HNHacker News
TopNewBestAskShowJobs

cop_riq90

3 karma · joined January 6, 2019

submissionscomments
cop_riq90··on Why Telegram is insecure (2015)
1. All historical messages are always downloaded when you sign in. It is possible to implement this feature without storing messages on the server, but Telegram intentionally decided to use servers. You can verify this by logging out of all your sessions and logging in again. All messages would be downloaded from the server. 2. If you ask if the actual messages on the server are in plain-text, it doesn’t matter. The keys for decryption are in memory. Which means anyone with backdoors or server access can get the messages.
cop_riq90··on Why Telegram is insecure (2015)
I think your post should highlight the main idea: Telegram stores all messages in plain-text on the server. Even whatsapp doesn’t do that.

Seems to me like the “end to end” was an afterthought. Just to claim that they can encrypt messages. While 99% of messages are stored right there, and we must trust telegram not to give that data to anyone. Why should we?

cop_riq90··on Why Telegram is insecure (2015)
This is not FUD. Telegram HAS NO ENCRYPTION. Telegram stores all messages on the server in plain-text mode. Even whatsapp doesn’t do that.

Which means we must trust Telegram developers to not sell out our data to corrupt law enforcement agencies.

The service is free. Which means they would need to get profitable. Which means they would parse the chats or are already doing it.