Franz messaging app
-
@Dashrender said in Franz messaging app:
@scottalanmiller said in Franz messaging app:
@Dashrender said in Franz messaging app:
@scottalanmiller said in Franz messaging app:
You are confusing accessibility with security. No matter how much you can get it to "keep working" when your account hasn't been taken over, the risk to it being taken over is the same. The instant someone gets access to your number, they own your telegram and can revoke you any time they want... or just listen in on what you are saying.
No I'm not - if anyone is, it's you claiming that I am. I fully understand that there is no security, I'll scroll this thread is see if I actually said that Telegram is secure...
If that is true, why would you bring up that you can get it to "keep working" before it gets hijacked? What was the relevance to that statement?
to simply state that Telegram does not require a phone after the account is setup, that was all - nothing more, nothing less. I certainly did know when making that post that the phone number controller could do anything they want, because it was what gain one access to the account, but that doesn't mean it's still not functional.
It means it is not reliably functional. It might work for months, or for seconds. That's at the discretion of the phone.
-
@dafyre said in Franz messaging app:
Apparently now, you can set up a password for your Telegram account as well, so that no one will be able to add a new device to your account without the password as well as the PIN sent as a Telegram message.
(Settings -> Enable two step verification)At least they are moving in the right direction. But they are starting from a really stupid, flawed starting point.
-
Thanks, I didn't think I said it was secure.
-
@dafyre said in Franz messaging app:
Apparently now, you can set up a password for your Telegram account as well, so that no one will be able to add a new device to your account without the password as well as the PIN sent as a Telegram message.
(Settings -> Enable two step verification)Huh - well, as Scott said, until they remove the ability for the phone number alone to take over the account, it still doesn't have much if any real security.
-
Secure messaging score card from EFF
-
@Dashrender said in Franz messaging app:
@dafyre said in Franz messaging app:
Apparently now, you can set up a password for your Telegram account as well, so that no one will be able to add a new device to your account without the password as well as the PIN sent as a Telegram message.
(Settings -> Enable two step verification)Huh - well, as Scott said, until they remove the ability for the phone number alone to take over the account, it still doesn't have much if any real security.
With the Two-Step enabled, they cannot take over the account with just the phone number. They also have to have the Password that you set up to allow it.
-
@dafyre said in Franz messaging app:
@Dashrender said in Franz messaging app:
@dafyre said in Franz messaging app:
Apparently now, you can set up a password for your Telegram account as well, so that no one will be able to add a new device to your account without the password as well as the PIN sent as a Telegram message.
(Settings -> Enable two step verification)Huh - well, as Scott said, until they remove the ability for the phone number alone to take over the account, it still doesn't have much if any real security.
With the Two-Step enabled, they cannot take over the account with just the phone number. They also have to have the Password that you set up to allow it.
Interesting, so the account could be lost forever if you lose that password?
-
@Dashrender said in Franz messaging app:
@dafyre said in Franz messaging app:
@Dashrender said in Franz messaging app:
@dafyre said in Franz messaging app:
Apparently now, you can set up a password for your Telegram account as well, so that no one will be able to add a new device to your account without the password as well as the PIN sent as a Telegram message.
(Settings -> Enable two step verification)Huh - well, as Scott said, until they remove the ability for the phone number alone to take over the account, it still doesn't have much if any real security.
With the Two-Step enabled, they cannot take over the account with just the phone number. They also have to have the Password that you set up to allow it.
Interesting, so the account could be lost forever if you lose that password?
It links to an email address so you can go through recovery procedures. I'm testing it out now.
-
@Dashrender said in Franz messaging app:
@dafyre said in Franz messaging app:
@Dashrender said in Franz messaging app:
@dafyre said in Franz messaging app:
Apparently now, you can set up a password for your Telegram account as well, so that no one will be able to add a new device to your account without the password as well as the PIN sent as a Telegram message.
(Settings -> Enable two step verification)Huh - well, as Scott said, until they remove the ability for the phone number alone to take over the account, it still doesn't have much if any real security.
With the Two-Step enabled, they cannot take over the account with just the phone number. They also have to have the Password that you set up to allow it.
Interesting, so the account could be lost forever if you lose that password?
