Pavel Durov could be indicted in the morning.
  • istanbullu@lemmy.mlEnglish
    44·
    2 months ago

    The fact that Signal has not run into legal trouble when Telegram has.

    Also Signal has some really shady practices, such as rejecting and killing all third party clients.

    • lemmytellyousomething@lemmy.dbzer0.comEnglish
      51·
      2 months ago

      The algorithm for the end to end encryption is open source as far as I know. Should be easy for security researchers to prove that something is manipulated…

      • istanbullu@lemmy.mlEnglish
        22·
        2 months ago

        Signal had long periods of blackouts when they did not publish server side code. Calling Signal open source is really a stretch.

        • lemmytellyousomething@lemmy.dbzer0.comEnglish
          3·
          2 months ago

          I’m calling the E2E algirithm open source. That’s the reason why WhatsApp is using it, too. As long as the message is correctly encrypted for E2E on the client side, it should not matter what the server is doing as far as I know.

      • JustAnotherKay@lemmy.worldEnglish
        15·
        2 months ago

        The algorithm for the end to end encryption is open source as far as I know. Should be easy for state actors to read through it and break it

        Ftfy

    • XioR112@lemmy.mlEnglish
      41·
      2 months ago

      Signal have been blocked in several countries including Russia and Telegram has more users there and it isn’t blocked.

    • ᗪᗩᗰᑎ@lemmy.mlEnglish
      2·
      2 months ago

      The fact that Signal has not run into legal trouble when Telegram has.

      Because Signal cooperates as much as they can with law enforcement. Signal happily gives all the data they have and thankfully, for its users, the only data they have is the date/time the account was created and the date (not time) a client last pinged their servers; both in unix timestamp format, they don’t even convert it to a proper date.

      Additionally, Signal has no “public groups” like Telegram. Everything’s private, end-to-end encrypted by default.

      Also Signal has some really shady practices, such as rejecting and killing all third party clients.

      Yeah, so that’s outdated misinformation:

      Three of these have existed for multiple years and have not been asked to stop development. The gurk-rs dev even commented (on reddit, unfortunately I can’t find the source) that it reports to Signal’s server as a non-official client and that if the Signal devs wanted to block it, they could easily do so.