Telegram is indistinguishable from an FSB honeypot
Telegram is indistinguishable from an FSB honeypot
Many people who focus on information security, including myself, have long considered Telegram suspicious and untrustworthy. Now, based on findings published by the investigative journalism outlet IStSongs on the Security of Networks
like this
gigarivista scottiaca con segretissimo numero, trovato così nel vedere colì
A distanza di 2 anni (…io pensavo 1), chi si ricorda Scottecs Gigazine? Probabilmente nessuno, neppure io onestamente. Però, l’altro giorno mi è tornato in mente che esiste, giusto per caricare su TomoStash una manciata di volumi molto vecchi che ho trovato sull’agrodolce Archivio di Anna… e ok. Però poi ieri ho aperto il sito […]
Experimental Piefed support is now available for Voyager
I'm excited to announce that Voyager now has experimental support for logging in with Piefed! You can try it out today on:
This will roll out to the official app stores and vger.app soon(tm), once I’m confident there are no major regressions. If you prefer not to switch to beta builds, just hang tight.
Please note that Piefed support is EXPERIMENTAL! There are still many things that don't work quite right, which I'm hoping to improve over the coming weeks.
The basics including scrolling home/all/local, viewing posts, blocking, commenting and voting should work well. However there are some known issues:
- Can't sign up for a Piefed account in-app, only log in with an existing one
- Subscribed communities list is empty (should be fixed soon!)
- Inbox tab doesn't load
- Comment search doesn't work
- Profile upvoted/downvoted doesn't load
- No moderation tools
- Mark as read doesn't persist
- Creating/editing posts is currently untested
- ...probably a bunch of other stuff too, please let me know below!
Behind the scenes, this interoperability is made possible thanks to aeharding/threadiverse, a new library I am working on to normalize various threadiverse-software APIs. It's open source so any project use it, but it's under heavy development right now. What's cool about this is in the future, adding support for mbin, or whatever else is possible!
Again, feel free to try it out and let me know if there are any more issues to be documented and fixed.
Yesterday I merged in a PR that lets the instance admin set the sizes for thumbnails.
But the real issue is that the thumbnails have a variety of uses - in the PieFed web UI thumbnails are shown quite small so 170px is fine. But some mobile apps might show the thumbnail in a manner that spans the whole screen which is going to need to be at least 350px wide.
I'll make PieFed generate a 500px version of the thumbnail and include that in the API response (as well as the smaller one).
US State Dept. spokesperson says US is the greatest country on Earth... next to Israel.
It truly is impressive how thoroughly Israel has dominated US politics. Like, Russia may have had a huge victory by getting Trump elected, but they don't have shit on Israel. Hell, something like 60% of our elected representatives have received donations from AIPAC, and that's just the stuff that's been reported!
Source: youtube.com/live/ogqYsmfDY0E
- YouTube
Profitez des vidéos et de la musique que vous aimez, mettez en ligne des contenus originaux, et partagez-les avec vos amis, vos proches et le monde entier.www.youtube.com
adhocfungus likes this.
Reminder: Proton Mail addresses have vendor lock-in
Both auto-forwarding and auto-reply are paid features, which makes cancelling & switching much more difficult. Gmail is a breeze comparatively. I highly recommend against using their addresses (e.g. protonmail.com
, proton.me
, pm.me
)
Email forwarding is available for everyone with a paid Proton Mail plan.
(source)
How to use email forwarding | Proton
With email forwarding, you can automatically forward emails sent to your Proton Mail account to any email address.Proton
like this
This 88-Year-Old Reporter Predicted How US Would Attack Iran And It has Happened Exactly
Seymour Hersh. Nearly 88, running his Substack, and still outpacing governments, intelligence leaks, and every newsroom, Hersh once again proved why he’s a legend in investigative journalism.
On June 19, he published a detailed exposé revealing that U.S. B-2 bombers and naval forces were preparing a “coordinated assault” on Iran’s key underground nuclear sites at Fordow, Natanz, and Isfahan. He cited unnamed intelligence sources warning the attack was imminent and happening with almost no oversight from Congress or NATO allies.
Many brushed it off. Some called it far-fetched. On Sunday, when President Donald Trump confirmed the strikes and declared the targets “obliterated,” Hersh had already been proven right, two days ahead of the world.
