Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Isn't Telegram the one with half-baked encryption that's not even used in group chats?


No, your statement is misleading. If you are in good faith you can have a look at their FAQ, and the blog of Pavel Durov:

* https://telegram.org/faq#q-how-secure-is-telegram

* https://telegra.ph/Why-Isnt-Telegram-End-to-End-Encrypted-by...

* https://telegra.ph/Why-you-should-stop-reading-Gizmodo-right...


Almost nobody I know uses encrypted chat in Telegram because it has such terrible UX. I don't have a single encrypted convo either because when we try, we always go back to our unencrypted one.

For a good UX impl, check out Keybase. It's encrypted chat feels just as good as Telegram's unencrypted chat.


Chief, shouldn’t we be using the Cone of Silence for this?

https://youtu.be/vsNR9FnxOdY


I didn't know what to expect, but accurate depiction.

"GPG isn't that hard! You see, you just..."


Good thing that keybase is absolutely not like that then


Yes, that's what I had said in my comment.


The FAQ item you mentioned is in direct contradiction with cybersecurity experts who have been saying for years that WhatsApp is more secure than Telegram.

This debate has taken place over and over again on HN, there's nothing new here.


Well, now about a half of decade passed since that expert opinions were raised. And no data-breaching bugs were found in Telegram, but there were plenty of them in WhatApp.

Surely, that doesn't mean that expert were wrong, but at least mentioning that in Telegram vs WhatsApp debate doesn't look like a strong point.


Its funny and sad that telegram developers at the same time dismiss their own past history of security vulnerabilities with "all programs have bugs", but then they attack an app with superior encryption protocol by complaining about those same bugs that get patched when they are found. Pathetic.

And like heinrich5991 said, there's no need for backdoor or vulnerability when the data leaks by design to the server.

And no secret chats aren't an option. E2EE needs to be cross-platform and enabled by default. Signal can do it, Wire can do it. Telegram can't, because the developers are completely incompetent.


The WhatsApp data breaches disclosed data that is available to Telegram by design, right now.


Pointing to Telegram's own claims to say that they are secure seems strange. I tried reading anyway. When it started claiming that Signal didn't allow for backups I gave up.


This is misleading propaganda that ignores proper cryptographic design. It relies strongly on whataboutism and dismisses properly designed protocols as niche without really arguing from any other viewpoint as appeal to popularity. Furthermore, Durov employs backwards logic, circular reasoning, and double standards. There's no room for good faith when Durov intentionally ignores concerns of the entire infosec community. When Bruce Schneier and Matt Green tell people to avoid your product, that's when you look in the mirror and ask "what am I doing with my life".


The encryption works as designed so Telegram and governments can see whatever they want.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: