Hacker News Reader

People have found vulnerabilities in MTProto.

IIRC, they had even started out with basic mistakes like MAC-then-encrypt.

The first version of MTProto was found to have weaknesses.

The reason they rolled their own was because it came out before the Double-Ratchet/Axolotl protocol and OtR (which double-ratchet is essentially based on) was extremely inconvenient to use properly and had its own weaknesses.

> The reason they rolled their own was because it came out before the Double-Ratchet/Axolotl protocol and OtR (which double-ratchet is essentially based on) was extremely inconvenient to use properly and had its own weaknesses.

this actually makes a lot of sense lowkey, thanks :)

1,2) NIH syndrome 3) We don't know 4) Expropriation isn't "basically stolen", Telegram was a tiny side project at the time