Well, that, yes. If users think that their "private" chats are actually
private, they put themselves more at risk than if they reasonably
assumed everything was public.
Telegram uses "encryption" algorithms of their own design to promise
people security, but the algorithms are complete and utter trash, at
virtually every level. They use outdated hash algorithms, encryption
block modes that seem like they were actually not even designed for
encryption per se, and a circuitous route from text to ciphertext that
pointlessly opens up avenues of attack.
They have a "crypto contest" to break their encryption that's designed
seemingly deliberately to exclude any real-world attacks, and they admit
themselves that some forms of MITM attacks are within the reach of
consumer hardware, and ignore completely that these attacks might be
trivial for an attacker with access to special hardware (and not even
*that* special, we're talking FPGAs).
It's just...really, really rubbish. The only people saying it's even
remotely secure are Telegram themselves and hardcore users who don't
know better.
On Thu, 2016-01-07 at 10:54 -0600, John Griessen wrote:
> On 01/07/2016 09:19 AM, Cathal (Phone) wrote:
> > Telegram's "Encyption" is considered laughable by anyone with . . . In all other respects, it's
> > "considered harmful".
>
> Because it lulls users into feeling safe about its possible impact on your computers/networks (attack threat)?
> Could it be an easy attack avenue?
>
--
-- You received this message because you are subscribed to the Google Groups DIYbio group. To post to this group, send email to diybio@googlegroups.com. To unsubscribe from this group, send email to diybio+unsubscribe@googlegroups.com. For more options, visit this group at https://groups.google.com/d/forum/diybio?hl=en
Learn more at www.diybio.org
---
You received this message because you are subscribed to the Google Groups "DIYbio" group.
To unsubscribe from this group and stop receiving emails from it, send an email to diybio+unsubscribe@googlegroups.com.
To post to this group, send email to diybio@googlegroups.com.
Visit this group at https://groups.google.com/group/diybio.
To view this discussion on the web visit https://groups.google.com/d/msgid/diybio/1452186667.6756.3.camel%40europa.
For more options, visit https://groups.google.com/d/optout.
Re: [DIYbio] Re: Status/purpose of biohacklabs.org?
9:11 AM |
Subscribe to:
Post Comments (Atom)
0 comments:
Post a Comment