Hacker Newsnew | past | comments | ask | show | jobs | submit | exo762's commentslogin

> What is encrypted and how is public information. If it doesn't fit your use case don't use it. There is no "spin".

Correct way of speaking about Telegram is - nothing* is encrypted. (encrypted chats are not more than 0.5% of all chats). That would be a "no spin" take.

> one guy dared write a crypto library rather than using their own

Red herring. This library is NOT used for more than 99.95% of chats on Telegram. It is applied only to "secret chat", which is a torture device with horrible UX. I guess that horrible UX is the result of choice of using custom crypto library instead of going with something capable of working when addressee is not online.

> Another darling is Signal who refused to stop collecting phone numbers until recently even though they never needed it, does not allow open source or other clients to use their servers (and won't release the actual server code) and frankly does not work half as well as Telegram in terms of UX.

Phone numbers are still used as anti-spam measure. You are free to get a burner, register an account and throw away the SIM card.

> does not allow open source

Signal client is open source.

> frankly does not work half as well as Telegram in terms of UX.

It works well where it does matter. Vide Telegram's "secret chats".

> All of this is really confusing for me.

You are clearly misinformed. That explains the confusion.


- Messages by default are encrypted in transit. Client to server. Yes Telegram does have access to those messages. (I don't believe we had any e2e encrypted chat service before the likes of signal, matrix etc. Whatsapp added it after Telegram too if my memory is right.)

- The library IS used for all encryption including the above client to server encryption. As far as I can tell from casual use the other end does not need to be online for secret chats per se. There's a key exchange with picture verification that requires the party on the other end to accept the chat request.

- The phone bits in your and the other commenters response sound a little bit handwavy to me.

- Telegram client(s) are also open source. The comment was about the server and interoperability with other clients.

After all it doesn't seem to me that I am more misinformed than yourself.


> - Messages by default are encrypted in transit. Client to server. Yes Telegram does have access to those messages.

No connection over the internet is not transport encrypted these days, but that is not what this conversation is about. It's about whether messages are encrypted so the server cannot read them. And Telegram is commonly mistaken to have this property, including OP I was responding to.

If you go around telling people that telegram is "encrypted", please stop. You are spreading disinformation.


> Messages by default are encrypted in transit. Client to server.

By this metric Facebook and Google are encrypted, because TLS. Sorry, Telegram's messaging is an attempt to mislead users, plain and simple.

> The library IS used for all encryption.

They could chose to use TLS for for almost all chats, and instead they've "invented" MTProto. Why go with MTProto?

> As far as I can tell from casual use the other end does not need to be online per se.

You are wrong. Phone on other side has to accept "secret chat request" (no user interaction is needed). Until its accepted, initiator's app interface is blocked with a spinning circle. And to add insult to injury, one can't initiate secret chat from desktop client.

> Telegram client(s) are also open source.

Yes, it is very refreshing to be able to verify that they can read all of my messages. /s

> The comment was about the server and interoperability with other clients.

Signal leadership explicitly stated that they care about secure comms and don't care about ecosystem around the chat. You can create your own client, you can't market it as Signal because that might "endanger lives".

> - The phone bits in your and the other commenters response sound a little bit handwavy to me.

I issue you a formal apology on behalf of HN hive mind. /s

On serious note - palata's point is right, but a bit outdated. Functionality is still there, but it became opt-in. New users have phone number automatically hidden and phone number is collected only as an anti-spam feature.

I'll repeat my point again. Telegram is a honey pot of messengers and nobody should use it.


For the same reason Nixon was able to establish OSHA without a ton of pushback.


Post is lacking in technical details. What it seems to be doing echoes the way ChatGPT is integrated into iOS - your requests are anonymized so your profile can't be (easily) built.

How can I make confer.to work on my Linux machine? Modern CPU.


Are you implying that removing juries would improve alignment between general populace sense of justice and justice system outcomes? Because that would be an unfathomably bad take.


There is a plugin called Unhook. It allows to remove shorts, recommendation feed, or even set subscriptions as your default page.


You can set a password in Signal, preventing movement of your account in case of SIM hijacking. Feature is called "Registration lock".


Empire has an idiot at the helm. As a Pole, I enjoyed pax americana a lot, I regret deeply its decline, and I blame not just MAGA, but both parties. But no matter what is the reason, you guys are not worth the trust anymore. Europe is re-militarizing.


Well, they are remilitarizing by buying lockheed and raytheon products. I don't think they will ever bite the hand that arms them.


We are slow to wake up, but the hectic mood in the French arms industry is unprecedented and buying American is nowadays considered a stopgap - temporary evil.

Also, European defense firms are getting more competitive, by the simple virtue of larger orders enabling more investment.


> I think signal is already funded by USA taxpayers.

Are you speaking about Open Technology Fund? AFAIK they've contributed just 3mil, while Signal costs ~40mil a year.


I have this in my .bashrc:

  function retry {  
      until $@; do :; done  
      alert  
  }
  export -f retry
Works reasonably well for non-scripting usecases.


What long run? She is 39 in Hollywood.


I guess the $150m+ nw acts as a bit of a cushion/retirement nest egg. I mean longer run in terms of AI development - if it gets very polarised I’m not sure you want to be the poster girl


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: