zlacker

Absolutely agree. I really wish Telegram would get off the phone number system, especially after the embarrassing hack in Brazil. It's not explicitly Telegram's fault, but if your primary authentication method is insecure it's at least a little bit your fault.

Phone numbers are NOT safe. I don't know why SMS MFA is even a thing, they're worse than passwords.

When you use phone numbers or SMS for security, you are putting the fate of your entire company's security on an underpaid customer service rep at Verizon.

>>0xy+(OP)
Telegram should maybe just use proper encryption first.

>>nickik+i4
And by default.

>>nickik+i4
Can someone explain to me why MtProto is not considered proper encryption? Genuinely asking, not challenging.

At least since version 2.0 it seems it's using AES encryption: https://core.telegram.org/mtproto/description

>>0xy+(OP)
> especially after the embarrassing hack in Brazil

What happened?

>>xerxes+hg
By default its not e2e encrypted and if you want to use e2e you lose lots of capability. That is simply not acceptable in a modern messenger.

>>nickik+8o2
Speaking as someone who regularly uses private chats, what capability?

>>matheu+zU
Numerous Brazilian judges and politicians had their Telegrams hacked via SIM hijacking.

>>0xy+bX2
Secret chats are tied to one single device, which may be ok for some people. The bigger disadvantage is that you cannot have group chats that are end to end encrypted. Only person to person chats are allowed as secret chats.

>>0xy+bX2
- Group Chat

- Multi Device

Seems to me that are some of the most useful things about modern chat.

Also, why not just use a chat app that is save by default. The whole concept of private chat is insane to me.