This isn’t Hersh’s first time uncovering what others missed. His 2023 scoop on the Nord Stream pipeline sabotage, which he linked to U.S. operations, followed a similar path: ignored at first, later echoed by leaked investigations. The Iran bombing story played out just the same: initial silence, disbelief, then confirmation.
But Hersh’s reporting also points to a bigger shift. More than 60% of Americans now get their breaking news from social media, newsletters, and independent platforms. The reason? Speed, raw reporting, and growing distrust in traditional journalism. Hersh calls it like he sees it, often accusing mainstream reporters of being too close to power to ask real questions.
This 88-Year-Old Reporter Predicted How US Would Attack Iran And It has Happened Exactly
Hersh exposed US B-2 bombers and naval forces preparing a coordinated attack on Iran's nuclear sites, citing unnamed intelligence sources, with no oversight from Congress or NATO allies.Shruti Sneha (Republic World)
Share a script/alias you use a lot
# Download clipboard to tmp with yt-dlp
tmpv() {
cd /tmp/ && yt-dlp "$(wl-paste)"
}
like this
\#Create predefined session with multiple tabs/panes (rss, bluetooth, docker...)
tmux-start
\#Create predefined tmux session with ncmpcpp and ueberzug cover
music
\#Comfort
ls = "ls --color=auto"
please = "sudo !!"
\#Quick weather check
weatherH='curl -s "wttr.in/HomeCity?2QF"'
\#Download Youtube playlist videos in separate directory indexed by video order in playlist -> lectures, etc
ytPlaylist='yt-dlp -o "%(playlist)s/%(playlist_index)s - %(title)s.%(ext)s"'
\#Download whole album -> podcasts primarily
ytAlbum='yt-dlp -x --audio-format mp3 --split-chapters --embed-thumbnail -o "chapter:%(section_title)s.%(ext)s"'
# download video -> extract audio -> show notification
ytm()
{
tsp yt-dlp -x --audio-format mp3 --no-playlist -P "~/Music/downloaded" $1 \
--exec "dunstify -i folder-download -t 3000 -r 2598 -u normal %(filepath)q"
}
# Provide list of optional packages which can be manually selected
pacmanOpts()
{
typeset -a os
for o in `expac -S '%o\n' $1`
do
read -p "Install ${o}? " r
[[ ${r,,} =~ ^y(|e|es)$ ]] && os+=( $o )
done
sudo pacman -S $1 ${os[@]}
}
# fkill - kill process
fkill() {
pid=$(ps -ef | sed 1d | fzf -m --ansi --color fg:-1,bg:-1,hl:46,fg+:40,bg+:233,hl+:46 --color prompt:166,border:46 --height 40% --border=sharp --prompt="➤ " --pointer="➤ " --marker="➤ " | awk '{print $2}')
if [ "x$pid" != "x" ]
then
kill -${1:-9} $pid
fi
}
alias realwd='cd -P .'
Here is an example :
$ echo $PWD
/home/me
$ cd Videos/Torrents/
$ echo $PWD
/home/me/Videos/Torrents
$ realwd
$ echo $PWD
/home/me/data/Torrents/Video
I also do some X application, compositor and WM development, and I have a few aliases to simplify tasks like copying from an Xorg session to an Xnest (and the other way around), or reload the
xrandr
command from my .xinitrc
without duplicating it.alias screenconf='$(grep -o "xrandr[^&]*" ~/.xinitrc)'
alias clip2xnext='xclip -selection clip -o -display :0 | xclip -selection clip -i -display :1'
alias clip2xorg='xclip -selection clip -o -display :1 | xclip -selection clip -i -display :0'
I have an alias for using MPV+yt-dlp with my firefox cookies :
alias yt="mpv --ytdl-raw-options='cookies-from-browser=firefox'"
I can't stand too long lines of text on my monitor, particularly when reading manpages, so I set the MANWIDTH env variable.
# Note : if you know that *sometimes* your terminal will be smaller than 80 characters
# refer to that https://wiki.archlinux.org/title/Man_page
export MANWIDTH=80
I use null-pointers a lot, with a shorthand.
