Hacker News new | past | comments | ask | show | jobs | submit login

A 0.0001% chance that a Facebook product has backdoors to spy on people? I see that you have a real hatred of Telegram but come on, this is such a biased take. You are willing to protect a closed-source app from Facebook just because you hate the alternative so much. You are not helping anyone with this.



>A 0.0001% chance that a Facebook product has backdoors to spy on people?

Yeah, I have never ever heard anyone MITM attacked WA user, and I have never seen any claims the app leaks plaintext data or keys to server or third parties. If you have some factual information instead of "hunch", then by all means, lets hear it. I'm not arguing Facebook isn't abusing WhatsApp metadata like there is no tomorrow. They absolutely are, and often metadata is more revealing than the content. I'm not saying WhatsApp is secure enough, I'm saying it's better than Telegram. Consider group messages:

Telegram spies on user's group messages with 100% probability. Therefore, WhatsApp can be at most as insecure as Telegram. But if even if there's 99.9999% probability that WA is backdoored, it's still better odds than Telegram.

If you think WhatsApp can't be trusted because it's proprietary and you have to trust the vendor, then you absolutely can't say Telegram is safe, because you have to trust the vendor not to look at the group messages.

So it boils down to what is the actual probability that WA is backdoored, the number is not zero, but it most certainly is not 100%. If you have useful factual information that overrides Moxie personally telling me that he oversaw WA implement the Signal protocol, I'm willing to update my threat probability estimates, but until then, I'm going to stick with saying it's highly improbable.

>I see that you have a real hatred of Telegram but come on, this is such a biased take.

I have nothing personal against Telegram. I've researched private messaging apps for closer to 10 years, and I'm only interested in all apps improving. But Telegram isn't in the process of locking themselves out of user data, but on the contrary, even the new features, like the group video calls, are collecting 100% of metadata AND content. Telegram isn't helping the world, it's amassing terabytes of data into a silo that's one zero-day away from the biggest breach in modern history.

Here in Finland we've recently had some taste of it when the Vastaamo psychotherapy center was hacked. https://www.wired.com/story/vastaamo-psychotherapy-patients-... Read it. Then realize Telegram private chats can contain messages people wouldn't share with their therapists. Imagine tens of millions of extortion cases (that never end, even if you pay), ruined lives, relationships etc.

The Telegram Hack of 20** is not going to be just another hack, it's going to be the scandal of the century.

> You are willing to protect a closed-source app from Facebook

No, I'm not protecting anyone here, I'm making the distinction that the backdoor is very improbable, because a) Facebook doesn't need it due to the metadata and b) Eavesdropping on your users via backdoor is a felony. Compare that to Telegram where the users send practically everything to the server willingly. There is zero expectation of privacy the user can ask.

>you hate the alternative so much

Telegram is not "the alternative", it's "out of the frying pan, into the fire". As you can see my every post here argue.

There are plenty of open source, secure alternatives like Signal, Element, Wire, Threema, Briar, Cwtch, OnionShare Chats etc.


I know people who worked on WhatsApp and they wouldn't let that happen. Take it for what it is, but it's a pretty serious team there.


How long do you think the principled people will still be working on the project?


As long as it is end to end encrypted, the day they remove that feature is the day I would stop using the app.


Please review the HN guidelines. It’s fine to question Facebook’s integrity, given what we know about the company. Attacking another person’s inferred motivations is not.

https://news.ycombinator.com/newsguidelines.html




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: