Many people who focus on information security, including myself, have long considered Telegram suspicious and untrustworthy. Now, based on findings published by the investigative journalism outlet ISt

Investigation by investigative journalism outlet IStories (EN version by OCCRP) shows that Telegram uses a single, FSB-linked company as their infrastructure provider globally.

Telegram’s MTProto protocol also requires a cleartext identifier to be prepended to all client-server messages.

Combined, these two choices by Telegram make it into a surveillance tool.

I am quoted in the IStories story. I also did packet captures, and I dive into the nitty-gritty technical details on my blog.

Packet captures and MTProto deobfuscation library I wrote linked therein so that others can retrace my steps and check my work.

    • arsCynic@beehaw.org
      0·
      18 days ago

      Why do you conflate politeness and trustworthiness? Seems like a weird connection to make.

      Is it really that weird? Imagine someone going to a store and the owner starts swearing at them because they asked a question. Would said visitor be more or less likely to trust the owner? I agree that being impolite doesn’t necessarily equate to being ignorant in one’s subject, but I wouldn’t be surprised that on average the most knowledgeable and wise tend to be more polite.

      • Vodulas [they/them]@beehaw.org
        0·
        18 days ago

        Because the inverse of that is how people get conned. Someone blowing absolute smoke with a confident tone and a sweet word. Tone is about the worst indicator of trustworthiness