For the best experience on desktop, install the Chrome extension to track your reading on news.ycombinator.com
Hacker Newsnew | past | comments | ask | show | jobs | submit | history | more aquatica's commentsregister

It's not like it would be illegal to distribute the apps outside of the EU, it's that Apple doesn't want to.


No, it’s simply that the entitlements aren’t authorized for use outside the EU. You can still ship your WebView version elsewhere.


> However, the mailbox as a whole is encrypted at rest

The server still receives from other servers and from the client (if the email is not going to a proton account) the plain text, so nothing prevents them from making a copy.


email is not Signal, and Proton cannot magically turn on encryption for every sender in the world.


how other providers (gmail) work in this case?..


Says the guy who had a backdoor in their super-secure e2e secret chats

https://words.filippo.io/dispatches/telegram-ecdh/


> super-secure e2e secret chats

Which aren't enabled by default so almost nobody uses them. Telegram users are often surprised to find out their messages aren't end-to-end encrypted at all.


Telegram can be used on multiple devices simultaneously. Syncing the private key for each chat across multiple devices can be an issue. That's why secret chats are only available on the device they were created on, and having encryption on by default would not make sense.


Yet whatsapp and matrix seem to be able to do that just fine, impossible they said


Just fine is a bit of an overstatement for matrix. I think it got much better now, but the user experience for multi device key syncing on element and other clients gives room for improvement. I ended up having to reinstall because I could not figure out the mess I created myself. There wer so many keys involved that even having a PhD in computer science I could not easily grasp their meaning and function. I understand at least why key syncing ist not easy and I understand why someone would not support it. I however do not understand telegrams choice of obscure crypto as well as it does not make it easier to support this. But I guess their business model (pushing contextual advertisement into chats) relies on not having crypto.


I agree, but most of these issues stem from not having enough funding, as active as matrix seems to be, they are struggling to actually fund its development.


IIRC ads are only on public channels, where e2e does not make sense


Whatsapp being e2e is almost (but not entirely) worthless, it tells me that they are likely not training LLMs on my messages, but I have zero trust of their safety from client-side backdoors.

The security of e2e cannot be higher than the security of the clients


That's a different conversation, I doubt you can really trust telegram either.

Also don't forget that most people back their stuff to Google Drive/iCloud anyways, so it's not like it's impossible to access.


AFAIK, whatsapp is still dependent on your mobile being the primary source. It has "link a device" feature, which has some of the features but cannot be used as an independent client. For example if you're using the web version and want to see some old chats, you can't unless you use it from your mobile. WhatsApp's encryption keys are tied to the device, not the account. In Matrix, encryption keys are tied to the user's account, not the device, and thus it wont be an issue.


> AFAIK, whatsapp is still dependent on your mobile being the primary source. It has "link a device" feature, which has some of the features but cannot be used as an independent client.

Not anymore https://blog.whatsapp.com/one-whatsapp-account-now-across-mu...


> Not anymore

From the blog:

"if your primary device is inactive for a long period, we automatically log you out of all companion devices."

There is one primary device, and multiple linked companion devices. This is different from telegram where there is no primary device.

Also see : https://faq.whatsapp.com/653480766448040

"Not all messages and chats are synced to linked devices from your phone. WhatsApp Desktop syncs more message history than WhatsApp Web. To see or search your full history, check your phone."


What's the point of buying it from fragment (which is basically Telegram's way of using their scam currency) and spend at least €50 when you can just buy one for a few cents on websites such as smspva?


Is this the case for Europe too?


Some places yes. It's a little different, at least it has been in all my contracts. The company you work for has the rights to buy the software from you, at a reasonable price. If they don't want it, you free to do whatever. They can't just take it.

I had colleagues would worked on a project in their space time, their price was reasonable wanting only compensation for the hours spend working on. The company didn't want it, but they also could not sell it, because if was so heavily tied into our systems and work flows that they couldn't reasonably sell it anywhere else.

One of those developers then started working on another project, one that was so fare away from what we did that there was no way the company would want it and turned that project into a very successful business.

In reality what happens is that people will work on something, quit, and the spend a few months on polishing and then release their project or sell it. Very few companies will want to spend time going after a former employee building some side business far removed from their core business.


The problem is how to agree what 'reasonable price' is... And, in any case, it may be an abusive clause.


Their response is the kind of arrogant that makes me want to see them get fined for the entirety of their cash reserve.


Seriously, what audience is Apple playing this to? The insinuations made in this press release should get them sued again for libel. Not to mention how off putting this kind of tantrum is for their customers.

JFC, they really need to fix their PR team here.


LoL. Under what law? Perhaps "I don't like it Law"


We won't. We'll get it with Fedora 40.


You can also upgrade to Rawhide if you don't want to wait a couple of months.


Fedora 40 Beta is currently on target to be released March 12[0] and will include KDE Plasma 6 so if anyone is looking to avoid running Rawhide it's only a two week wait for a beta release. It's also possible to install from the most recent build of the pre-beta 40 branch[1]

[0] https://fedorapeople.org/groups/schedule/f-40/f-40-key-tasks...

[1] https://kojipkgs.fedoraproject.org/compose/branched/latest-F...


iirc GitLab is trying to federate using ActivityPub

Edit: yes, https://docs.gitlab.com/ee/architecture/blueprints/activity_...


As for the password vault, I suggest you switch to Bitwarden. But for browsers? There isn't really much of a choice, it's either Firefox or Chromium-based.


> Signal and Telegram do not have cash revenues from the EU

How so? Don't Telegram Premium and Telegram Ads count as revenue?


Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search:

HN For You