<story><title>‘I will show you how safe Telegram is’</title><url>https://twitter.com/jsrailton/status/1625720504366555137</url></story><parent_chain><item><author>vbezhenar</author><text>I monitor Russian war channels and some people there insist on using Telegram only for Russian military people. If you use Whatsapp, Ukrainian officers will get all chats from NATO.&lt;p&gt;Telegram accounts of opposition were hacked by belarus police as well. It&amp;#x27;s known and documented.&lt;p&gt;My takeaway is that for truly private chat one should write his own software using simple crypto without all those fancy clients. Ideally just use one time keys and xor everything. Can do it with pen and paper.&lt;p&gt;Signal might be safe, but I think it&amp;#x27;s a honeypot.</text></item></parent_chain><comment><author>lxgr</author><text>&amp;gt; My takeaway is that for truly private chat one should write his own software using simple crypto without all those fancy clients.&lt;p&gt;That‘s actually pretty secure in practice, because you won‘t be communicating with anybody.&lt;p&gt;&amp;gt; Ideally just use one time keys and xor everything.&lt;p&gt;How do you generate the keys? How do you share them? And you only care about encryption, authentication does not matter to you at all?&lt;p&gt;The chance of getting this right as an individual developer, especially given this level of understanding of cryptography, is next to zero.</text></comment>
<story><title>‘I will show you how safe Telegram is’</title><url>https://twitter.com/jsrailton/status/1625720504366555137</url></story><parent_chain><item><author>vbezhenar</author><text>I monitor Russian war channels and some people there insist on using Telegram only for Russian military people. If you use Whatsapp, Ukrainian officers will get all chats from NATO.&lt;p&gt;Telegram accounts of opposition were hacked by belarus police as well. It&amp;#x27;s known and documented.&lt;p&gt;My takeaway is that for truly private chat one should write his own software using simple crypto without all those fancy clients. Ideally just use one time keys and xor everything. Can do it with pen and paper.&lt;p&gt;Signal might be safe, but I think it&amp;#x27;s a honeypot.</text></item></parent_chain><comment><author>benhurmarcel</author><text>&amp;gt; Signal might be safe, but I think it&amp;#x27;s a honeypot.&lt;p&gt;Telegram smells a lot more like a honeypot than Signal</text></comment>