>- Security / Privacy (eg Telegram)
But Telegram offers just as much security and privacy as Slack.
But Telegram offers just as much security and privacy as Slack.
2. I have my own issues with Telegram (the refusal to introduce sustainable funding, pushing of crypto currencies, possibly also marketing it as more than it is) but except that there's a lot to like about it and I think it is a decent starting point if someone with strong cryptographic skills wants to start with a decent client and go ahead to provide something better (either introduce e2e-encryption or improve, document and provide some way to verify the current solution.)
Web part is simple, as there are countless ways you can get malicious code delivered from what you think is the correct, safe, web server.
Same concept applies to app store / desktop program updates, but with a slightly slower and more difficult attack prospect.
Anyways, Telegram does seem to have the best encryption of any major service, and it's what we use at my company for almost all internal communications.
"some suggest" How about you actually name some competent people who suggest this?
>Basically, if there is a third party involved in the code besides Alice and Bob, the two can never guarantee E2E encryption.
Oh, this is a downright insane, dishonest argument. Perfection is impossible, so we shouldn't even try!
>Anyways, Telegram does seem to have the best encryption of any major service, and it's what we use at my company for almost all internal communications.
Why do you think this? This is such a fundamentally ridiculous claim, I find it absolutely fascinating that someone might arrive at this conclusion.
As I don't remember the name of everybody I read about, it would take significant effort to go find the source.
It's much simpler to prove the concept logically:
Any time you're communicating on a service provided, programmed, and updated by at least one third party, it is fundamentally impossible to guarantee E2EE without being omniscient of what they're doing.
This is simply because the unen/decrypted data is in the software at some point in time, and the third party controls the software.
> Oh, this is a downright insane, dishonest argument. Perfection is impossible, so we shouldn't even try!
I did not say or imply this in any way, and no it is neither an insane nor dishonest argument, it's just a consequence of allowing a third party to control your data.
2. As have been pointed out before, while this is really bad if true, but you are pointing to something that happened extremely early in the development of Telegram and later fixed (and as I've mentioned before you keep throwing a link to an old Russian post in a forun where most people have never read a word Russian. I'll add this time that it is almost as you don't want anyone to read it.)
Yeah, exactly. That's how the official story goes. However in reality he seems to often visit the country he is supposed to be in exile from https://tjournal.ru/tech/52954-durov-back-in-ussr https://lenta.ru/news/2017/03/20/durov/
It's also very well documented that Telegram was developed in offices shared with the same startup that was supposedly stolen from him, https://theoutline.com/post/2348/what-isn-t-telegram-saying-... https://twitter.com/bershidsky/status/910169626989953024 https://twitter.com/ChristopherJM/status/910186197598838784
Unfortunately the western press doesn't really care about Telegram or the Durovs so we don't really have heaps of high quality journalism to count on.
>but you are pointing to something that happened extremely early in the development of Telegram and later fixed
I'm not convinced that this is something that can be fixed. Sure, they removed the backdoor they added but does that really fix the organization?
I think it's utterly irrelevant that this backdoor was added and removed a while ago, the Telegram team hasn't significantly changed since then.
>I've mentioned before you keep throwing a link to an old Russian post in a forun where most people have never read a word Russian
I don't read Russian either, but I have no problem reading this post with google translate (or yandex translate if you'd like) and I assume that you too have access to this amazing technology.
You guys will normally find me defending Telegram here but the more important point is that we should stick to the facts even if they go in favor of "the other side".
This isn't about Telegram advocacy, it's about how I keep reading "Signal is so good!" even though the devs have a very bad attitude to anyone asking about reproducible builds. When they are that hostile they do not earn trust, so it is mystifying to me that people seem to love them so much.