Telegram To Disclose Phones, IP Addresses At Authorities' Requests. (www.rferl.org)
from 101@feddit.org to technology@lemmy.world on 23 Sep 2024 17:26
https://feddit.org/post/3123159

#technology

threaded - newest

vzq@lemmy.blahaj.zone on 23 Sep 2024 17:46 next collapse

Look at that!

A few nights in French jail worked wonders.

interdimensionalmeme@lemmy.ml on 24 Sep 2024 03:44 collapse

It’s like I always say, violence and torture work so well you don’t even have to do them in the first place. Just saying you will unless they comply is enough. That’s why we’re the good guys.

Dkarma@lemmy.world on 24 Sep 2024 05:03 collapse

About that last bit…

Gork@lemm.ee on 23 Sep 2024 18:30 next collapse

Durov – who has citizenship in France as well as Russia, the United Arab Emirates, and the Caribbean archipelago of St. Kitts and Nevis

How can someone have four simultaneous citizenships?

Is it money? Gotta be money.

PerogiBoi@lemmy.ca on 23 Sep 2024 18:44 next collapse

In Canada and New Zealand you can literally buy citizenship. You just need the funds. It’s a real and legitimate process.

Gork@lemm.ee on 23 Sep 2024 18:49 next collapse

I wonder if anyone rich enough has decided on undertaking the quest to get and hold as many citizenships as possible.

There’d probably be difficulty though getting simultaneous citizenships for North Korea / South Korea citizenship, Russia / Ukraine, or Republic of China / People’s Republic of China.

Teils13@lemmy.eco.br on 24 Sep 2024 03:12 collapse

The most i could find on the web was this lawyers non-named client, who has 8 citizenships (“octa-citizen” has passports from Canada, UK, Ireland, Belize, Grenada, Dominica, St. Kitts, and Cape Verde), after renouncing his original USA one (and he apparently did it to not pay taxes).

orrk@lemmy.world on 27 Sep 2024 06:28 collapse

ya, the US is the only nation that will tax any money you make even if you don’t live in the US or work in the US

vodkasolution@feddit.it on 23 Sep 2024 19:43 next collapse

Almost every country has a way to get citizenship in exchange of money

Matriks404@lemmy.world on 24 Sep 2024 10:25 collapse

If the country is corrupt enough, then yes.

TrippaSnippa@lemm.ee on 24 Sep 2024 04:35 collapse

In Australia you can buy permanent residency, which is then a pathway to citizenship.

tal@lemmy.today on 23 Sep 2024 19:15 next collapse

How can someone have four simultaneous citizenships?

Most countries let you have multiple citizenships. Unless a country restricts you from doing so, you can have as many as you want.

Frostbeard@lemmy.world on 23 Sep 2024 20:32 next collapse

I only use Telegram for my Warhammer 40k group…Authorities seizing that will get them years of mindless chatter about the Emperor, memes and battle reports. Fuck they will pay us to leave Telegram

0000011110110111i@lemm.ee on 23 Sep 2024 21:43 next collapse

How can someone have four simultaneous citizenships?

My kids are entitled to 5 citizenships. 2 from me and 3 from their mum.

linearchaos@lemmy.world on 24 Sep 2024 02:41 collapse

Oh hell yeah it’s money. It’s called economic citizenship and there are plenty of countries out there that are willing to let you buy in with ownership of properties and business.

There are only a handful of countries out there that don’t allow dual citizenship.

crimsoncobalt@lemmy.world on 23 Sep 2024 18:34 next collapse

I wish Telegram would just enable default E2EE. Oh well, time to switch to Signal!

melroy@kbin.melroy.org on 23 Sep 2024 19:22 next collapse

I also don't trust Signal.. And I won't gonna switch a 4th time. I might as well switch to Matrix chat now.

SnotFlickerman@lemmy.blahaj.zone on 23 Sep 2024 19:25 next collapse

Spin up your own server for best results.

Then you only have to worry about minor metadata leakage.

melroy@kbin.melroy.org on 23 Sep 2024 19:26 collapse

https://matrix.melroy.org.. I know..

SnotFlickerman@lemmy.blahaj.zone on 23 Sep 2024 19:33 collapse

There’s also SimpleX chat and Briar, but I’ve used both of those less than Matrix. They seem to be aiming to solve the last few issues that Matrix has, like usernames and metadata leakage.

I consider Matrix to be closer to an “Enterprise” solution, like what a business or government or non-profit would use for secure communications (literally both French and German governments use Matrix), while SimpleX/Briar seem much more aimed at individuals just wanting control over their personal conversations.

melroy@kbin.melroy.org on 23 Sep 2024 19:42 collapse

Personally I really hope that Dendrite will release a version somewhat close to v1: https://github.com/matrix-org/dendrite

The main downside of Matrix is the Synapse Python server (blurp). But Dendrite is still far for complete even years later now.

helenslunch@feddit.nl on 23 Sep 2024 19:26 next collapse

I also don’t trust Signal…

…why?

