What does /g/ think of Telegram? inb4 >/g/ >messaging

i like the design alot and nice features.
doesnt matter tho cuz i cant convince normie friends to make the switch

It's garbage, the only good thing is custom stickers but furries just make porn out of them. Its mediocre app at most

>>57410825
This. It's only useful for nerds to wank each other off over encrypted chat

File: 1478230032545.jpg (20KB, 351x406px) Image search: [Google]

20KB, 351x406px

>>57410804
>android
>closed source
>botnet

>>>/trash/

File: IMG_20161002_001725.jpg (4MB, 3120x4160px) Image search: [Google]

4MB, 3120x4160px

I only have three friends on there, one RL and two furfags. They all keep spamming me with bad dragon or meme stickers.

>>57410848
The application is open source: https://github.com/DrKLO/Telegram

Don't think their server backend is though.

As far as proprietary code goes though, I think I'd take tovarish Durov over lots of other things.

>>57410890
>tovarish Durov
He's not a tovarish anymore, the russians kicked him out after he denied the FSB phone numbers of terrorists' accounts on VK.
Now he works in Germany where he got the investment capital for Telegram, the servers are probably botnetted to hell by the german federal police knowing their track record.

>>57410804
Why not Signal?

>>57410804
I use threema and signal.

I like it but most of my friends use whatsapp anyways so I dont get to use it as much

Wired cans is my choice of freedom

>>57410804
>telegram
>not signal

Lurk moar

File: vladimir.jpg (36KB, 768x432px) Image search: [Google]

36KB, 768x432px

>>57411031
>Germany spies more than Russia
Well spoken, Comrad!

>>57411301
>spy on your own president for the NSA
>not worse than russia
kys

>>57410804
Does it support voice calls? Is there anything open source that does?

>>57411695
Tox IM

It's good, but no custom themes

>>57410804
Better than WhatsApp, at least.

>thinking you're stuck a special snowflake you need to hide from the evil gubbament
Every chat app is inferior to Facebook messenger. What's app is second. iMessage is third.

What's the best messenger app?

>>57412038
Nobody here will admit it but iMessage.

Its not secure at all, proven to be shit for months now.

Who was it, WhatsApp that introduced (or at least spread) the cancer of rendering your messages inside speech balloons? It takes stupid amounts of space for a risible readability improvement you'd get anyways if you just alternated background colours when different users post. It really makes me nervous.

>>57412099
Because if you want to sell your shit to the masses, aesthetics come before practicality.

That's literally GUI-designing 101. Make it look pretty first, make it practical later.

>>57412099
The old way looks like hot garbage.

>>57412038
Email with 4096-bit encryption.

>>57410804
Telegram failed my review, but Pavel Durov refused to fix it.

Don't use it.

>>57410804
its my main messaging app and it is excellent, takes a shit on all other messengers

File: abouttelegram.png (22KB, 390x295px) Image search: [Google]

22KB, 390x295px

>>57410848
Telegram is free software under GPL3

>>57411163
Enjoy that hard dependency on Google Botnet Services

>having friends

I use it to transfer unimportant files, notes or links between my devices

They rolled their own encryption and it has not been audited, nor is it open source. So don't trust it

I like it, though I literally only have 3 contacts as it was supposedly used by terrorists who did the Paris/Brussels attacks, scaring my normie friends away.

whats wrong with whatsapp?

i wish it had voice calling, devs have made it but dont enable it.

https://twitter.com/telegram/status/591679556140015616?lang=en&lang=en

it's a app used by furries for sharing gay animal porn. literally.

Not a fan, I've only got it because I've got a hipster friend who won't use anything else.

I use it a lot as I convinced quite a few friends to switch when Facebook bought WhatsApp. The features and some bots are useful but the security is a mess. They promised a lot and did nothing. WhatsApp have end to end encryption now, so I guess I'll gradually switch back as most friends use both anyway

Its fucking awesome if you're a homosexual animal person.

>>57410804
It's the best goddamn instant messaging app on the market right now.
>Instant messages
>File transfer
>Syncs instantly across my PC/Macbook/iPad/iPhone
>Beautiful UI
>[spoiler]Bane sticker pack[/spoiler]
It's fucking great, I'm glad it's the norm form of communication in my university.

