Terminal stage of console

  • 1 Post
  • 22 Comments
Joined 1 year ago
cake
Cake day: June 12th, 2023

help-circle

  • Telegram’s servers are located in US, Singapore, Netherlands (and maybe some other countries) from what I’ve gathered. And all chats that are not E2EE’ed are stored there, encrypted at rest at best with keys in the same database, or somewhere else that can still be accessed in automated way. Maybe it is not even encrypted at rest.

    The point is, all those countries are either in 5 eyes or have information sharing agreements with 5 eyes countries. So as far as I’m concerned, TLAs can still have their fingers in those pies, in addition to Telegram’s overall shadiness and Russian ties. So maybe you get KGB strongman keeping a watch over your chats too.

    This is not something I’d have much confidence in to be honest.









  • Mandatory “don’t put Signal and Telegram in the same sentence” notice. Not to be a snob, but Telegram is not “secure and private”, all chats are not end-to-end encrypted by default, everything is stored on Telegram’s servers with “forever-ever” retention. The end-to-end encryption is opt in, uses a dodgy encryption algorithm and has some limitations in terms of who you can contact and from what device etc.

    Telegram is owned by Pavel Durov who also created the largest Russian social media platform VK, which later was overtaken by Russian state as a tool for crowd control and propaganda. Even if we assume that Pavel no longer has any ties with Russia and its “government”, his biography should still raise at least some questions around whether one should trust Telegram.

    And finally, Telegram seems to be going the “everything app” route lately, which makes it a one stop shop of personal communication, public channels, news, bots, stories etc. (you name it). While it is not a bad thing in objective terms, these features are not built with privacy in mind, as that would pose quite a technical challenge. This means that Telegram’s privacy and security will only be sacrificed more and more to get more of the social features out of the door.

    /rant over/










  • Tbh the idea does sound interesting, especially if there’s a way to do Shamir’s secret sharing on top of the encrypted snapshot or something. Cause I’m not too worried with exposing my stuff to the internet, as I at least partially do that for a living, but rather make sure I do not existentially send all my family’s documents in plaintext to some stranger on the internet.