不要相信電報!您的信息不安全!



電報已成為一種流行的消息傳遞程序,部分原因是它以「安全」,「加密」和「私有」服務為廣告自己。但是其隱私權聲明合法嗎? ?讓我們找出答案! (不是!)

網站:https://lukesmith.xyz?❓?
立即捐款:https://lukesmith.xyz/donate????

43 comments
  1. 1. Clone FOSS Telegram fork from github and build it.
    2. Use Private chats to encrypt P2P with simetric key (I think it's AES256, but don't trust me :P) exchanged with DH algorithm.
    3. Connect though an VPN/Tor to obfuscate location.

    There are more secure alternatives. Sure. But the way we use tools plays a big role in how secure they are. Default mutt+irc is less secure. Riot is less secure. Tormail from chrome/ie is less secure.

    The only secure way of communication I know for fact is RSA. And Google Quantum processor is about to change that.

    BTW nice i3 🙂

  2. Discord is pretty much unusable due to shutting down servers and accounts frequently. Haven't had this issue with Telegram. As long as it's not owned by silicon valley, you should be fine. I would prefer it to any messenger owned by Facebook.

  3. Unless your keyboard is triggered into privacy offline mode, everything you type is leaking to the AI next word suggestion, or voice type service. Regardless of how encrypted your chat message, is I never see messaging service trigger this on keyboards. Browsers do in incognito mode but for most people, your keyboard is your weakest link, especially on phones. Though to be fair, the EULA specifically stated this if people actually read it.

  4. I like how there's no bullshit intro or any "hurr durr like and subscribe" on your channel. I don't need to be told to do those things if I enjoy your content and want to see more. Subscribed. Keep up the great content!

  5. You need to understand the story behind tg, how it's programmed, hosted and funded, and how this relieves them from following subpoenas. Not having to answer to a government is the general blanket of tg security. If you're looking for straight up e2e with fresh keys, they have that too, but it's very inconvenient to have a casual chat with a friend that way which is why it's not the default chat mode. Tg is a very well-polished communication platform, but like you said, the marketing tends to favor a security/encryption aspect when it's so much more.

  6. A youtuber/ programer / privacy advocate open sourced his IM service. His name is Rob Braxman and i think his website is brax.me ….its free and encrypted, you should check it out and see what you think about it.

  7. I don't nor have i ever trusted anything to be safe / anonymous online so i don't even try. Even if something is somewhat safe right now it's just a matter of time until it's not.

  8. The secret chat is what's encrypted e2e without telegram having the ability to read the messages themselves. The only thing Telegram does is generating and sending the key to both recipients when the secret chat is initiated.

    Granted it's not open source, it's impossible to sync a secret conversation on a 2nd device, because that 2nd device doesn't have the key generated when the secret chat was opened.

    Also, Telegram doesn't have that feature for desktop/laptop, which may be why you're not familiar with it.

    All in all, it's really impossible to tell if they really do respect what they advertise for secret chats, and it's definitely not as good as using gpg, but it definitely makes me feel a bit more secure than using an app like WhatsApp

  9. The reason why the end-to-end encrypted "secret chat" is NOT the default for Telegram is, because they store your "normal" messages on their servers to sync them between your devices.
    Secret chat messages on the other hand are not stored on their servers and are only available on the devices the chat was initiated on.
    It's a pure convenience > security situation which was deliberately chosen by the devs because they wanted to cater to a bigger audience. ( https://core.telegram.org/techfaq )
    I personally think thats a fair point to make. It's better than letting normies juggle their secret keys between devices.
    All this does NOT mean, that "normal" chats are not secure. They are indeed very much the opposite. ( https://core.telegram.org/techfaq#q-how-does-server-client-encryption-work-in-mtproto )
    If you have super secret stuff to talk about or are really concerned about your privacy, use the secret chat feature. Or just dont use instant messaging at all…
    There will never be a 100% secure and safe solution to instant messaging except for hosting the servers on your own (If you have the money and know-how to run your own SECURE severs).
    But that opens up other problems like – getting people to TRUST your service – and – getting people to USE your service –
    Also: Cite your sources.

  10. It』s worth remembering that at the end of the day, if the end users device is compromised (and it is) then it doesn』t matter if it』s encrypted over the air. Your device will open the message, and that』s when it will be read by the likes of the nsa.

  11. interesting part is, that I never find any bots for the secure stuff like Signal…
    only bots are for insecure, or mildly secure stuff…only stuff like telegram, discord, matrix, IRC (tbh I''d take ssl/tls irc over telegram or such crap any day)

Comments are closed.