# Note: env.sh actually provide other helpful aliases on their homepage
function envs.sh() {
if [ $# != 1 ]; then
1>&2 printf "Error, need one argument.\n"
return 1
fi
curl -F'file=@'"$1" https://envs.sh
}
The usual fake editor in my path, so that browsers and other applications open Vim the correct way.
\#!/bin/sh
# st_vim.sh - executable in my ~/.local/bin
# for example in firefox's about:config :
# - view_source.editor.path : set to the value of $(which st_vim.sh)
# - view_source.editor.external : set to true
st -- $EDITOR "$*"
My
.xinitrc
is quite classical, I still have this in it (setup for dwm's title bar, people usually install much complicated programs) :while true; do xsetroot -name "$(date +"%d %H:%M")"; sleep 60; done &
I also have a lot of stupid scripts for server and desktop maintenance, disks cleaning etc... those are handy but are also very site-specific, let me know if your interested.
Charlie Musselwhite - Look Out Highway (2025)
Charlie Musselwhite - Look Out Highway (2025)
di Matteo Bossi Qualche anno fa, durante una lunga intervista apparsa sul n. 159 de Il Blues, per parlare del suo bellissimo “Mississippi S...Silvano Bottaro (Blogger)
Tinariwen - Tassili (2011)
Dopo l’ennesimo ascolto di Emmaar, il parallelo con Tassili, ultimo lavoro uscito nel 2011, è inevitabile. Il gruppo maliano che ha fatto, e continua a far conoscere la cultura tuareg in giro per il mondo, con questo disco, non si discosta di molto dal suo predecessore...
Leggi e ascolta...
Many times throughout my life, what would seem like a reasonably easy question to answer has changed dramatically.
30 years ago you could look at data collection and go there's no way that they could store a meaningful amount of data about everyone.
20 years ago you could look at data collection and go there's no way they could have the contents of every phone call It's just targeted it's not a big deal
We are the point now, where everything you ever wrote or said could be thrown into a model with such unimaginable levels of lossy compression that they could simply ask it if you are the kind of person who is into whatever the future administration deems as unacceptable and deny you access to things. All you need is a fascist regime or a dictatorship installed and all of a sudden anything you ever did can be used as grounds to lock you up.
On a governmental budget it wouldn't even be that expensive and we're just at the beginning of this.
We have seen that governments can change quickly, We know the data collection is affordable and can be permanent.
Certainly some people privacy-minded to the point of compulsion. But I can't say that anyone is wrong to seek extreme levels of privacy based on trends and capabilities.
They leave your cell phone at home and make sure somebody opens your apps and uses them people aren't anywhere near as crazy as they used to sound
As Dem Establishment Backs Cuomo, Calls Grow for NYC Mayor Race to Be 'Referendum' on Party's Direction
As Dem Establishment Backs Cuomo, Calls Grow for NYC Mayor Race to Be 'Referendum' on Party's Direction
"Cuomo winning will not only legitimize the Islamophobia that has dominated this race... but would also prove that you really can just waltz in and buy an election," said one observer.julia-conley (Common Dreams)
adhocfungus likes this.
La Finlandia accende la prima batteria di sabbia più grande al mondo
La Finlandia accende la prima batteria di sabbia più grande al mondo
In Finlandia è attiva la più grande batteria di sabbia al mondo: 1.000 MWh di energia termica stoccati per settimane.Ilaria Rosella Pagliaro (GreenMe.it)
Jeff Bezos: questo matrimonio a Venezia non s’ha da fare….
like this
Is there a Linux version that is similar to Freedom app?
Freedom: Internet, App and Website Blocker
Easily block distracting websites and apps on any device. The original and best website blocker, Freedom helps you be more focused and productive.Freedom
With apparmor, you could enable and disable profiles that could restrict access to files and paths by name.
For network traffic, it's possible to use dnsmasq to blacklist or whitelist some domains.
Iranian-Aligned Hackers Attack Trump's Truth Social: Report
Iranian-Aligned Hackers Claim Responsibility for Attack on Trump’s Truth Social Platform
A group of Iranian-aligned hackers has reportedly attacked something President Donald Trump holds dear — his Truth Social platform.Joe DePaolo (Mediaite)
Rozaŭtuno likes this.
