I think a possibility is a series of open source anvil or nixos scripts that you can run on most hardware with minimal changes, in an extendable architecture of some kind to add or remove functionality and they perhaps get maintained by the community or some structure of the kind of Linux distributions.

This could enable people with minimal skills set up and maintain a reasonably useful but secure environment just by changing a few variables.

Unlike other chat services Telegram has a “social” aspect and search capabilities for locating public discussion channels.

Furthermore E2EE is optional and most people don’t turn it on and is certainly not on in public channels.

While techies are freaking out about an attack on encryption the articles I’ve read so far don’t mention anything about encryption or otherwise it seems that French police is concerned about moderation or attempts at moderation of those public channels, that Telegram specifically refuses to moderate.

Perhaps this will be an attack on encryption by stealth but at this point that’s not what it looks like.

As a personal anecdote when I installed Telegram a few years ago and searched for my city’s name the top 20 results where channels offering to sell you heroin - which I thought was so blatant as to be certain it was police sting operations - but who knows.

I can’t imagine any system of influence running an exposed ssh without some further protection from connection abuse like fail2ban.

I’ll believe AI can replace engineers when I see NVIDIA firing them. But like the graphic says, the manager’s job seems a lot easier to replace instead.

Perhaps this was written much earlier than v5.

The combination of clean UI with long promised updates seems like a winning combination. I don’t really play games on my phone. I just want it to go through the basic tasks quickly (photos, voice dictation, app switching etc, I currently have a OnePlus 7 Pro and it has kept up admirably - but being stuck in android 12 with some quirky behaviour is a bit annoying).

So I guess I’m not looking for a powerhouse - but I do want something that does the basic stuff right - however if it doesn’t bring table stakes (ie if modem or voice quality or other connectivity is subpar) then the rest is not important.

Thanks for the heads up, I hadn’t considered that as a criterion and was thinking of pulling the trigger. Do you have any recommendations?

You just summoned a demon

Maybe this is useful https://tunnelbroker.net/

Are you on an enterprise subscription / office 365 work or school account or something like that?

All business models are aimed at company profitability. Customer satisfaction is an expensive early necessity which you can largely do away with as you become entrenched.

Someone high up will probably lose a lot of face if it doesn’t go through. I’m assuming someone looked at numbers in a spreadsheet and asked why on earth do they have a huge pool of data they can’t legally use to enhance their ad targeting - when the developers said it might be a problem with our users they said fuck them, just ram it through. How do they backpedal without looking like out of touch idiots?

I’m assuming it’s aimed at people trying to avoid tying the hosting IP to the publicly consumable service.

Not if you indicate you are sure in advance

For most commercial products they offer what they call Copilot with data protection.

I hate that they are shoving it down everyone’s throat but data leakage is a primary company concern that they have addressed.

Now, how much that is true on the backend is anyone’s guess, but they’re selling something that they could be held legally accountable for.

It’s more like a whole series of legal covers for everyone involved up and down the chain if things go sideways.

Ideally you need a double-blind checking mechanism definitionally impervious to social engineering.

That may be possible in larger projects but I doubt you can do much in where you have very few maintainers.

I bet the lesson here for future attackers is: do not affect start-up time.

From what I read it was this observation that led him to investigate the cause. But this is the first time I read that he’s employed by Microsoft.

It’s art (that makes you horny)

No worries.

For those who were wondering:

On the security updates:

Yes they’ll provide some security updates for some time even out of contract. No time frame given, only in relative release numbers:

Our naming convention for releases is: <major>.<minor>.<patch>.

Version -2 of currently released minor version goes EOL. The cadence is not explicitly provided

On not renewing or renewing later:

Yes, jump in any time.