We switched over to Telegram at work because slack tries to jew you out of money. It is alright, could use some improvements but for the most part I can't complain. The ability to search for something years/thousands of messages ago is nice.

>>57410804
What can you do with it?

Can I use it instead of facebook messenger? I've been dying to get that out of my life.

>>57415039
It's like LINE/Whatsapp, but way fucking better. It was built from the ground up to run on PC, Tablets, Android, iOS, basically everything. It syncs instantly from one platform to another, plus it's extremely fast and intuitive. It's great for work since you can send files over. I love it.

>>57410850
wtf is wrong with that thumb

File: sans titre.jpg (27KB, 351x352px) Image search: [Google]

27KB, 351x352px

is this shit even legal?

>>57410804
Qute good.
>you can setup self destructing messages after being read
>Custom stickers
>Crypto
>You can setup /bots for images and gifs
>Games on chat
>Multiple voice notes are reproduce one after the other, whch is pretty cool, whatsapp can't into that

>>57410804
I like it because it doesn't treat desktop operating systems as an afterthought or second-class citizen. Signal, etc make this bizarre assumption that I'll only ever want to message from my phone which is stupid – if I'm sitting at my desktop or laptop you can bet your ass I'm going to want to just alt-tab to a chat app and type out messages with a real physical keyboard.

Signal has the desktop chromium "app" but it's bloated web tech bullshit that does a janky phone sync thing, and worse, it doesn't work with the iOS Signal client. Compare this to Telegram, which has a real native Mac app that isn't fucking useless when not linked up with my phone.

File: 1475157760301.png (190KB, 540x540px) Image search: [Google]

190KB, 540x540px

>>57410825

Sad but true

>>57415835
THIS

I don't even try to convince people to use Telegram, I use it to talk to my wife and that's enough for me. Being able to use it on both my phone and laptop is essential.
Also, I find the login system pretty elegant.

I used Telegram for a while for talking about anime. I like it because of the Stickers and sync'ing on multiple devices.

I like Discord more because of the VOIP and better organization of groups/chats.

Shame I can't get my tech-retarded friends off of Kik, so I guess I'm stuck having both Kik and Discord on my phone.

>>57410804
>$CURRENT_YEAR
>not using signal

Why, senpai?

Shit for privacy, which is what it's advertised for.
Good whatsapp alternative if you hate facebook that much. Runs on pretty much everything, transfer files easily, can message myself, simple UI.

My friends are all paranoids fucks, so it's the only thing we use to talk. Stickers and bots are nice.

How can something that wants your mobile number (even if you can fake it), has weak password retrieval mechanism through sms, has unaudited encryption algorythm and proprietary server, be called "Secure" and "Private"?
Are you fucking braindead morons, neo-/g/?

>>57412198
This. I was using the FOSS version of signal then it just stopped working. Checked the github discussion about why apparently Moxie had gotten so buttfrustrated about it everyone involved just stopped working on it.

>>57415293
why wouldn't it be?

>>57410825
I convinced my 4 normie best friends and brother to use telegram, the gifs (specially the porno ones, those are the KEY), file sharing and great pc version, won them over.

All i had to do was install it on their phones and show them it was similar to use to whatsapp but better. that's all we use now. and they use it with their girlfriends too.

>>57410804
ISIS love it

Drug dealers in my country got caught over telegram messages. Just saying

File: TextSecure_Blue_Icon.png (43KB, 512x512px) Image search: [Google]

43KB, 512x512px

https://en.wikipedia.org/wiki/Signal_(software)
Android specific

>Signal's official Android client requires the proprietary Google Play Services because the app is dependent on Google's GCM push messaging framework.[46] As of March 2015, Signal's message delivery has been done by Open Whisper Systems themselves and the client relies on GCM only for a wakeup event.[47]

>In May 2016, Signal's lead developer Moxie Marlinspike requested that LibreSignal, a fork that had removed the GCM dependency, not use the Signal servers or the Signal name.[48] As a result, on 24 May 2016 the project README stated the project was "abandoned".[49]


why is moxie pissed that someone de-google the software? hummmmmmmmmmmmmmmmmmmmmm ?