AI search finds publishers starved of referral traffic
The AIpocalypse is here for web sites as search referrals plunge
: Turn out the lights, the internet is overThomas Claburn (The Register)
Meta pauses mobile port tracking tech on Android after researchers cry foul
Meta pauses mobile port tracking tech on Android after researchers cry foul
: Zuckercorp and Yandex used localhost loophole to tie browser data to app users, say boffinsThomas Claburn (The Register)
Fact check: Viral drone video of Gaza destruction is real
Fact check: Viral drone video of Gaza destruction is real
A viral video is circulating showing the destruction caused by Israeli strikes in Gaza. DW has verified the footage of mass destruction at the Jabaliya refugee camp.Kathrin Wesolowski (Deutsche Welle)
Dal 27 al 30 giugno musica e gastronomia nella Sagra del Salame di Turgia a Devesi Di Ciriè (To)
La frazione Devesi di Ciriè si prepara a ospitare l’ottava edizione della Sagra del Salame di Turgia, evento che celebra uno dei prodotti più tipici del Ciriacese e delle Valli di Lanzo: il “Salam ëd Turgia” in piemontese, o “Salàm eud Tueurdji” in francoprovenzale. Si tratta di un salume preparato con carne di vacca, lardo e pancetta suina, aromatizzato con sale, pepe, aglio, vino rosso e spezie, poi insaccato nel budello torto di bovino. “Turgia” in piemontese indica una vacca sterile, ma può riferirsi anche a un esemplare giovane.
Organizzata dalla Pro Loco Dveisin Festareul e patrocinata dalla Città metropolitana di Torino, la manifestazione si terrà da venerdì 27 a lunedì 30 giugno in località Colombari, in occasione della festa patronale di San Pietro Apostolo. Una quattro giorni dedicata al gusto e alla tradizione, dove sarà possibile assaporare il Salame di Turgia in un clima di convivialità, accompagnato da altre specialità locali. La preparazione del salame affonda le radici nella cultura contadina e nelle famiglie che ne tramandano i segreti, rendendolo simbolo di identità e amore per il territorio.
Il programma prevede musica dal vivo, spettacoli e animazioni. Si parte venerdì 27 con l’inaugurazione affidata a Sonia De Castelli, cantante e volto noto della TV. Sabato 28 spazio alla discoteca mobile Energia. Domenica 29 salirà sul palco Luca Giordano, mentre lunedì 30 chiusura con l’orchestra Enrico Negro. Durante la sagra ci saranno anche momenti divertenti, come il Chupito San Peru e la gara di tiro alla fune domenicale.
Dal 27 al 30 giugno musica e gastronomia nella Sagra del Salame di Turgia a Devesi Di Ciriè (To) - ViaggieMiraggi
La frazione Devesi di Ciriè si prepara a ospitare l’ottava edizione della Sagra del Salame di Turgia, un evento che celebra uno dei prodotti più iconici della tradizione gastronomica del Ciriacese e delle Valli di Lanzo, detto anche Salam ëd...Redazione (ViaggieMiraggi)
Cina e l'inconfutabile dualismo nei ricami: da un lato scimmie, dall'altra cani - Il blog di Jacopo Ranieri
Cina e l'inconfutabile dualismo nei ricami: da un lato scimmie, dall'altra cani - Il blog di Jacopo Ranieri
Per anni quel ritratto mi ha fissato dall’angolo ombreggiato del salone, di un inquisitivo terrier a pelo lungo con gli occhi cerchiati di nero.Jacopo (Il blog di Jacopo Ranieri)
Mahmoud Khalil Discusses 3-Month Detention in First Interview Since Release
By Jonah E. Bromwich
June 22, 2025 Updated 8:10 p.m. ETThe administration argued that he had contributed to the spread of antisemitism through his role in the protests at the university.
But Mr. Khalil, a Palestinian born in a Syrian refugee camp, rejected the idea that protesting against Israel is inherently antisemitic.
“I was not doing anything antisemitic,” he said. “I was literally advocating for the right of my people. I was literally advocating for an end of a genocide. I was advocating that the tuition fees that I and other students pay don’t go toward investing in weapons manufacturers. What’s antisemitic about this?”
https://www.nytimes.com/2025/06/22/nyregion/mahmoud-khalil-interview-trump.html
like this
No Internet For 4 Hours And Now This
Well, I'm back online after a 4 hour blackout due to the heat in Brooklyn.
