Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Telegram offers end-to-end encryption in the same way that McDonalds offers salads.


Via a touchscreen? :P


yes. in that if you want it it's there, but nobody's forcing it on you if you just want a burger.


Oh, I must have missed this. Please tell me how to enable secret chats for groups. And my desktop chats. Also I'd like to turn on the setting for defaulting to secret chats whenever I open a new one. Oh? I can't. Sounds like it's not there if I want it, after all. Good thing they didn't force it to me though /s


You can’t have secret chats for groups.

For desktop secret chats you may use Unigram client (although it’s hard for me to justify a potentially non-mobile secret chat).

The rest is trivial and isn’t that hard unless you contact hundreds of new people a day. In that case, I’d already thought of using ahk automation or a full-blown telethon bot.


Sounds like I should stick to Signal that got this right from the get-go.


apt install signal

Error: Unable to find the package signal


$ sudo apt install telegram

Reading package lists... Done

Building dependency tree... Done

Reading state information... Done

E: Unable to locate package telegram

Also

$ sudo apt install signal-desktop-beta

[sudo] password for :

Reading package lists... Done

Building dependency tree... Done

Reading state information... Done

signal-desktop-beta is already the newest version (7.22.0~beta.1).

0 upgraded, 0 newly installed, 0 to remove and 5 not upgraded.

So, yeah.


It's called telegram-desktop -_-'

> apt install signal-desktop-beta

Very nice. Too bad it doesn't exist. Making up package names doesn't magically bring them into existence.

So, yeah.


Beta version:

# 1. Install our official public software signing key wget -O- https://updates.signal.org/desktop/apt/keys.asc | gpg --dearmor > signal-desktop-keyring.gpg cat signal-desktop-keyring.gpg | sudo tee -a /usr/share/keyrings/signal-desktop-keyring.gpg > /dev/null

# 2. Add our repository to your list of repositories echo 'deb [arch=amd64 signed-by=/usr/share/keyrings/signal-desktop-keyring.gpg] https://updates.signal.org/desktop/apt xenial main' |\ sudo tee -a /etc/apt/sources.list.d/signal-xenial.list

# 3. Update your package database and install signal sudo apt update && sudo apt install signal-desktop-beta

https://support.signal.org/hc/en-us/articles/360007318471-Si...

Non-beta version:

# NOTE: These instructions only work for 64-bit Debian-based # Linux distributions such as Ubuntu, Mint etc.

# 1. Install our official public software signing key: wget -O- https://updates.signal.org/desktop/apt/keys.asc | gpg --dearmor > signal-desktop-keyring.gpg cat signal-desktop-keyring.gpg | sudo tee /usr/share/keyrings/signal-desktop-keyring.gpg > /dev/null

# 2. Add our repository to your list of repositories: echo 'deb [arch=amd64 signed-by=/usr/share/keyrings/signal-desktop-keyring.gpg] https://updates.signal.org/desktop/apt xenial main' |\ sudo tee /etc/apt/sources.list.d/signal-xenial.list

# 3. Update your package database and install Signal: sudo apt update && sudo apt install signal-desktop

https://signal.org/download/


Do you not see any difference with this and "it's included in the distribution and vetted by a distribution developer"?


No. The way I see it, I'm downloading an open-source, *always* end-to-end encrypted desktop-application Signal from official repository, instead of downloading an open-source *never* end-to-end encrypted desktop-application Telegram from official repository. Having to add the ppa is 10 seconds of additional trouble. I'll live. Without end-to-end encryption, a lot of dissidents however, might not.


10 seconds of additional trouble, a lifetime of root access to a 3rd party :)


What? You have factual evidence Signal's apt repo is installing rootkits to people's computers? Let's see it.


I have factual evidence once you add it they have root access.

I can't predict the future.


So, you have nothing. Best of luck.


I mean, if you want secret group chats, you should probably use Signal. I don't see how this is a "Telegram problem", or how this relates to the macdonalds analogy.

Telegram serves one set of goals, Signal serves another. E.g. I would not trust Signal to remember that recipe photo a friend posted from their old phone last year in my group chat, or for the wedding photos they shared in the 'wedding' group to survive when I want to make an album for their on their 10 year anniversary. But I would 100% trust Telegram for this. Specifically because I know Telegram is not an encrypted communications service but a social platform, and that group chats are stored unencrypted on a server. Which is literally what I want. Just because it also happens to separately offer encryption functionality for 1on1 chats doesn't mean it needs the whole security shebang (which necessarily has consequences on other functions that people already use and rely on).

It's like I said "macdonalds does indeed have salads" and you reply "Great I'll go to macdonalds and ask for soylent green OH WAIT THEY DON'T HAVE ANY, HUR HUR HUR". Well, no, it's true, they don't. If you want soylent green go somewhere else. Specifically don't go to macdonalds and have a tantrum.


Technically but not practically.


Expired from the day before, but with a fresh date sticker on it?


Overly chilled?


I love the comparison, stealing it.


In opposition to something French?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: