Privacy

31252 readers

659 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

Chat rooms

[Matrix/Element]Dead
Discord

much thanks to @gary_host_laptop for the logo design :)

founded 4 years ago

MODERATORS

132

Is Telegram really an encrypted messaging app? (blog.cryptographyengineering.com)

submitted 3 weeks ago by solrize@lemmy.world to c/privacy@lemmy.ml

51 comments fedilink hide all child comments

Blog post by crypto professor Matthew Green, discussing what Telegram does (I wasn't familiar with it) and criticizing its cryptography. He says Telegram by default is not end-to-end encrypted. It does have an end-to-end "secret chat" feature, but it's a nuisance to activate and only works for two-person chats (not groups) where both people are online when the chat starts.

It still isn't clear to me why Telegram's founder was arrested. Green expresses some concern over that but doesn't give any details that weren't in the headlines.

you are viewing a single comment's thread
view the rest of the comments

[–] sunzu2@thebrainbin.org 1 points 3 weeks ago (1 children)

which phone numbers communicate with other phone numbers which is precisely the metadata that Signal leaks.

Has this been confirmed? I had this theory before but got told this ain't true...

[–] yogthos@lemmy.ml 0 points 3 weeks ago (1 children)

If the metadata is being leaked then you have to assume it's being used in an adversarial way. Privacy can't be trust based. Either the protocol is secure and it guarantees that your metadata is private, or you're taking it on faith that people operating Signal servers are good actors and will never leak this data to anybody you wouldn't want them to.

Also worth noting that thanks to US laws, Signal would not even be allowed to say they're sharing data with the government even if they wanted to.

[–] sunzu2@thebrainbin.org 1 points 3 weeks ago (1 children)

I have no doubt that signal will turn over whatever they had but does they have the info about who is contacting who?

I was explained that they don't

Obvi all this shit is a trust me bro

[–] yogthos@lemmy.ml 1 points 3 weeks ago

As far as I know, nothing in the protocol prevents the server from connecting who is talking to whom. In fact, given that the phone number is how an account is identified, the server effectively has to do this in order to pass messages between people.