I found out that my ISP Optimum had issues with their equipment in Brooklyn due to the heat and humidity set on by this week's weather.
Now I'm worried that things will be really harsh on my equipment in the living room.
Any suggestions on how to keep the modem/router from overheating and causing problems?
Sorella di Perfezione - le poesie di Giuseppe Iannozzi - in libreria e negli Store online - LFA Publisher
Sorella di Perfezione - le poesie di Giuseppe Iannozzi - in libreria e negli Store online - LFA Publisher
**youtube.com/shorts/hk8RXKTvNTw…
Ulteriori informazioni su "Sorella di Perfezione"
**iannozzigiuseppe.wordpress.com…
“Sorella di Perfezione” di Giuseppe Iannozzi – booktrailer – LFA Publisher
Sorella di Perfezione offre al lettore poesie che trattano molteplici temi: amore, amicizia, erotismo, vita, morte, tristezza, solitudine, paranoia, ossessione, spiritualità. L’autore Giuseppe Iann…Iannozzi Giuseppe - scrittore e giornalista
Israel slams EU over ‘outrageous and indecent’ Gaza human rights review
Israel slams EU over ‘outrageous and indecent’ Gaza human rights review
An internal EU review of the trade agreement with Israel says there are "indications of a breach" of the humanAlexandra Brzozowski (EURACTIV)
Met chief 'shocked' by planned Palestine Action protest
Met Police chief 'shocked' by planned Palestine Action protest in London
The force says it cannot legally stop Monday's protest in support of the pro-Palestine group.Jacqueline Howard (BBC News)
Israeli Forces Slaughter 48 More Palestinians in Gaza Over 24 Hours
Israeli Forces Slaughter 48 More Palestinians in Gaza Over 24 Hours - News From Antiwar.com
Gaza's Health Ministry said on Sunday that Israeli attacks killed at least 48 Palestinians and wounded 104 over the previous 24 hours as the US-backed genocidal war continues, with much of the world's attention focused on the US attacks on Iran.News From Antiwar.com
Republican representative’s ectopic pregnancy clashes with Florida abortion law
Republican representative’s ectopic pregnancy clashes with Florida abortion law
Kat Cammack blames left’s fearmongering after medical staff hesitated to give her drugs needed to end pregnancyEdward Helmore (The Guardian)
Elon Musk wants to rewrite "the entire corpus of human knowledge" with Grok
We will use Grok 3.5 (maybe we should call it 4), which has advanced reasoning, to rewrite the entire corpus of human knowledge, adding missing information and deleting errors.Then retrain on that.
Far too much garbage in any foundation model trained on uncorrected data.
::: spoiler More Context
Source.
:::
Elon Musk (@elonmusk)
Please reply to this post with divisive facts for @Grok training. By this I mean things that are politically incorrect, but nonetheless factually true.Nitter
like this
Elon Musk wants to rewrite "the entire corpus of human knowledge" with Grok
We will use Grok 3.5 (maybe we should call it 4), which has advanced reasoning, to rewrite the entire corpus of human knowledge, adding missing information and deleting errors.Then retrain on that.
Far too much garbage in any foundation model trained on uncorrected data.
::: spoiler More Context
Source.
:::
adhocfungus likes this.
'We don't want to outsource what makes us human' as AI starts replacing workers
ABC News
ABC News provides the latest news and headlines in Australia and around the world.Rhiana Whitson (Australian Broadcasting Corporation)
'We don't want to outsource what makes us human' as AI starts replacing workers
ABC News
ABC News provides the latest news and headlines in Australia and around the world.Rhiana Whitson (Australian Broadcasting Corporation)
Fatphobia Is Fueled by AI-Created Images, Study Finds
Fatphobia Is Fueled by AI-Created Images, Study Finds
A Fordham student's research found that negative words were more likely to produce images of overweight people in image generation programs.Chris Gosier (Fordham Now)
New Orleans debates real-time facial recognition legislation
New Orleans has emerged as a flashpoint in debates over real-time facial recognition technology. The city’s leaders are weighing a landmark ordinance that, if passed, would make New Orleans the first U.S. city to formally legalize continuous facial surveillance by police officers.The move follows revelations that, for two years, the New Orleans Police Department (NOPD) quietly used automated alerts from a privately operated camera network known as Project NOLA that bypassed the strictures of the city’s 2022 ordinance which explicitly banned such practices. Project NOLA is a non-profit surveillance network founded by ex-police detective Bryan Lagarde.