I might as well switch to Matrix chat now.

Man, Simplex seems to check all the boxes for me…

melroy@kbin.melroy.org on 23 Sep 2024 19:31 next collapse

...why?

While it might be secure.. I'm done with centralized services.. If I can't host it myself, I won't bother switching anymore.

I don't know Simplex chat very well.. But that seems also good.. As long as you can have encryption and run your own server. It's not that I have anything to hide, but at the same time I'm tired of the infiltration of all states (which now also include EU).

EDIT: They need to change their name. The first results you get in search engines are this: https://www.simplex.com/ followed by (Dutch): https://simplex.nl/

helenslunch@feddit.nl on 23 Sep 2024 21:44 collapse

As long as you can have encryption and run your own server.

You can :)

kevincox@lemmy.ml on 23 Sep 2024 19:43 next collapse

Simplex doesn’t support mutli-device. That’s a deal breaker for me. I do 90% of my messaging at my desktop but also want to be able to chat on the go. Using my laptop on the couch is also fairly convenient.

mox@lemmy.sdf.org on 23 Sep 2024 19:54 next collapse

SimpleX also loses messages if you don’t pick them up in time. Going on vacation for a few weeks could be problematic, for example.

spiderman@ani.social on 24 Sep 2024 06:31 collapse

Adding to that, their notification system kinda sucks for me.

helenslunch@feddit.nl on 23 Sep 2024 21:45 collapse

Simplex doesn’t support mutli-device.

…yes? It does?

mox@lemmy.sdf.org on 24 Sep 2024 02:07 next collapse

No, it does not. The closest it comes is allowing a PC to take control of a mobile client on the same local network. That might be a convenient way to type with a full-sized keyboard if you have both devices in the same place, but it is not what people mean when talking about multi-device support.

GP wants the ability to use their account from multiple devices independently. From different locations, not tethered on a LAN. With shared message history, notifications, unread state, identity, etc. That’s what multi-device support means in the context of messaging services.

helenslunch@feddit.nl on 24 Sep 2024 02:12 collapse

Device 1: PC Device 2: Phone

How many devices is that? 2? Sounds like multiple devices to me 🤷‍♂️

EncryptKeeper@lemmy.world on 24 Sep 2024 04:13 collapse

2 devices that can’t function independently. That would make it functionally one device. You’re just splitting hairs now.

helenslunch@feddit.nl on 24 Sep 2024 04:20 collapse

2 devices

Glad we settled that one.

You’re just splitting hairs now.

My guy, you’re the one splitting hairs.

EncryptKeeper@lemmy.world on 24 Sep 2024 17:17 collapse

No, lol. “Multi-device” does not just mean “multiple devices can be involved”. It means “Multiple devices can operate independently”

And you know that. But you’re splitting hairs to try and fit this use case into something it’s not.

helenslunch@feddit.nl on 24 Sep 2024 17:20 collapse

No, lol. “Multi-device” does not just mean “multiple devices can be involved”.

My guy… “multiple” = >1. “Device” = some sort of electronic. It’s that simple. And you know that. But you’re splitting hairs to try and win an internet argument and misrepresent something you don’t like.

EncryptKeeper@lemmy.world on 24 Sep 2024 17:27 collapse

Yes linguistically that’s what the those two words mean.

But in the context of a messaging app, “Multi device” becomes one singular term with a set meaning agreed upon by everybody but you, that you’re trying desperately to change by deconstructing the words it’s composed of in order to misrepresent something that you evidently like a whole lot.

helenslunch@feddit.nl on 24 Sep 2024 21:20 collapse

By “everybody but you” you mean just you, right?

EncryptKeeper@lemmy.world on 24 Sep 2024 23:02 collapse

No I mean me, the other people who’ve corrected you, the people who’ve downvoted you, and everyone else.

kevincox@lemmy.ml on 24 Sep 2024 11:43 collapse

github.com/simplex-chat/simplex-chat/issues/444 suggests otherwise. Do you have any information about multi-device support.

helenslunch@feddit.nl on 24 Sep 2024 15:51 collapse

The only information that I have is that I personally use it on multiple devices, and I didn’t invent it, I just downloaded the software provided by SimpleX.