>>57422136
yes but GIF native? and not trancoded to mp4 or webm ?

>>57415293
WTF is this some stookolms syndrome?

ppl are so accostumed and mostly fine with "the government" taping phone lines for the greater good that they would think that taking measures to be private should be immoral, unethical or illegal

>>57423634
Native GIF, not like WA which turns it into .mp4 and can't be longer than 7 seconds.

>>57415190
Double-jointed, anon

>>57410825
>>57422136
>normie friends
Why do normalfags say this shit

>>57410825
This

>>57410850
Thumb

It's full of autists, paedophiles and muslims.
It's cancer.

>>57424665
>paedophiles and muslims
Huh, why'd you repeat yourself there?

Its used by sand niggers, the crypto is complete utter shit, the icon looks like a paper airplane made out of wadded up tissues used to cum in and the name makes me vomit on my own dick.

3 / 5 stars at best IMO.

>>57413430
But they used unencrypted SMS.

>>57410848
dumb /g/ay

Comfiest balance between full of features, secure and diffusion.
Maybe not the best at the last two, but still the best compromise.

Converted all my friends which converted all their friends and now pretty much everyone I care about is on it

>>57410825
Same

it's pretty shit but it's a gratis nonfree service that i use for status notifications.

the app doesn't drain battery that much, and unlike email, actually syncs and notifies consistently.

Would be great if it were actually secure.

>>57427033
>Comfiest balance between full of features, secure and diffusion.

If Telegram got voice calling, everybody would switch to it from Whatsapp.

It's shit security wise, but I use it because it has got some nice features and is still better than WhatsApp.

Is there any non-botnet video call app? I wish telegram had it, only apps I know of are that Google one, Skype, and snapchat

>>57410804
It's great. Great features, good UI, excellent platform support. I also made all my friends and family use it, got rid of WhatsCuck at the same time.

It might not be as safe as something like Signal or OTR, but at least it's got the option for secret chats. And the company is not US-based, which is a huge plus.

File: ferrera1.jpg (268KB, 1000x749px) Image search: [Google]

268KB, 1000x749px

earlier today some expert at the public radio was saying that the only secure messaging app atm is Signal

>>57423698
You're wrong, Telegram DOES re-encode GIFs. To mpeg4, that is. Why would you even want them as native GIFs?

https://telegram.org/blog/gif-revolution

>>57423768
special snowflake syndrome

>>57415835
Signal has a Desktop version. Requires you to have installed the phone version first though. You can get the Desktop version via a Chrome addon.

>>57423055
Who cares if explosive sand niggers love it? They also love food and oxygen.

That said, Telegram's custom crypto is crap and the service doesn't have E2E crypto by default. I don't even know if there's a Windows version of Telegram that supports E2E encryption. Not that it's all that great consisting the, y'know, shit custom crypto protocol.

>>57415293
NSA plz go.

>>57423687
Agitprop shills and ignorant people who shills have fooled.

- Homegrown crypto (MTProto)
- Needs phone number
- Unencrypted by default
- Their servers store group chat in plaintext
- If you don't enable 2-Step Verification, your entire chat history can be obtained by abusing SS7 to redirect the SMS with the code (already happened in some countries)

WhatsApp is shit too, and Signal sucks because it's centralized and depends on Google.

The only real options for a mobile private messenger is Conversations, a XMPP client with OMEMO support. OMEMO is based on the Signal protocol (formerly known as Axolotl and itself based on OTR, another XMPP encryption protocol), but supports end-to-end encryption for group messaging. You can get if for free on F-Droid. But be aware that it's not normie friendly, there isn't any option for that currently.

>>57429247
>has got some nice features and is still better than WhatsApp.

>>57427033
>balance between full of features, secure and diffusion.
how so?

doesnt whastapp have the same number of fetures plus voice?
what am i missing

i sure love telegram using a free protocol, federated IIRC, so you can use other clients in other hardware

but whats secure about it? wouldnt even matter if the server software was foss, its always faith in whoever is running a server, or in this case, telegram only central server for now,

ofc pre shared crypto is safe even in hostile servers

>>57410804

i dont get why TELEGRAM doesn't fucking wipe out WhatsCrapp, it has a DESKTOP version!

