Did someone say “Telegram”? [Crashes into the thread like the Kool-Aid man] ...

npub14zr…kydw

2024-05-14 03:19:04

in reply to nevent1q…2ffv

Did someone say “Telegram”?
[Crashes into the thread like the Kool-Aid man]

Please do not use #Telegram Messenger for any message that you would not want to see on the side of a building. Don't take my word for it, listen to these folks.

Here's Dan Goodin (Dan Goodin (npub1z3l…qvzu)) in Ars Technica summarizing an exploit discovered by Ahmed Hassan:

"Using readily available software and a rooted Android device, he’s able to spoof the location his device reports to Telegram servers. By using just three different locations and measuring the corresponding distance reported by People Nearby, he is able to pinpoint a user’s precise location."

https://arstechnica.com/information-technology/2021/01/telegram-feature-exposes-your-precise-address-to-hackers/

Independent security researcher The Grugq (the grugq (npub18ym…460u)) on Telegram's many problems:

"In summary, Telegram is error prone, has wonky homebrew encryption, leaks voluminous metadata, steals the address book, and is now known as a terrorist hangout. I couldn’t possibly think of a worse combination for a safe messenger."

https://grugq.tumblr.com/post/133453305233/operational-telegram

Former maintainer of the Golang cryptographic libraries Filippo Valsorda (Filippo Valsorda :go: (npub1jzt…jnwm)) on a bug in Telegram's cryptographic protocol:

"To this day, itʼs the most backdoor-looking bug Iʼve ever seen."

https://buttondown.email/cryptography-dispatches/archive/cryptography-dispatches-the-most-backdoor-looking/

Prof of cryptography Matthew Green (Matthew Green (npub14ga…wcqv)) on Telegram's custom encryption:

"Like seriously. Wtf is even going on here."

https://twitter.com/matthew_d_green/status/582249709286326272

And finally, Bruce Schneier:

"Don't Use Telegram."

https://www.schneier.com/blog/archives/2016/06/comparing_messa.html

If you want to communicate confidentially, use Signal (npub1rkw…5q62)

https://theintercept.com/2016/06/22/battle-of-the-secure-messaging-apps-how-signal-beats-whatsapp/

Author Public Key

npub14zr9f0v04wlzzy2w0v5zhwfu0ser08srv3mxp5qsk2dtkfce833s2nkydw

Show more details

Published at

2024-05-14 03:19:04

Kind type

1 Short Text Note

Event JSON

{ "id": "036511e8fba17e065d5de4ce9254d0aeafac03981f32acc61b41ba5bfedd2b16", "pubkey": "a88654bd8fabbe21114e7b282bb93c7c32379e03647660d010b29abb27193c63", "created_at": 1715656744, "kind": 1, "tags": [ [ "p", "62fde58e165c695686252e25dfc14fc650e4f9769224f3a02e35615d322e3420" ], [ "t", "telegram" ], [ "proxy", "https://kolektiva.social/@Voline/112437280384669007", "web" ], [ "p", "1d9daec418418c2da07b242753f373ea8e2ebe4ce89596794ed930866196d85f" ], [ "p", "3936e8b932cf34af41ba1961acfd8d8b3ea8abe3dce02cb6dc3170af50d89662" ], [ "p", "9096f6e1a06dc4f6ed31358e994e9ab2eb46833b5f45a1805b2930412a817cc4" ], [ "e", "3cd79a0fce8ac524efc0e1251e3ca76cea1dc1786e8e94249ff9359fc305d85c", "", "reply" ], [ "p", "147ee4e6ce3be559a048d5891b414f5187ae3a6dac96b30a0dae7982fe94cf18" ], [ "p", "415e56c503afd824b1877d84febd68788b8b1f71e9671728bcb378fcd59dc952" ], [ "p", "72e8102c089fd61f8e2952fd6ab73cde4905d144e55daa1926e27879c18a174f" ], [ "e", "e72d15c645fa6d6ea85944ace7c7e5b18798a8ac908e0ba001f656bc8d0023ef", "", "root" ], [ "p", "aa3b4d495a4a96556fcce5ffa15183eb33a74102b3bd7254039c030980103598" ], [ "proxy", "https://kolektiva.social/users/Voline/statuses/112437280384669007", "activitypub" ], [ "L", "pink.momostr" ], [ "l", "pink.momostr.activitypub:https://kolektiva.social/users/Voline/statuses/112437280384669007", "pink.momostr" ] ], "content": "Did someone say “Telegram”? \n[Crashes into the thread like the Kool-Aid man]\n\nPlease do not use #Telegram Messenger for any message that you would not want to see on the side of a building. Don't take my word for it, listen to these folks.\n\nHere's Dan Goodin (nostr:npub1z3lwfekw80j4ngzg6ky3ks202xr6uwnd4jttxzsd4euc9l55euvq48qvzu) in Ars Technica summarizing an exploit discovered by Ahmed Hassan: \n\n\"Using readily available software and a rooted Android device, he’s able to spoof the location his device reports to Telegram servers. By using just three different locations and measuring the corresponding distance reported by People Nearby, he is able to pinpoint a user’s precise location.\"\n\nhttps://arstechnica.com/information-technology/2021/01/telegram-feature-exposes-your-precise-address-to-hackers/\n\nIndependent security researcher The Grugq (nostr:npub18ymw3wfjeu627sd6r9s6elvd3vl232lrmnszedkux9c275xcje3qpu460u) on Telegram's many problems:\n\n\"In summary, Telegram is error prone, has wonky homebrew encryption, leaks voluminous metadata, steals the address book, and is now known as a terrorist hangout. I couldn’t possibly think of a worse combination for a safe messenger.\"\n\nhttps://grugq.tumblr.com/post/133453305233/operational-telegram \n\nFormer maintainer of the Golang cryptographic libraries Filippo Valsorda (nostr:npub1jzt0dcdqdhz0dmf3xk8fjn56kt45dqemtaz6rqzm9ycyz25p0nzqryjnwm) on a bug in Telegram's cryptographic protocol:\n\n\"To this day, itʼs the most backdoor-looking bug Iʼve ever seen.\"\n\nhttps://buttondown.email/cryptography-dispatches/archive/cryptography-dispatches-the-most-backdoor-looking/\n\nProf of cryptography Matthew Green (nostr:npub14ga56j26f2t92m7vuhl6z5vrave6wsgzkw7hy4qrnspsnqqsxkvq0cwcqv) on Telegram's custom encryption: \n\n\"Like seriously. Wtf is even going on here.\"\n\nhttps://twitter.com/matthew_d_green/status/582249709286326272\n\nAnd finally, Bruce Schneier:\n\n\"Don't Use Telegram.\"\n\nhttps://www.schneier.com/blog/archives/2016/06/comparing_messa.html\n\nIf you want to communicate confidentially, use nostr:npub1rkw6a3qcgxxzmgrmysn48umna28za0jvaz2ev72wmycgvcvkmp0sa45q62\n\nhttps://theintercept.com/2016/06/22/battle-of-the-secure-messaging-apps-how-signal-beats-whatsapp/", "sig": "c8640edf7d1bbf3a8328a415ec9a1feabd2298e68118ba30d40b0624b0ae50a64395d3cc94aa5b216931985390f600b800b168abc8a9edd8a0be4812d99b638c" }