• wuffah@lemmy.world
    link
    fedilink
    English
    arrow-up
    30
    arrow-down
    1
    ·
    edit-2
    29 days ago

    Ever since the CEO of Telegram was basically lured to Paris, arrested, then read the riot act for Telegram’s non-cooperation with French authorities, the company has been responding to warrants and downplaying its “E2EE” features. Expect them to have a fully accessible backdoor for LE.

    By the way, don’t forget about that Bitlocker backdoor that “mysteriously” doesn’t affect Windows 10.

    The EU and US digital surveillance states have been tightening their grip on encryption and online anonymity for years now. “Age verification” is just the latest push.

    • adr1an@programming.dev
      link
      fedilink
      English
      arrow-up
      1
      ·
      27 days ago

      Ever since the CEO of Telegram was basically lured to Paris, arrested, then read the riot act for Telegram’s non-cooperation with French authorities, the company has been responding to warrants and downplaying its “E2EE” features. Expect them to have a fully accessible backdoor for LE.

      What does LE stands for?

      Also, do you have any sources to your claims?

      Just the other day, I wondered myself: what happened after that detention in Paris? I haven’t read anything else. Is he in prison or free?? No idea! Is there an ongoing trial? What were the accusations?

  • AeronMelon@lemmy.world
    link
    fedilink
    English
    arrow-up
    15
    arrow-down
    1
    ·
    29 days ago

    Signal (assuming you live in a country that hasn’t blacklisted them for refusing to install backdoors).

  • Treczoks@lemmy.world
    link
    fedilink
    English
    arrow-up
    15
    arrow-down
    2
    ·
    29 days ago

    As long as the keys are handled via a closed source app and server system, e2ee is potentially broken.

    Even if you generated the key, keep the private part locally and submitted only the public part to your communication partner, you can never be sure that the intransparent app does keep your private key private.

    With WhatsApp I’m quite sure that they somehow can retrieve the private key. Certain events point to that. But I see no reason to consider signal or telegram any more trustworthy - they are all prone to governmental influence.

    And as open source and closed app infrastructure are incompatible, I would not handle anything important on an Android or Apple device.

    • DeckPacker@lemmy.world
      link
      fedilink
      English
      arrow-up
      3
      ·
      28 days ago

      Why would you not trust Signal?

      You don’t have to trust their server infrastructure, because the end to end encryption has been verified by countless experts (and all their client side code can be looked at by anyone).

  • flamingleg@lemmy.ml
    link
    fedilink
    English
    arrow-up
    5
    arrow-down
    10
    ·
    edit-2
    29 days ago

    it is not hosted in the US or a country affiliated with the US, which makes it infinitepy more secure from the point of view of sovereign risk

    • Treczoks@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      arrow-down
      2
      ·
      29 days ago

      No, it does not. There is a different primary actor, but that does not exclude anything.