That itself should make it 100% superior

File: 5754703_b14a92aabd26d881cf966b96f0e7ee73.png (62KB, 326x212px) Image search: [Google]

62KB, 326x212px

/g/ telegram group where??

op, since you're spamming all these IM threads, let me do so too:

If there was an foss app with the level of polish as say telegram, with multiprotocol support to make it actually useful, is that what /g/ basically wants?

Ie single client supporting tg,fbm,wa,snapc maybe twitterdm to stay in contact with normies?

The biggest problem is that this is basically possible only on rooted phones (to spoof original app sign keys for GCM and receive push not in doze). Just asking if this is worth the effort, provided that it is some sort of nerd holy grail.

>>57431541
>SS7
It's less known, but sending sms works for majority of "end to end" encrypted IMs (wa,tg,snapc) at the very least.

Also, 2fa will not prevent sms hijack with telegram.

>>57431804
>what am i missing
First of all, capitalization.

Then:
Most important thing: standalone webclient/desktop client.
Whatsapp requires the phone to be on and connected, telegram does not.

Syncing drafts between devices.

File sharing of ANY kind, not just supported formats, and the filesize is more lenient.

Telegram add some functions like "reply" and "forward" before whatsapp did.

Better groups management, bigger size, admin functions are clear.
(e.g. if the creator drops out, it's no russian roulette to see who's gonna be the next admin).

Formatting options to send blocks of code like

you can do here

Silly stickers and bots, which, admittedly died after a while because they didn't do anything really useful.

It's superior to whatsapp in every way except voice calling, which is a pretty useless thing today considering that every plan offers some amounts of free calls.

>>57431913
There have alreay been some.
They were full of weebs and furries and memespouting idiots.
Never again.
Fucking never again.

>>57410804
Telegram is great

>>57432020
>>57432023
It's great how blatant shilling can sinkhole idiots. I wish half of retards on rizon moved to tg or facebook instead.

File: 1478172889963.jpg (245KB, 620x958px) Image search: [Google]

245KB, 620x958px

Meh i like wire better

>>57431541
>- Homegrown crypto (MTProto)
ah yeah i forgot about that. it's not even proven.

>>57432064
Fuck off faggot. Telegram has great features and is secure. Much better than literally any other app.

>>57411031
Shit son, I just accidentally opened that dudes VK profile an hour ago when trying to get around the new profile-blocking code they added.
Did it with ease.

I find it funny there was a thread on Telegram when I come here.

Good ol profile id1

>>57431212
luckily ive been collecting gifs for 25 years

for many of them a VHS or mpeg2 dvd was the source, and now normies are inadvertedly converting to mpeg4 with some poor android algorithm designe d for speed, blurrying the shit out of them

how can humanity live on if funny clips keep being re encoded with different codecs, at some point a nerd in the year of allah 129423 wont be able to see a chimp sticking a finger up his anus, sniffing and falling of a tree, fuck they wont even know what a chimp is.

>>57410830
>stickers

>>57431541
I wouldn't call WhatsApp shit, but I've said elsewhere about the FB/phone number harvesting problem that's very disappointing.

Signal's encryption is also brilliant, and their response to the subpeona proves they really do seem to be honest about not logging the metadata they do have. You have a sound point about Moxie's unwillingness to federate (even though the protocol's been fully independently documented now? I may have to ask him again).

The Google dependency is partly because F-Droid's devs couldn't security their way out of a paper bag, partly because wakelocks in Doze require GCM or your app being on a special permission list you're not allowed to add yourself to.

Matrix.org is working on something interesting, I'm reviewing their e2e proposal which is also based on Signal's model, similar to OMEMO.

>>57432158
When we looked at it we were almost speechless at how incomprehensibly bizarre its design was; no-one who actually knew what they were doing would have purposely designed crap like that.

I found some issues and Pavel was uninterested in fixing any of them because they couldn't be used to decrypt secret chats. They could, however, be used to make people think that chats that weren't secret were, and there's a working MITM.

Yeah, don't trust MTProto.

Literally no reason to use it. No one uses it since whatsapp does the same thing except more people use it.
>it's owned by facebook
so what? You get privacy AND everyone else uses it. Telegram has lost this one and will die just like all other tecnology that lost to a better product.

