this post was submitted on 17 Sep 2024
83 points (89.5% liked)

Privacy

32111 readers
642 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

cross-posted from: https://lemmy.ml/post/20406932

you are viewing a single comment's thread
view the rest of the comments
[–] Quail4789@lemmy.ml 66 points 2 months ago (4 children)

Am I too harsh in believing that if you claim to have E2EE but I can't verify a) your source code b) my client was built from that source code (i.e. reproducible builds) then you don't have E2EE? The whole point of encrypting my traffic on the client is I don't trust you. Why would I believe you aren't sending the encryption keys off to your server if I didn't trust you before?

[–] Chais@sh.itjust.works 9 points 2 months ago (1 children)

Am I too harsh […]?

No. If there's no way to verify anything then all we have to go on is their word.
The word of a company generally isn't worth a whole lot. Same with Telegram.

[–] jeffhykin@lemm.ee 3 points 2 months ago (1 children)

The clients are source available for telegram though

[–] Quail4789@lemmy.ml 6 points 2 months ago

Which is how we know their self-rolled encryption is shit.

There's a reason why Telegram CEO can be arrested when Signal's can't. Because Telegram has information they can give but refuse to whereas Signal give everything they've got, which is basically nothing.

[–] jeffhykin@lemm.ee 9 points 2 months ago* (last edited 2 months ago) (1 children)

I mean technically the client is verifiable if you use discord in a browser tab... and verify it every time you load the web page... 🙃

[–] autonomoususer@lemmy.world 3 points 2 months ago* (last edited 2 months ago)

every time you load the web page...

You said it better than me. 🤣🤣

[–] ReversalHatchery@beehaw.org 7 points 2 months ago

you aren't. to me this is just PR

[–] warmaster@lemmy.world 1 points 2 months ago

They just mean you now really have to pay to get private data. 🤣