Yup, if you lose that OR lose the phone number. Which is "good" for security of access, bad for security of data.
-
Recovery seems to work.
-
@dafyre said in Franz messaging app:
@Dashrender said in Franz messaging app:
@dafyre said in Franz messaging app:
@Dashrender said in Franz messaging app:
@dafyre said in Franz messaging app:
Apparently now, you can set up a password for your Telegram account as well, so that no one will be able to add a new device to your account without the password as well as the PIN sent as a Telegram message.
(Settings -> Enable two step verification)Huh - well, as Scott said, until they remove the ability for the phone number alone to take over the account, it still doesn't have much if any real security.
With the Two-Step enabled, they cannot take over the account with just the phone number. They also have to have the Password that you set up to allow it.
Interesting, so the account could be lost forever if you lose that password?
It links to an email address so you can go through recovery procedures. I'm testing it out now.
Ah ha, interesting. That's good.
-
@Ambarishrh said in Franz messaging app:
Secure messaging score card from EFF
With the new features, Telegram scores well there.
-
I tried logging in via the web interface from a system that has never used it before.
Enter phone number, and it sends a message via Telegram to my phone with the Pin. If you don't have any access at all to Telegram, it can send you the Pin via SMS. Enter PIN... Oops, I forgot password... It sends a temporary login code to your email on file.
Then you fix the password and done.
-
@dafyre said in Franz messaging app:
@Dashrender said in Franz messaging app:
@dafyre said in Franz messaging app:
@Dashrender said in Franz messaging app:
@dafyre said in Franz messaging app:
Apparently now, you can set up a password for your Telegram account as well, so that no one will be able to add a new device to your account without the password as well as the PIN sent as a Telegram message.
(Settings -> Enable two step verification)Huh - well, as Scott said, until they remove the ability for the phone number alone to take over the account, it still doesn't have much if any real security.
With the Two-Step enabled, they cannot take over the account with just the phone number. They also have to have the Password that you set up to allow it.
Interesting, so the account could be lost forever if you lose that password?
It links to an email address so you can go through recovery procedures. I'm testing it out now.
Thanks I've added it.
-
@dafyre said in Franz messaging app:
I tried logging in via the web interface from a system that has never used it before.
Enter phone number, and it sends a message via Telegram to my phone with the Pin. If you don't have any access at all to Telegram, it can send you the Pin via SMS. Enter PIN... Oops, I forgot password... It sends a temporary login code to your email on file.
Then you fix the password and done.
Sending the PIN to SMS is bad security, that's been shown to be easy to intercept. But some decent improvements.
-
Just curious on what was the reasons given for the switch to Telegram to your friends @scottalanmiller apart from the desktop app
-
@scottalanmiller said in Franz messaging app:
Telegram on the desktop works more or less like how Apple Messenger works with SMS messages. It hijackes the SMS via the cell phone device, turns the SMS into SMSoIP (I made that up, but some special Apple protocol for that) and lets desktops and iPads talk over SMS - but if the phone goes away, the others go offline, too.
It does not. Stop making things up, just because you have not payed attention to what was happening.
When you install the desktop application, you have to authorize it from your phone (or other already authorized device possibly).
Then once authorized, it is valid on that machine until you revoke it.
-
@JaredBusch said in Franz messaging app:
@scottalanmiller said in Franz messaging app:
Telegram on the desktop works more or less like how Apple Messenger works with SMS messages. It hijackes the SMS via the cell phone device, turns the SMS into SMSoIP (I made that up, but some special Apple protocol for that) and lets desktops and iPads talk over SMS - but if the phone goes away, the others go offline, too.
It does not. Stop making things up, just because you have not payed attention to what was happening.
When you install the desktop application, you have to authorize it from your phone (or other already authorized device possibly).
Then once authorized, it is valid on that machine until you revoke it.
That's what I was saying. I was describing the Apple process specifically, not meaning to say that Telegram worked exactly like that, but in the same style in that the phone handles the control and there is a translation (in the case of Telegram a manual one) to another protocol instead of SMS.
-
@JaredBusch said in Franz messaging app:
Someone mentioned this app here a while back and I tried it out.
Did not really like it. I should give it another try.
I think it was @John-Nicholson in telegram. I tried it also and wasnt a big fan.
