this post was submitted on 25 Aug 2024
183 points (98.4% liked)

Android

17567 readers
389 users here now

The new home of /r/Android on Lemmy and the Fediverse!

Android news, reviews, tips, and discussions about rooting, tutorials, and apps.

🔗Universal Link: [email protected]


💡Content Philosophy:

Content which benefits the community (news, rumours, and discussions) is generally allowed and is valued over content which benefits only the individual (technical questions, help buying/selling, rants, self-promotion, etc.) which will be removed if it's in violation of the rules.


Support, technical, or app related questions belong in: [email protected]

For fresh communities, lemmy apps, and instance updates: [email protected]

💬Matrix Chat

💬Telegram channels / chats

📰Our communities below


Rules

  1. Stay on topic: All posts should be related to the Android OS or ecosystem.

  2. No support questions, recommendation requests, rants, or bug reports: Posts must benefit the community rather than the individual. Please post to [email protected].

  3. Describe images/videos, no memes: Please include a text description when sharing images or videos. Post memes to [email protected].

  4. No self-promotion spam: Active community members can post their apps if they answer any questions in the comments. Please do not post links to your own website, YouTube, blog content, or communities.

  5. No reposts or rehosted content: Share only the original source of an article, unless it's not available in English or requires logging in (like Twitter). Avoid reposting the same topic from other sources.

  6. No editorializing titles: You can add the author or website's name if helpful, but keep article titles unchanged.

  7. No piracy or unverified APKs: Do not share links or direct people to pirated content or unverified APKs, which may contain malicious code.

  8. No unauthorized polls, bots, or giveaways: Do not create polls, use bots, or organize giveaways without first contacting mods for approval.

  9. No offensive or low-effort content: Don't post offensive or unhelpful content. Keep it civil and friendly!

  10. No affiliate links: Posting affiliate links is not allowed.

Quick Links

Our Communities

Lemmy App List

Chat and More


founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 22 points 1 month ago (2 children)

But by default the comms aren't end-to-end encrypted. Isn't desiderable that criminals use telegram rather than signal?

[–] [email protected] 21 points 1 month ago (3 children)

Not being end-to-end encrypted is meaningless to law enforcement if Telegram refuses to turn over the chat contents (which they do). Law enforcement can't just eavesdrop on the conversation without Telegram's cooperation. The chat contents are still secured by TLS from the user's device to the Telegram servers.

Smart professional criminals rarely use Telegram for this stuff anyway. There's WhatsApp and plenty of other popular platforms of end-to-end encrypted

[–] [email protected] 13 points 1 month ago (1 children)

'Smart criminals use WhatsApp' Did u forget the /s flag?

[–] [email protected] 8 points 1 month ago* (last edited 1 month ago)

It's perfect for criminal use! Unbreakable encryption between two parties! 100% safe, believe me.

IMHO not a coincidence that the app constantly prompts to save unencrypted backups to Google drive for "safety"

[–] [email protected] 12 points 1 month ago

Smart criminal use Briar or Signal, not WhatsApp, lol, which totally has a backdoor for the government.

[–] [email protected] -1 points 1 month ago (1 children)

if Telegram refuses to turn over the chat contents (which they do)

Source?

Law enforcement can't just eavesdrop on the conversation without Telegram's cooperation

Why do you think Roskomnadzor gave up their blockage plans in 2018? And then made their own official government channels? "It's technically difficult for us" has never stopped Roskomnadzor before.

[–] [email protected] 3 points 1 month ago (1 children)

The source is this article.

It's not just "technically difficult" to eavesdrop. Properly implemented, it's computationally impossible to eavesdrop on a connection secured with TLS.

[–] [email protected] 1 points 1 month ago* (last edited 1 month ago) (1 children)

The source is this article.

There's nothing in the article that says they refuse to disclose chat contents. In my own experience they often do so when receiving a proper request from governments, providing at least the last 24 hours of messages.

My comment regarding Roskomnadzor has nothing to do with encryption, but rather Telegram cooperates with them, and that's why they stopped trying to block the platform. A little bit of reading comprehension would do you wonders.

[–] [email protected] 1 points 1 month ago

I thought I was commenting on a different post. Sorry about that

[–] [email protected] -5 points 1 month ago (1 children)

Signal is looking more and more like a honeypot

[–] [email protected] 6 points 1 month ago (1 children)

Ah... And what is that accusation backed with?

[–] [email protected] 0 points 1 month ago (4 children)

The fact that Signal has not run into legal trouble when Telegram has.

Also Signal has some really shady practices, such as rejecting and killing all third party clients.

[–] [email protected] 4 points 1 month ago (2 children)

The algorithm for the end to end encryption is open source as far as I know. Should be easy for security researchers to prove that something is manipulated...

[–] [email protected] 0 points 1 month ago (1 children)

Signal had long periods of blackouts when they did not publish server side code. Calling Signal open source is really a stretch.

[–] [email protected] 3 points 1 month ago

I'm calling the E2E algirithm open source. That's the reason why WhatsApp is using it, too. As long as the message is correctly encrypted for E2E on the client side, it should not matter what the server is doing as far as I know.

[–] [email protected] -4 points 1 month ago

The algorithm for the end to end encryption is open source as far as I know. Should be easy for state actors to read through it and break it

Ftfy

[–] [email protected] 3 points 1 month ago

Signal have been blocked in several countries including Russia and Telegram has more users there and it isn't blocked.

[–] [email protected] 2 points 1 month ago

The fact that Signal has not run into legal trouble when Telegram has.

Because Signal cooperates as much as they can with law enforcement. Signal happily gives all the data they have and thankfully, for its users, the only data they have is the date/time the account was created and the date (not time) a client last pinged their servers; both in unix timestamp format, they don't even convert it to a proper date.

Additionally, Signal has no "public groups" like Telegram. Everything's private, end-to-end encrypted by default.

Also Signal has some really shady practices, such as rejecting and killing all third party clients.

Yeah, so that's outdated misinformation:

Three of these have existed for multiple years and have not been asked to stop development. The gurk-rs dev even commented (on reddit, unfortunately I can't find the source) that it reports to Signal's server as a non-official client and that if the Signal devs wanted to block it, they could easily do so.

[–] [email protected] 2 points 1 month ago* (last edited 1 month ago)

That's total BS

Also Signal is US based so it isn't under French jurisdiction