Post #2836347

2025-06-10 22:47 UTC

> and its encryption has never been hacked Ignoring dumb use of the h-word (🙄), Telegram encryption – specifically, the v1 of their homegrown MTProto protocol – had been shown to contain "a most backdoor-looking bug" some people have ever seen: https://words.filippo.io/dispatches/telegram-ecdh/ This has since been fixed, and MTProto 2 has been rolled out. But it still smells funny to a lot of cryptographers. More importantly though: the story is not about breaking Telegram's encryption Another red herring! 🧵

Replies (3)

@rysiek@mstdn.social 2025-06-10 22:51

And finally, here are some questions that are ✨actually relevant✨ to the story, but have not at all been answered (or even touched upon) by Telegram's statement: 👉 Does GNM have access to the networking equipment handling Telegram's traffic? 👉 Does all Telegram traffic flow through GNM's infrastructure? 👉 Does GNM have links to FSB as described in the piece? 👉 Does Telegram protocol require cleartext device identifiers visible on the wire? 🧵/end

Open ##2836348
@gim@lou.lt 2025-06-11 06:10

@rysiek@mstdn.social Even if there's no backdoor, I can bet my money, they are likely sending some kind of master key to their servers...

Open ##2836394
@wallabra@bark.lgbt 2025-06-11 17:28

@rysiek@mstdn.social It's so funny that they say this, because Telegram was so exploitable, literally just having someone else's phone number was all you needed to leak their messages. This became front and central e.g. in leaking secret documents regarding corruption in Brazil: https://en.wikipedia.org/wiki/Vaza_Jato

Open ##2836395