Despite this, Project NOLA’s network was set to continuously and automatically scan public spaces. Every face that passed within view was compared in real time, and officers were pinged via an app whenever a watchlist match occurred, leaving no requirement for supervisory oversight, independent verification, or adherence to reporting standards.
Opponents argue that automated surveillance everywhere in public spaces raises profound threats to privacy, civil rights, and due process. The American Civil Liberties Union (ACLU) of Louisiana described the system as a “facial recognition technology nightmare” that enables the government to “track us as we go about our daily lives.”
The wrongful arrest of Randal Reid based on misidentification from still-image facial recognition is touted as highlighting the real-world dangers of facial recognition. Reid is a 29‑year‑old Black logistics analyst from Georgia who was wrongfully arrested in late 2022 and held for six days due to a false facial recognition match.
The ACLU has urged the City Council to reimpose a moratorium and demand an independent audit covering privacy compliance, algorithmic bias, evidence admissibility, record retention, and public awareness. The organization said that NOPD currently lacks any system for logging or disclosing facial-recognition-derived evidence, and Project NOLA operates outside official oversight entirely.
A vote by the City Council is expected later this month. If passed, NOPD and any authorized third party will be legally empowered to scan live public feeds using facial recognition, provided reports are submitted according to the new law.
Meanwhile, NOPD is awaiting the outcome of its internal audit and Kirkpatrick has stated that policy revisions will be guided by the council’s decisions. Meanwhile, the ACLU and partners are preparing to escalate their opposition, pushing for either outright prohibition or deeply strengthened accountability measures.
The decision facing New Orleans encapsulates the broader tension between embracing AI-based public safety tools and protecting civil liberties. Proponents emphasize the edge that real-time intelligence can provide in stopping violent crime and responding to emergencies, while critics warn that indiscriminate surveillance erodes privacy, civil rights, and due-process safeguards.
A few things I feel are very important that none of the recent June articles about this mention:
- The city has managed to keep this all relatively under wraps. Few people are even aware of this, and even if they are they are not aware of the level of surveillance.
- This seems to be being kept in the dark even by people that we should be able to trust. I only found out about the City Council vote this month bc I make a habit of searching for updates about this every so often. I cannot find any information about when the vote is actually scheduled, just sometimes at the end of June. This is the last week of June so presumably this week?
- State Police and ICE can't be regulated by city government. There is a permanent state police force in New Orleans that was established as of last year by Governor Landry.
I believe they have continued using this technology however they please, and there is no real way for the city to regulate how they use it, and who they share it with.
New Orleans debates real-time facial recognition legislation
The landmark ordinance, if passed, would make New Orleans the first U.S. city to formally legalize continuous facial surveillance by police officers.Anthony Kimery (BiometricUpdate.com)
adhocfungus likes this.
Quando l’Italia si fece rispettare dagli Stati Uniti… con un incrociatore! da Difesa Online
Quando l’Italia si fece rispettare dagli Stati Uniti… con un incrociatore!
Nel marzo del 1891, a New Orleans, si consumò una delle pagine più oscure nella storia degli Stati Uniti: undici immigrati italiani furono linciati da una folla inferocita che fece irruzione nella prigione locale dopo che la giustizia aveva assolto o…Difesa Online
AnotherUsername
in reply to Andromxda 🇺🇦🇵🇸🇹🇼 • • •Andromxda 🇺🇦🇵🇸🇹🇼
in reply to AnotherUsername • • •rysiek
in reply to Andromxda 🇺🇦🇵🇸🇹🇼 • • •altkey (he\him)
in reply to rysiek • • •AMA is AMA
It's not the first time I see your discovery shared and I want to thank you. It won't completely disencourage people around me from using it but it'd pile up with other many reasons to do so. Someday there would be just enough of them, like it happened with VK, Facebook etc, I believe.
rysiek
in reply to altkey (he\him) • • •What have I done.
