Telegram is indistinguishable from an FSB honeypot
Telegram is indistinguishable from an FSB honeypot
rys.io
Telegram is indistinguishable from an FSB honeypot
17 comments
-
No, not that very obvious thing that people have been saying for years! I simply refuse to believe it!
-
The entire article seems like an attack. The author finds a unique identifier and adds "Russia bad" throughout.
States the information is in cleartext but then explains how everything is encrypted (in transit).
What will the author do if they intercepted any single online stores transfer of credit card details. Also encrypted in transit but Is that also deemed as cleartext? Or is that okay?
I don't think much new is learnt here. WhatsApp also sends metadata in "cleartext" (not really, as it's encrypted in transit, but this article called that "cleartext").
-
I don't know... I think the author put a lot of effort on document things and presenting evidence.
Your post history and mod logs are also quite weird.
-
Your post history and mod logs are also quite weird.
Lol what does that mean
-
-
Russia bad btw.
-
-
Awesome analysis. Thank you!
-
I'm not the author. You can thank @rysiek@szmer.info for this amazing write-up
-
-
Just infantile Western propaganda/russophobia. reverse it for Western reality, and ignore the post..
-
-
Hahaha , so the conclusión is ? Use usa and israel software so they can spy us ? F... this crap propaganda.
-
Hi, author here. First of all, in that piece I don't happen to recommend using any specific piece of software. I mention Signal and WhatsApp for comparison, as tools that are considered similar, and yet avoid making the same weird protocol choices.
Secondly, if you have any proof that any specific communication tool is used to "spy" on people, I am sure I am not the only person who would love to hear about it. That's the only way we can keep each other safe online. Surely you wouldn't be making unsubstantiated claims and just imply stuff like that without any proof, would you?
And finally, I've spent a good chunk of time and expertise on analyzing Telegram's protocol before I made my claims. I provided receipts. I provided code. I explained in detail my testing set-up. You can yourself go and verify my results.
Instead, you claim it's "propaganda", while mischaracterizing what I say in that post. Classy!
-
I can't say I read the whole thing because the technical analysis went over my head, but I don't think we read the same conclusion
Conclusions
Based on the analysis of packet captures above, I believe it is clear that anyone who has sufficient visibility into Telegram’s traffic would be able to identify and track traffic of specific user devices. Including when perfect forward secrecy protocol feature is in use.
This would also allow, through some additional analysis based on timing and packet sizes, to potentially identify who is communicating with whom using Telegram.
-
fr it's literally
no russia bad but trust our feds instead because we are the good guys bsfr 💀💀💀
But I can't lie the analysis is still quite in-depth and feels like an effortpost
-
17 comments