Signal is useless too since it's only "thing" is that it's secret and encrypted when whatsapp does the same thing. Stop using these meme tier apps and use something practikal.

>>57433299
What's your opinion of proteus as used by wire and wire as a messaging app in general? Apparently there was beef with moxie about ripping off the text secure protocol, axolotl now I think.
Good to know about MTProto, had recently installed and just started to use telegram.

>>57431339
>E2E encryption
seriously now

the end-to-end concept in itself is a stronger form of encryption than the server handling it, since public-private-pair negotiated on the fly can be manipulated by a man in the middle,

isnt e2e still private-public ? its just that the IM program will store public keys of friends.

BUT, what does e2e even mean if its on a closed source client like whatsapp running on your system, and even worse, if its the same server that sends your key initially to your friend.

and in the specific case with whatsapp, at any time apparently randomly you can read "your friend has changed security key", i think its when you install an update, but whatever,


only pre shared key is server-proof and MitM proof

physical pre sharing is hard, but as long as its done at a given time via a secondary line, say, when youre both connected in your homes directly to your ISPs and not via a cafeteria wifi

.... or, directly connected to a 4G ISP, but in a fake-id disposable Sim card

Not nearly a secure as Signal.

>>57431339
>Signal has a Desktop version. Requires you to have installed the phone version first though. You can get the Desktop version via a Chrome addon.
As I mentioned in the post you quoted. It's tethered to your phone (stupid), requires Chrome or Electron because it's webshit (stupid), and only works when paired with the Android client (stupid). The "desktop" version is such a shitshow it may as well not exist.

>>57431997
>considering that every plan offers some amounts of free calls.
i guess in your country

unfortunately in brasil i cant even recommend telegram to friends because telephony is ultra bizarre, its 0.05-0.10 (10 bananacents) per minute in 0-payment or equivalent in fixed-payment plans but only for the same provider, for calling someone on the other 3 providers you pay 0.60-1.50 even on 200-300 bananas plans ($60 usd) that some wealthy relatives have on different providers.

no one here has a phone with less than 2 SIM, small offices have 4 mobile lines, each for a provider, so clients can call in at 0.05-0.10 per minute and vice versa

this madness lead many including me to complete ditch regular voice, i only call via WA, i spend 14 bananas a month and can make +- 1200 minutes (250MB) of voice calls to anyone with WA, these same 1200 minutes in voice woudl cost me 30-60 bananas even calling same-to-same provider at 5 cents + some promotions of 25 cents per call (limited to 30mins) on the same fucking provider that charges me 15 banas for 250MB, they are so retarded,

this 14 bananas monthly are paid weekly 3.50, prepaid, no contract, so i sometimes even go without it if im just at home/work for a few weeks in a row, giving my provider a proverbial middle finger.

these 4 telecom providers are even trying to ban WA from brasil for the past 3 years now, i guess is the only thing i can the thankful for facebook heheh, i imagine if all an independent WA had to gain was 30 million per year they wouldn't be able to fight those 4 companies judicially.

*in brasil you dont pay to receive mobile phone calls, which i guess is partly responsible for this cross-provider cost madness, but still.............

>>57433516
instant messaging is far from a well defined champion

whstapp is a cool smartphone gimmick
telegram lacks voip
signal smartphone meme as well

IM doesnt necesairily needs voip, or even binary

but it needs an open and federated protocol, open client, and license compatible with paid servers, that could handle spam fighting.

encryption doesnt even need to be a defined by the protocol/server it can be secondary, the protocol should reserve space for negotiation of supported features between server-server, server-client, and client-client including:
-NAT for direct connection of clients
-encryption algorithms

-fuck even voip and/or binaries

freeservers could be easily maintained at low cost as txt only, so clients connect to it could use voice and binary as long as both are able to direct connect, you just wouldn't have asynchronous selfie transfer cached by server.

if ppl want to share funny videos they can just share normal funysites.com/video like we have been doing from the start

>>57436604
>but it needs an open and federated protocol, open client, and license compatible with paid servers, that could handle spam fighting.
It also has to be dead simple to set up. Like first time setup is enter email + password and you're done simple. In the past the downfall of federated type setups has been the technical nature of their setup and usage.

