Hacker News new | ask | show | jobs
by akimbostrawman 230 days ago
That flag is tiny compared to the one telegram has been sailing with for years.

Despite there founder crying on twitter[1] how horrible and distopian chat control client side scanning to bypass E2EE would be, telegram is still only offering hidden and limited opt-in E2EE instead of making it global default like signal.

[1] https://twitter.com/durov/status/1976420399970701543
1 comments
buyucu 229 days ago
E2EE is nice to have, but not the magic cure Signal advertises it is. The #1 most authoritarian governments access chats is by forcing people to unlock their phone. At which point Signal's obsession with phone numbers becomes a huge liability. You can't claim security while tying a phone number to each and every account.
link
akimbostrawman 229 days ago
>The #1 most authoritarian governments access chats is by forcing people to unlock their phone

How would you know this? If they access the data from the platforms server you would never know unlike with obvious forceful physical seazure. The point of E2EE is that the weakest link, the server, is removed. It increases the required threat model from simple dragnet surveillance to high effort targeted attacks. If the client is insecure nothing can protect your data and signal has said that many times.

I don't see how the debate about requiring a phone number is relevant to this discussion since telegram does too.

link
buyucu 228 days ago
Because I live in a very authoritarian government. That is how I know.

The weakest link is not the server. The weakest link is the user device. There is no security without anonymity.

link
akimbostrawman 227 days ago
That makes no sense. If you don't trust your government anything but E2EE is compromised from the get go. "But they could seize your device" is not an argument against but for mandatory E2EE because it moves the responsibility from the server you have no control over to your device that you do.

>There is no security without anonymity.

You don't understand what these words mean. You can be surveilled 100% by bodyguards and cameras to be secure but have 0% anonymity (or privacy).

link