this post was submitted on 17 Sep 2024
80 points (90.0% liked)

Privacy

31255 readers
665 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 4 years ago
MODERATORS
 

cross-posted from: https://lemmy.ml/post/20406932

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 59 points 1 day ago (3 children)

Am I too harsh in believing that if you claim to have E2EE but I can't verify a) your source code b) my client was built from that source code (i.e. reproducible builds) then you don't have E2EE? The whole point of encrypting my traffic on the client is I don't trust you. Why would I believe you aren't sending the encryption keys off to your server if I didn't trust you before?

[–] [email protected] 10 points 1 day ago* (last edited 1 day ago) (1 children)

I mean technically the client is verifiable if you use discord in a browser tab... and verify it every time you load the web page... 🙃

[–] [email protected] 3 points 1 day ago* (last edited 1 day ago)

every time you load the web page...

You said it better than me. 🤣🤣

[–] Chais 9 points 1 day ago (1 children)

Am I too harsh […]?

No. If there's no way to verify anything then all we have to go on is their word.
The word of a company generally isn't worth a whole lot. Same with Telegram.

[–] [email protected] 3 points 1 day ago (1 children)

The clients are source available for telegram though

[–] [email protected] 5 points 1 day ago

Which is how we know their self-rolled encryption is shit.

There's a reason why Telegram CEO can be arrested when Signal's can't. Because Telegram has information they can give but refuse to whereas Signal give everything they've got, which is basically nothing.

[–] [email protected] 1 points 1 day ago

They just mean you now really have to pay to get private data. 🤣