>>57410804
Use signal instead.

>>57424665
Nothing wrong with being paedo though.

>>57435946
Fair enough. That makes for a scenario where VoIP is really useful.

After all it's not like there is an overall better app, just the one that suits your need best.

>>57410825
this

>>57435381

Your critique is not on the concept of E2E, but of the key exchange mechanism.

A valid concern.

>>57436604
>telegram lacks voip

wait, really? phew, thanks for saving me time anon, i was almost ready to give it a try.

>>57410804
its good for terrorists

>>57436959
>In the past the downfall of federated type setups has been the technical nature of their setup and usage.
really how so, isnt Jabber (XMPP) federated and simple setup?

btw >>57436604 doesnt JABBER fit most os those requirements?

comfy desu~ :3

>>57434451
I haven't really started reviewing Wire yet, but I understand proteus is based on the Signal protocol quite closely - the beef was due to them porting it to Rust using the source as a specification (Trevor has only fully documented the Signal protocol, externally to the source, in the last few days - Cohn-Gordon/Cremers/Dowling/Garratt/Stebila's review in IACR ePrint 2016/1013 was conducted in the same way, by using the Signal source code as the reference), and Moxie being annoyed about this despite Signal being under an open-source licence? I don't get that.

I do intend to give it a closer look, but first Matrix.org have asked me to review their E2E Olm specification, which is based on Signal and OMEMO, which is based on Axolotl's groups. As that's intended to be a federated, decentralised, multi-client, standards-based solution, I want to prioritise that work because I think that may be more future-proof than Wire, a tech startup with one app who host their own servers who don't yet have a clear picture on how they're going to monetise (at least Open Whisper Systems are explicitly a non-profit and have funding grants).

I'll say this: it looks like Wire have made a good start, but I'll reserve my judgment until I've got the time to cover them properly.

>>57442577
Well the monetization is the source of my trepidation, that and the moxie debacle which didn't seem veracious from either sides account. Any idea when you'll get around to a review or know of any reliable reviews of wire?

Also the eff scorecard has been out of date for a while now, does anyone have an idea when they'll be publishing a new one?

It needs a dark theme.

>>57410804
use wire you stupid faggot

>>57444061
Plus messenger

>>57441526
Unecrypted Jabber is reasonably easy, comparable to signing up to AIM back in the day. The bigger hurdle it has to deal with is not being a singular recognized brand; when people ask, "how do I get Jabber" and you answer with a list of different clients, you're going to get back a blank stare and Jabber will be promptly forgotten about by that particular individual.

>>57431951
Matrix is what you're looking for. Federation, integration with other chat clients (slack, irc, telegram all currently in the works, irc and slack work pretty well in my expierence) and completely open source. iOS, Android and desktop clients (weechat plugin if you're a haxxor). No phone number required either. E2E still being worked on but I would recommend it. I even have my own server instance running so nobody can snoop on my friends.

>>57447174
>and you answer with a list of different clients
kek, so true

my first time reading about jabber some years ago, proceeded to spend 30mins picking a client and server

but in a way its not so different than the choiice of several free webmails, even normies have a handful of them on hotmeil gmail yahoo and a couple of national ones on their countries

i took a glance over at fdoird and xabber seems to be the most feature completr for android, if it shipps with a pre configured list of servers and auto select based on country, that should be easy

i already got friends to install fdroid and really only recommended telegram to closer people,

is XMP the future then then?

theres some drafts for voip over XMPP underway

matrix.org will end up being a more specialized stuff for tech, journalism, whitleblowers and iidontknow

good

>>57447174
>and you answer with a list of different clients
kek, so true

my first time reading about jabber some years ago, proceeded to spend 30mins picking a client and server

but in a way its not so different than the choiice of several free webmails, even normies have a handful of them on hotmeil gmail yahoo and a couple of national ones on their countries

i took a glance over at fdoird and xabber seems to be the most feature completr for android, if it shipps with a pre configured list of servers and auto select based on country, that should be easy

i already got friends to install fdroid and really only recommended telegram to closer people,

is XMP the future then then?

theres some drafts for voip over XMPP underway

matrix.org will end up being a more specialized stuff for tech, journalism, whitleblowers and iidontknow

>>57410804
It's no better than WhatsApp, to be honest.

