teolan

And? As long as everyone was consenting why should we give a fuck?

Maybe I'm just too french.

Israel killing civilians does not excuse Hama's killing civilians.

You still heat your house, maybe even cool it down. You still work, probably for some organisation that pollutes a lot.

And you said it yourself. Consuming less at an individual level doesn't do shit. Activism does. They're the ones forcing climate change to be on the agenda.

I'm suggesting building a Rust library and exposing a C ABI. That's what rsvg does for example.

You're aware that Rust gives you access to the full C ABI?

What language are you going to use instead that has a better ABI story? Swift? Or maybe a dynamic language like Python?

I didn't say that there was any network plaintext transfer. I said the server needs to have access to the plaintext at some point.

it doesn't happen according to them

That's not actually what they say, because it would be the cryptographic equivalent of claiming they invented a new color.

They talk about encryption at rest without mentioning the rest of their infrastructure to confuse the hell out of people that don't understand encryption. Given your comments it seems to work.

Either way the point of telegram is not in privacy for everyone. You trade protection for convenience (cloud data and great clients)

That's not what their marketing says.

Seeing their user base, it suits most people.

Most people have zero idea what kind of security telegram provides.

In their explanation it was specifically stated that it should be either impossible or too difficult. Keeping keys and content separately, that's what it's about

They're lying? Encryption at rest does not protect at all against the server snooping around. When you send or receive a message, the server has to see it in plaintext unless you have E2EE. So there is a way for them to access the plaintext of any message you receive, and it happens automatically billions of times per day. It's pretty easy.

He says he has had permission. Given that it's a mostly 1 person project it's possibly true.

Telegram's "encryption" does not protect in any way against dump/search server side (outside of secrets chats).

Telegram's "encryption" only protects from your ISP spying, and it's the kind of encryption that everyone implements. Any website that does not implement such encryption would show a big red "Not secure" warning in your browser.

Like sudo that has had zero days lurking for 10 years?

I'm not advocating for reimplementing stuff for no good reason though.

And there are apps that make it very very easy and fun. Check out street complete.