balsoft

joined 2 years ago
[–] balsoft@lemmy.ml 1 points 6 hours ago* (last edited 6 hours ago)

Telegram can serve you your old "Cloud" messages, in a decrypted form, on a new device, without any communication with the old device.

This means that they possess the keys to decrypt the messages, since they can send them to you in a decrypted form.

Those messages can't even be encrypted with your cloud password (which would be a pretty weak encryption anyways), because you can reset the cloud password via your recovery email, and still retain access to your messages.

Contrast this with encrypted chats on Matrix, where you have to go through the device verification procedure, which prompts the old device to send decryption keys to the new device (it's actually more complicated but this gets the point across). If you lose access to all your devices (and your recovery key), your encrypted messages are gone, the server admin can't restore them because they simply don't have the key.

No one can’t prove that Telegram use MTProto to encrypt content sent using Cloud Chat, stores them encrypted, and them decrypt them upon opening because the source code for MTProto is closed. So how can you prove that what you’re saying is the way they use?

This is a distinction without a difference.

My claim is:

They possess the keys to decrypt your messages

Whether this is implemented via MTProto encryption or disk encryption or whatever, it doesn't matter, they can read your messages if they want to.

Telegram is actually pretty transparent that Cloud chats are not e2e encrypted in their FAQ. They also go on to babble about "MTProto client-server encryption" but if you spend 2 minutes looking at it, you can see it's just 256-bit AES with a shared key generated via Diffie-Hellman, not too dissimilar from plain HTTPS. In that sense it's about as secure as e-mail over encrypted IMAP/SMTP, or IRC over TLS, or DMs here on lemmy.

They also claim that their at-rest encryption keys are separate from the data they encrypt, and claim that somehow this "requires court orders from multiple jurisdictions" to force them to give over your data, which is just ridiculous from a legal standpoint and won't stand up in court. And actually, it's way more likely that they will just cave in and give up your message history without a lawsuit at all, just look at what happened to Durov in France.

[–] balsoft@lemmy.ml 2 points 1 day ago* (last edited 1 day ago)

In the very old times, you'd have to be born rich already to do maths. You then don't concern yourself with making a living, because your slaves do it for you.

In the old times, you'd live the same as artists: find a rich dude (exceptionally rarely: dudess) to pay your bills, and in exchange name shit you discover/invent after them.

Last few decades you also have a couple new options. You can work (teach) at a university for pennies, and typically have a second job/side hustle so that you can actually survive. And/or you can write books/make a YT channel, and if you're lucky and get popular enough, that can be your living then, but it's probably not going to be anything too advanced. And/or, if your area of expertise has some vaguely practical application (e.g. cryptography or statistics), you can actually find a job that pays you to do theoretical research in that area in hopes of finding practical application, but you'd have to be pretty lucky to get that.

[–] balsoft@lemmy.ml 1 points 1 day ago (2 children)

All data sent to Telegram’s servers will be encrypted once they reach the servers

Except for "secret chat" (which are only 1-on-1 chats, have flaky client support, and require both participants to be online at the same time to initiate; in other words, they are near useless) - this is just simple at-rest storage encryption. They possess the keys to decrypt your messages (again, except for secret chats), because that is necessarily what happens when they serve those messages to recepients.

[–] balsoft@lemmy.ml 14 points 1 day ago (11 children)

Sadly, when it comes down to it, children are necessary for society to function long-term. They are the people who will be financing and effecting your retirement, at least in a well-functioning society. I think it is a sound policy to make sure people can have children without any unnecessary suffering, there's plenty of necessary suffering in there already.

[–] balsoft@lemmy.ml 2 points 4 days ago

Signal is at least e2e encrypted, so they can't read your messages. But also, I do complain and refuse to use it for important stuff. Matrix/XMPP are much better.

[–] balsoft@lemmy.ml 8 points 5 days ago (2 children)

It probably has worse privacy than e-mail or IRC, because it has the same level of encryption (transport encryption only, i.e. Telegram LLC can read your messages), but it also requires a phone number to use, linking your account to your real identity. In short, do not use it for communications if you desire them to be private.

[–] balsoft@lemmy.ml 3 points 6 days ago (1 children)

This is a really cool photo. Thanks for sharing!

[–] balsoft@lemmy.ml 1 points 1 year ago

If I'm honest it's breathtakingly beautiful. I've been around most of Europe and some of Asia, and the only comparable places are Swiss Alps and the Himalayas; however, Georgia is much cheaper than the former and more developed/safe than the latter. It's also quite tiny but heterogeneous: within a day's drive you can go from (slightly underwhelming) Black Sea through amazing forests into wild mountains, back down to vineyards and sunflower fields, through a volcanic plateau with otherworldly landscapes and then bathe in hot springs under the starry sky. There's an insane density of buildings and ruins from dozens of different cultures and epochs, all the way from bronze age to medieval Georgian to Russian colonial style to Soviet-era constructivism. I don't drink wine but I've heard that it's quite amazing too. My only gripes is that the country might be backsliding into authoritarian rule, and the locals are welcoming but "conservative" (bigoted) to the extent that it's straight up dangerous for LGBT people to visit.

[–] balsoft@lemmy.ml 0 points 1 year ago* (last edited 1 year ago) (2 children)

Back when I was in Russia I'd say it'd be Suzdal, famous for the density of churches and other traditional architecture; or Tarusa, known for that one song that everyone seems to know a couple of lines from, Gorodok (here is a random rendition I found just now), both with just under 10k pop according to the wiki. And, as a bit of a stretch since it's not a town and most people would call it Solovki, Solovetsky settlement, famous for being a prison, with about 800 people. Also Oymyakon with under 600 people, the coldest settlement on earth if you're into that sort of thing.

Now in Georgia, I'd say Borjomi with just over 10k pop famous for its water, and Bakuriani (just over 1800 people) for its water and the ski resort. Again a bit of a stretch, but I guess everyone in Georgia at least also knows the ski resort of Gudauri at just under 100 people, as well as mountain resorts of Gomismta and Bakhmaro, both with no permanent residents due to the rough winters. Geography nerds will also be familiar with Ushguli, (arguably) the highest inhabited settlement in Europe, population 220.