[deleted] on 24 Sep 2024 10:14 collapse

.

helenslunch@feddit.nl on 24 Sep 2024 15:49 collapse

Yes you mentioned that already.

stefenauris@pawb.social on 23 Sep 2024 19:32 next collapse

I’m not sure how much we can trust matrix either to be honest. There’s some cryptographic flaws in their Olm Library. soatok.blog/…/security-issues-in-matrixs-olm-libr…

As it turns out being both secure and convenient is very difficult

kevincox@lemmy.ml on 23 Sep 2024 19:47 next collapse

That is a pretty weak argument. The issues are minor and in a library that people are moving off of to a better build and stronger validated library. Yes, it should have been like that in the first place, but the problem is minor and being addressed.

I would look more to the various features of Matrix that aren’t encrypted like room names, topics, reactions, … and not to mention the oodles of unencrypted metadata. I really wouldn’t call Matrix a high-privacy system.

I like Matrix and use it regularly, but it definitely doesn’t have a privacy-first mindset like Signal does. I’m hoping that this improves over time, but without a strong privacy first leadership it seems unlikely to happen.

melroy@kbin.melroy.org on 23 Sep 2024 20:07 collapse

Olm is now deprecated and all development is now focused into Vodozemac: https://github.com/matrix-org/vodozemac. That being said, is there no proven Olm Protocol alternative implementation for e2e encryption (proven technology) instead of reinventing the wheel.

melroy@kbin.melroy.org on 23 Sep 2024 20:14 next collapse

ow interesting. TIL.... Olm Protocol is a clone of Signal’s Double Ratchet.

melroy@kbin.melroy.org on 24 Sep 2024 10:15 collapse
progandy@feddit.org on 24 Sep 2024 16:30 collapse

vodozemac might become that proven implementation. Without reinventing the wheel there will never be an alternative, because everyone just reuses the one existing library.

melroy@kbin.melroy.org on 24 Sep 2024 10:13 collapse

Here.. SimpleX comparison table.. Signal is also centralized.

SnotFlickerman@lemmy.blahaj.zone on 23 Sep 2024 19:23 next collapse

And if they had implented that to begin with and used servers that kept no logs he wouldn’t have had anything of value to hand over and they would have had to release him since he physically could not provide those things.

He built the damn situation for himself, and the fact that such issues weren’t considered practically screams “honeypot.”

brbposting@sh.itjust.works on 24 Sep 2024 00:47 collapse

they would have had to release him

Maybe we could say he wouldn’t be in this situation because he could’ve responded to every request his company got and they could’ve provided all of the zero logs they had.

I believe Telegram just wasn’t cooperating at all which is wild! Such a Musk thing to do.

mox@lemmy.sdf.org on 23 Sep 2024 19:34 next collapse

Just keep in mind that any service that asks for a phone number can also disclose it.

I hope what leaves the Signal client is a hash of your phone number, rather than the number itself. They might even be using salts and expensive-to-execute key derivation functions, to mitigate brute force searches (which are otherwise easy given the relatively small search space of phone numbers). But if compelled, it would be trivial for Signal to change that behavior.

30p87@feddit.org on 24 Sep 2024 03:14 next collapse

Anyone who used Telegram as a private communications channel in the first place is an idiot.

interdimensionalmeme@lemmy.ml on 24 Sep 2024 03:45 collapse

Anyone who thinks they can have privacy near a computer is an idiot.

spiderman@ani.social on 24 Sep 2024 06:30 collapse

Telegram would never do that.

LEVI@feddit.org on 23 Sep 2024 18:36 next collapse

France wanted a backdoor… they got it, and Telegram was never trustworthy…

x00za@lemmy.dbzer0.com on 23 Sep 2024 19:47 collapse

France probably wanted it to catch people organizing demonstrations.

melroy@kbin.melroy.org on 24 Sep 2024 10:13 collapse

Which is not a good thing.. Even if you don't agree with some of the current demonstrations.. The moment you are in situation you also need to demonstrate against the state, you won't be able to.. By then, we are all doomed.

x00za@lemmy.dbzer0.com on 24 Sep 2024 11:50 collapse

I think humans have the potential to be kicked to the ground, again and again, to then rise up and overthrow their government in a day.

melroy@kbin.melroy.org on 24 Sep 2024 13:11 collapse

If we can trust history books, that happened. And will happen over and over again. Until humans are only pure energy or something haha.

melroy@kbin.melroy.org on 23 Sep 2024 19:21 collapse

OK bye bye Telgram. Now I need to migrate everything again again again.

mypasswordis1234@lemmy.world on 24 Sep 2024 03:29 collapse

Just choose good solutions up front. Then you won’t have to migrate. Use Signal

melroy@kbin.melroy.org on 24 Sep 2024 10:11 collapse

No!! I don't go for signal. That is a centralized alternative. And I'm indeed trying to avoid to migrate again!

Maybe Matrix.. Or maybe Simplex sounds better..