Re: telegram
Daniel Beer <[email protected]>
| Newsgroups | gmane.org.user-groups.linux.dunedin.general |
|---|---|
| Message-ID | <[email protected]> |
On Wed, Mar 26, 2014 at 11:45:28AM +1300, Robin Sheat wrote:
> nathaN P schreef op di 18-03-2014 om 13:28 [+1300]:
> > Hi all - wondering if anybody is using https://telegram.org/
> > and what it is like?
>
> I have it installed, but haven't actually used it with anyone yet.
If you're using it because of the security claims, you might want to
consider something else. The protocol doesn't look well thought-out:
https://core.telegram.org/mtproto
They use a 256-bit AES key, but you can verify a guess of a message
payload with 2^128 tests (msg_key). This reduces to 2^64 if you know
session_id.
There are other problems, apparently:
http://en.wikipedia.org/wiki/Telegram_%28software%29#Security_concerns
--
Daniel Beer <[email protected]> www.dlbeer.co.nz
IRC: inittab (Freenode) PGP key: 2048D/160A553B
_______________________________________________
DunLUG mailing list
[email protected]
http://lists.ethernal.org/listinfo/dunlug
DunLUG Wiki - http://dunlug.kallisti.net.nz/