowledge, only the secret chats which have some limitations afaik. and group chats also aren’t encrypted. unless that changed recently. id even trust Whatsapp more than telegram, at least they say they’re end to end encrypted.

permalink
report
reply
12 points

I know nothing about cyber security, but it’s funny to me that depending on the time of day these comment sections either mostly criticize Telegram or mostly support it. I have no idea what to believe or whether it’s safe for me to use Telegram.

permalink
report
reply
16 points
*
Deleted by creator
permalink
report
parent
reply
6 points
*
Deleted by creator
permalink
report
parent
reply
4 points

Honestly curious, what was missing on Signal and what was complicated? I can’t even remember the sign up process and never felt I was missing out on features, at least not on features available elsewhere

permalink
report
parent
reply
1 point
*
Deleted by creator
permalink
report
parent
reply
7 points

I presume this will have zero effect, especially since it includes this huge exemption.

Those who use Telegram “part of their job duties” will not be affected by the move.

permalink
report
reply
8 points

I assume that is too cover the intelligence officers monitoring the Russian milbloggers.

permalink
report
parent
reply
8 points

SMMs for officials, volunteers and military would keep posting, right. It’s inside communications that are a concern. And as some ukrainians wrote, in some places it was an obvious rule from the very start.

permalink
report
parent
reply
-2 points

I would never risk any third party messaging service in military or critical state matters. It’s just common sense, even for a layman. Everything is compromised, Telegram is, Whatsapp is, Signal is, all of them are.

permalink
report
reply
0 points

I would never risk any third party messaging service in military or critical state matters.

Ah, so mister genius would write his own, have I heard that right? Would he use XOR twice when encrypting a message, just to be double safe?

permalink
report
parent
reply
1 point

How secure something is an spectrum. Sure self hosted matrix is a lot safer than sending your messages through meta servers for example. It’s about what is the threat levels of what one is doing. Total tinfoiling like writing your own quantum proof multi encryption ciphers and sending that over an tamper proof usb stick with self destruct mechanism by a carrier pridgeon is not necessary or practical for average people who just want privacy, but for critical government applications and especially the military it might be. That is what we are talking about here.

permalink
report
parent
reply
1 point

Sure self hosted matrix is a lot safer than sending your messages through meta servers for example.

A lot safer in which case? I can imagine a few very real ones where it’s not.

Self-hosted Signal (requires patching the client, but it’s straightforward) server I would understand.

but for critical government applications and especially the military it might be. That is what we are talking about here.

Signal devs have a few papers describing how and by what logic they are addressing these problems.

Again, self-hosting (because accounts can be blocked by Signal) their solution is a better idea.

permalink
report
parent
reply
2 points

Matrix chat is not :)

permalink
report
parent
reply
22 points

How is Signal compromised?

permalink
report
parent
reply
16 points
*

It’s not, unless they’re some sort of cryptography expert with a peer-reviewed white paper pending publication. The Signal protocol (GPLv3) is extremely robust and has almost no capacity for metadata generation, and both the app and server-side code are under the AGPLv3 (technically if they were compromised they could use different, unaudited server-side code, but refer back to “basically no metadata”). Signal has essentially no capacity to be compromised; they can’t even bait and switch users with a pre-compiled app whose source code isn’t the publicly available one and actually has a backdoor because their builds are reproducible and it would be caught immediately.

Maybe they take issue with the crypto bullshit, which is valid but doesn’t compromise messaging security. Maybe they don’t like that they took away SMS, which I completely agree with, but also actually makes it marginally more secure. Either way, I seriously doubt if they had any mathematical insight into Signal being “compromised” that they would be here hanging around on Lemmy right now.

permalink
report
parent
reply
7 points

Be that as it may, it’s still an incredibly short sighted decision to use a centralized service that is under 3rd party control for real security sensitive applications.

permalink
report
parent
reply
0 points

Do Viber next lol

permalink
report
reply
5 points

Why do people use Viber over like Signal and Threema or worst-case scenario Whatsapp?

permalink
report
parent
reply
2 points

Maybe choosing your poison? Viber belongs to the Japanese company Rakuten, so it may be more interesting geopolitically, depending on your country.

permalink
report
parent
reply
0 points

Viber is Israeli based with connection to Russian security services.

permalink
report
parent
reply
8 points

Network effects… Once community picks the app, it ain’t changing.

It pretty amazing that two years into the war this is still an issue in Ukraine especially at government/military level.

I get plebs giving fuck all due to poor understanding, the state taking this long doesn’t make sense. These issues were brought from the start of the invasion.

permalink
report
parent
reply
1 point
*
Deleted by creator
permalink
report
parent
reply

Technology

!technology@lemmy.world

Create post

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


Community stats

  • 17K

    Monthly active users

  • 12K

    Posts

  • 554K

    Comments