Email or username:

Password:

Forgot your password?
Michał "rysiek" Woźniak · 🇺🇦's posts Post Back to profile
Top-level
Michał "rysiek" Woźniak · 🇺🇦

Despite the claims that #Telegram never shares any data or metadata, there are relatively clear cases of them having shared metadata with an Indian court and German law enforcement.

There are strong indications, as reported by Wired, they might have shared message contents with the Russian government, targeting activists in Russia.

By default, Telegram chats do not use end-to-end encrypted mode aka "Secret Chats". End-to-end encryption is also completely unavailable for groups and channels.
🔗🔝

26 August at 10:49 | Open on mstdn.social
24 comments
simonboggis

@rysiek they are routinely reported as secure/encrypted when they are in the news - I saw several stories repeating this with the news of the arrest in France.

26 August at 10:58 | Open on infosec.exchange
Michał "rysiek" Woźniak · 🇺🇦

@simonboggis that's precisely why I translated my piece to English.

26 August at 11:18 | Open on mstdn.social
Kevin Karhan :verified:

@rysiek @simonboggis AFAIK #Durov got arrested because #Germany #MLAT'ed #France for #NetzDG violations and he refused to integrate #Govware #Backdoors in compliance with French Law, which is rather a case if #incompetence by #LEA|s than actual #security.

- The only "#encryption" that #Telegram has is using #HTTPS - that's it!

26 August at 17:04 | Open on infosec.space
Michał "rysiek" Woźniak · 🇺🇦

@kkarhan it's worse than HTTPS, MTProto broadcasts cleartext a device identifier.

@simonboggis

27 August at 0:42 | Open on mstdn.social
LisPi
@kkarhan @simonboggis @rysiek Mass civil disobedience really should be taking place regarding this. Especially since France *pretends* to have a Right to Silence.

Key Disclosure & Right to Silence are fundamentally incompatible.
27 August at 19:04 | Open on udongein.xyz
FediThing 🏳️‍🌈

@simonboggis @rysiek

Yeah, it is weird how articles about Telegram in mainstream press try to paint it as some kind of trusted privacy service.

Has Telegram PR department been briefing press in this way?

26 August at 11:46 | Open on social.chinwag.org
Michał "rysiek" Woźniak · 🇺🇦

@FediThing @simonboggis yes. Media is basically parroting Telegram's marketing language without giving it a second thought.

26 August at 11:47 | Open on mstdn.social
Rich Felker

@rysiek @FediThing @simonboggis Plus they have a cult of toxic fans who "correct" anyone who tries to set the record straight...

26 August at 12:13 | Open on hachyderm.io
Hobson Lane

@dalias
*State sponsored* toxic fans (assets) on both sides of the Ukraine war
@rysiek @FediThing @simonboggis

26 August at 12:18 | Open on mstdn.social
Kevin Karhan :verified:
Rich Felker

@kkarhan @rysiek @FediThing @simonboggis That hasn't been my experience. Signal users who like it also complain about the phone number thing all the time and want it fixed. Rather than lying that it has security properties it doesn't.

26 August at 17:14 | Open on hachyderm.io
Kevin Karhan :verified:

@dalias @rysiek @FediThing @simonboggis OFC, the comparison isn't fair towards @signalapp , abeit their #Shitcoin #Scam called #MobileCoin and "selected availability" of it disqualifies them too.

- It's just unnecessary #bloat and unlike #Monero it's neither available anywhere nor privacy-friendly!

26 August at 17:24 | Open on infosec.space
Yvan DS 🗺️ :ferris: :go:

@dalias @kkarhan @rysiek @FediThing @simonboggis I can conccur. I like signal but I will openly say there's improvements to be made.
And I wouldn't be surprised if something else takes it's place at some point.

I mean there's even a fork of their client called Molly that provides more features.
There's session, there's Briar, ...
But I like signal, I hope they improve. The username is a nice step in the right direction.

27 August at 5:15 | Open on hachyderm.io
João Tiago Rebelo

@rysiek and that's by design (for groups and channels). @kcarruthers

26 August at 11:13 | Open on ciberlandia.pt
FediThing 🏳️‍🌈

@rysiek

Possibly quite telling that the Russian government condemned the arrest so strongly. 🤔

26 August at 11:47 | Open on social.chinwag.org
Michał "rysiek" Woźniak · 🇺🇦

@FediThing and so immediately. Yes. I find it very interesting.

26 August at 12:01 | Open on mstdn.social
Rihards Olups

@rysiek @FediThing
...with Durov supposedly being almost on the run from russia itself.
Do the French have more on him?

26 August at 17:04 | Open on mastodon.social
Michał "rysiek" Woźniak · 🇺🇦

@richlv or maybe he is eager not to fall into Kremlin's hands. Who knows?

27 August at 0:42 | Open on mstdn.social
FediThing 🏳️‍🌈

@rysiek @richlv On Sky News UK today:

“Vladmir Putin took steps to shut down Telegram when it first appeared in Russia...”

“But in 2018 the Kremlin suddenly ended its pursuit of Telegram, where it is now one of Russia's most popular social media apps - even with the Russian military. A leading Russian pro-war blogger joked after Durov's arrest: "De-facto they detained the head of communications for the Russian Army".”

“A rival encrypted messaging app Signal, whose servers, unlike many of Telegram's are not hosted in Russia, was recently banned there.”

🤔

news.sky.com/story/pavel-durov

@rysiek @richlv On Sky News UK today:

“Vladmir Putin took steps to shut down Telegram when it first appeared in Russia...”

“But in 2018 the Kremlin suddenly ended its pursuit of Telegram, where it is now one of Russia's most popular social media apps - even with the Russian military. A leading Russian pro-war blogger joked after Durov's arrest: "De-facto they detained the head of communications for the Russian Army".”

28 August at 10:16 | Open on social.chinwag.org
Orca🌻 | 🏴🏳️‍⚧️

@rysiek@mstdn.social
I usually consider Telegram a social network (the big group and channel things) instead of "secure messenger".
Unfortunately those who use it as social network also tends to use it to chat privately, that's when things become worse ​:blobcat0_0:​

26 August at 15:47 | Open on nya.one
Go Up