>>57442773
I know that many of my peers and I were criticising the EFF's scorecard from day one. The methodologies are based on self-reporting, prioritise unimportant features from both a privacy and OPSEC perspective, and were generally unsound.

I think Chris Sogohian mentioned they were doing a revision, but I suspect recent events may change the EFF's priorities? You'd have to ask him.

As I said, Wire is on my list, but I don't expect to get around to it in 2016. I'm formally retired (lol), I have gin to drink (I fucking needed it after looking at Telegram's crypto), and I'm doing it more as a favour/curiosity thing with other things at higher priorities (see also: gin). Besides, they're a startup, they can afford to fund peer review if they truly care.

(...I may as well fucking tripfag at this point, but not unless anyone cares. I'm not keen on appeals to authority.)

It's shit.

>By default Telegram stores the PLAINTEXT of EVERY MESSAGE every user has ever sent or received on THEIR SERVER.

https://mobile.twitter.com/tqbf/status/678065993587945472

>>57448526
doesnt matter in the slighest

if the server has access to your plain text, it makes no real diff if the HDDs have scrambled bits on them, they can sell, be subpoenad'ed, be stolen.

also, e2e default in whatsapp, with openwhipersystems security, how do you even trust that your closed source client didn't copy the keys to the server?

like steve gibson here said >>57448465
that EFF scoreboard is a joke

>>57448526
btw, secret chats are alledgedly E2E, so telegram servers arent able to keep those

>>57448989
>comparing me to Steve Gibson
Ouch. Fucking savage of you!

As far as WhatsApp goes: I'm a reverse-engineer, I didn't need source. They literally included libsignal.

>>57412445
There's plenty of universities that actually got it as an assignment to break their crypto. That's how shit it is.

Very good for writing messaging bots with.

Literally no one worth messaging uses it though so whats the point?

File: ch_cho_img_03.png (168KB, 620x800px) Image search: [Google]

168KB, 620x800px

>>57410804
Best sticker pack desu.

>>57448465
Eh, tripfag if you want, sometimes it's useful to have someone who knows whats up. Appeals to authority aside, direction to good sources is of value, bearing in mind the most time consuming part of reading anything about a new subject is working out which sources of info are good as opposed to meaningless waffle or those so simplified as to be worthless.

Welp, until the security community reaches consensus or the conversation about what makes a good RTC applications secure becomes coherent, I'll continue to use signal. Moxie strikes me as competent as he is anarchistic and that gives me confidence in the security of the software he writes. Trust is a funny thing.

>>57450167
Alright, but only when it's relevant. >>57433299 >>57442577 >>57448465 and >>57449468 is me.

Signal is a solid choice for a phone messenger for today - its review is in https://eprint.iacr.org/2016/1013 and it passed (with one weak-RNG-strengthening recommendation that isn't particularly important).

It requires gapps, but Moxie's reasoning why is fairly sound: after all, crash telemetry has helped to debug earlier versions (is that still necessary?), F-Droid (last I checked) had some security practices that were alarming even for Android and at least the Google Play store can actually push updates (vitally important if they're security updates!), and you need a special exception on Android to wakelock through Doze, and only GCM gets that as stock (which I suppose highlights how 'open source' Android really is, or isn't).

microG might be made to interoperate with some more work, I haven't really looked.

It's a shame about Moxie's views on federation, but those are coloured by it having been in development and CyanogenMod having been risibly incompetent about the maintenance their TextSecure branch received. Maybe now that the Signal protocol's been fully documented and the bulk of development on it is therefore stabilised, he might change his stance on that? I'd like to see something which could interoperate with Signal but didn't need phone numbers, because nation-states control phone numbers and they are too easy to hijack. I'm not clear yet if that's going to be workable alongside it.

The RedPhone part could really use some love/a rethink. The server part of that hasn't been opened, it doesn't do video, maybe it should use the Noise framework rather than ZRTP, and the voice codec is poor (and should really be replaced with Opus where possible).

It is also a shame that the 'desktop client' (currently a Chrome extension - being careful to note that Chrome extensions' end-of-life has been announced) currently in existence is a bit rubbish.