I do information security work, and I used to work closely with investigative journalists hailing from Russia, Kazachstan, Ukraine, and other places in that general area. Telegram is massively popular there. Because of this Telegram has been on my radar for a very long time as a serious security threat – not just because its protocol and management are suspect, there are plenty of other IMs like that, but also because of how many people I worked with had used it.
I've written about Telegram before, on amore general level (linked in the blog post), so when IStories reached out to me for comment on this it was a good inspiration to dive deeper.
I would not use it. I refuse to accept that abandoning it is not an option. There are plenty of options. It's always a decision one can make.
Please remember that even if hypothetically you could use it in a way that protects you from the spying – something I am very, very doubtful of! – the mere fact you are using it sucks other people into using it. You personally become one more reason for someone to start using or keep using Telegram. You personally become one more "user" of Telegram, justifying another media organization or NGO to set up or maintain a presence there – which in turn pulls in even more users into the dragnet.
In other words, your decision to use Telegram anyway, even though you know what the issues are, becomes one of the many things that make other people feel that "abandoning is not an option". I refuse to be a part of that. The only thing I can recommend is to stop using it.
I think this hits the nail on the head: If the FSB conection is that deep, there is no end to what they’d want to mine from users.
I don't want to speculate. The possibilities are vast. But I will say what I said in the blogpost: Telegram is indistinguishable from an FSB honeypot.
I don't trust Telegram the company, I don't trust Telegram the software, I don't trust MTProto. I certainly do not trust Pavel Durov. I don't think we need to speculate on what more could possibly be hiding there, what is already known about Telegram should really be enough to stop using it.
thatonecoder
in reply to rysiek • • •rysiek
in reply to thatonecoder • • •Cheradenine
in reply to Andromxda 🇺🇦🇵🇸🇹🇼 • • •lazynooblet
in reply to Andromxda 🇺🇦🇵🇸🇹🇼 • • •The entire article seems like an attack. The author finds a unique identifier and adds "Russia bad" throughout.
States the information is in cleartext but then explains how everything is encrypted (in transit).
What will the author do if they intercepted any single online stores transfer of credit card details. Also encrypted in transit but Is that also deemed as cleartext? Or is that okay?
I don't think much new is learnt here. WhatsApp also sends metadata in "cleartext" (not really, as it's encrypted in transit, but this article called that "cleartext").
T (they/she)
in reply to lazynooblet • • •I don't know... I think the author put a lot of effort on document things and presenting evidence.
Your post history and mod logs are also quite weird.
lazynooblet
in reply to T (they/she) • • •Lol what does that mean
Rose
in reply to lazynooblet • • •ses hat
in reply to Andromxda 🇺🇦🇵🇸🇹🇼 • • •XXIC3CXSTL3Z
in reply to ses hat • • •fr it's literally
But I can't lie the analysis is still quite in-depth and feels like an effortpost
dewittlebook
in reply to ses hat • • •I can't say I read the whole thing because the technical analysis went over my head, but I don't think we read the same conclusion
Based on the analysis of packet captures above, I believe it is clear that anyone who has sufficient visibility into Telegram’s traffic would be able to identify and track traffic of specific user devices. Including when perfect forward secrecy protocol feature is in use.
This would also allow, through some additional analysis based on timing and packet sizes, to potentially identify who is communicating with whom using Telegram.
Telegram is indistinguishable from an FSB honeypot
Songs on the Security of Networksrysiek
in reply to ses hat • • •Hi, author here. First of all, in that piece I don't happen to recommend using any specific piece of software. I mention Signal and WhatsApp for comparison, as tools that are considered similar, and yet avoid making the same weird protocol choices.
Secondly, if you have any proof that any specific communication tool is used to "spy" on people, I am sure I am not the only person who would love to hear about it. That's the only way we can keep each other safe online. Surely you wouldn't be making unsubstantiated claims and just imply stuff like that without any proof, would you?
And finally, I've spent a good chunk of time and expertise on analyzing Telegram's protocol before I made my claims. I provided receipts. I provided code. I explained in detail my testing set-up. You can yourself go and verify my results.
Instead, you claim it's "propaganda", while mischaracterizing what I say in that post. Classy!
socsa
in reply to Andromxda 🇺🇦🇵🇸🇹🇼 • • •Sims
in reply to Andromxda 🇺🇦🇵🇸🇹🇼 • • •