Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror
×
Businesses Privacy Your Rights Online

Telegram Says CEO Durov Has 'Nothing To Hide' (bbc.com) 79

Messaging app Telegram has said its CEO Pavel Durov, who was detained in France on Saturday, has "nothing to hide." From a report: Mr Durov was arrested at an airport north of Paris under a warrant for offences related to the app, according to officials. The investigation is reportedly about insufficient moderation, with Mr Durov accused of failing to take steps to curb criminal uses of Telegram. The app is accused of failure to co-operate with law enforcement over drug trafficking, child sexual content and fraud.

Telegram said in a statement that "its moderation is within industry standards and constantly improving." The app added: "It is absurd to claim that a platform or its owner are responsible for abuse of that platform." Telegram said Mr Durov travels in Europe frequently and added that it abides by European Union laws, including the Digital Services Act, which aims to ensure a safe and accountable online environment. "Almost a billion users globally use Telegram as means of communication and as a source of vital information," the app's statement read. "We're awaiting a prompt resolution of this situation. Telegram is with you all." Judicial sources quoted by AFP news agency say Mr Durov's detention was extended on Sunday and could last as long as 96 hours.

This discussion has been archived. No new comments can be posted.

Telegram Says CEO Durov Has 'Nothing To Hide'

Comments Filter:
  • Is this the EU doing a PoC run on a smaller target as preparation for trying the same crap on X.com and Mr Musk? Or is it a different sort of complaint?

    • That would seem unlikely as Musk (or anyone else like Zuck who is CEO for any such company) has now learned to stay the hell of of France (if the Olympics hadn't already convinced them of that) and perhaps other EU member countries with similar draconian policy.
      • by Coopjust ( 872796 ) on Monday August 26, 2024 @10:12AM (#64735916)
        Zuck doesn't have to fear entering the EU or France specifically because his messaging platform actually acts on illegal content.

        Whatsapp does use the Signal protocol on messages themselves to have end-to-end encryption. So they can't read that by default. But other metadata - profile pic, profile display name, IP addresses, email address, what people are in a given group - that's all not E2EE on Whatsapp.

        When a user reports a post as violating terms of service or the law on Whatsapp, the decrypted message on their device is sent unencrypted (transport level encryption to protect it while it gets to Facebook servers yes, but the actual messages themselves are decrypted) and Facebook can read it for content moderation. Then Facebook actually moderates the content, and depending on the scope, kills the group chat and warns/suspends/bans the users in it, and for serious legal issues, potentially proactively report it to authorities.

        The end result is that Whatsapp can have people trying to scam or sell drugs, or sell malware, or phish, but Facebook actually acts on the reports they receive and responds to lawful requests. Telegram's issue is that they use cute tricks like putting servers with encryption keys and the servers that actually store the data in different countries to try to frustrate subpoenas, but they get reports of illegal content/activity on their services and then fail to act on it. That's why Durov is in the hotseat and Zucc is not.
        • How many reports are false positives, or politically motivated, or just targeting?

          If you don't moderate anything, can you be responsible for anything, or are you like a printer who just takes in jobs and produces pages of text without even looking at them?

          By US law, if you choose not to moderate anything, are you responsible for anything, or is it the responsibility of the aggrieved party to go after their target themselves, rather than go after you who provide the mere medium of the message?

      • nd perhaps other EU member countries with similar draconian policy.

        You mean unlike Turkey which ordered Twitter to censor opposition candidates right before the eleciton and which the company rolled over and complied, right?
      • Comment removed based on user account deletion
      • > That would seem unlikely as Musk .. has now learned to stay the hell of of France ..

        It seems very likely and not just in France or the EU. Commissioner Thierry Breton has previously been issuing veiled threats to Musk. This has set a dangerous precedent, where the owner of a platform can be jailed over the contents. This is a most chilling threat to free speech. It would be most interesting to see the outrage in the media. Or lack of it.
    • We can only hope so. Is telegram really smaller though? I'd argue there is much worse content on Telegram. I think the day will come for x.com, but that's not coming soon.
    • Why would the EU seek to arrest Elmo?

    • Comment removed based on user account deletion
      • What if you're attacking a particular medium for messages you don't like, and the messages will continue on other media that you don't even yet know about?

        What apart from inconveniencing a lot of innocent users of a medium are you doing?

        Isn't this all about asserting authoritative control and not about stopping criminals?

        Is anyone else flashing back to War on Drugs propaganda? How has that turned out?

    • No, there are legitimate complaints here, and there have been for awhile. Follow the laws, even if you're a big company that makes money by skirting the laws. If the laws require moderation to keep out illegal content (such as child porn), then you have to follow the laws. If the government of the country where you live asks to see data to make sure you are complying with the law, then you have to comply.

    • I'd start with suggesting you wait for the actual indictment to come down. Part of being arrested and tried is having explicit charges laid against you. You're speculating wildly on why he was arrested, which isn't necessary. Why he was arrested will be made public knowledge within a week.

  • by Coopjust ( 872796 ) on Monday August 26, 2024 @09:12AM (#64735764)
    Telegram's CEO Pavel Durov is a Russian citizen since birth. He hasn't lived in the country since 2014, and has made no secret since that he doesn't believe the Russian government has a favorable view of him. He became a citizen of France in 2021 [lemonde.fr].

    Durov and Putin were both in Baku Azerbaijan this past week;Durov asked to meet Putin; Putin refused to meet him. [turan.az]

    Right after this happens, Durov gets on a plane to France, knowing he has an arrest warrant against him [news-journal.com]. What sensible reason would someone have to fly to somewhere that he knows he's going to get arrested on arrival?

    Combine the two facts - that Durov has said the Russian government has it in for him and Putin refused to meet with him - and that France will not extradite their own citizens to other countries - and you have the reason for Durov to fly to France knowing he will be arrested. He knows that he's on the outs with Putin's government, he went in for one last hail mary to try go buy favor back in with Putin. When Putin refused, he flew to France - where even if Russia fabricates some bullshit charges and demands France extradite Durov, they won't, because Durov is a French citizen.

    Where these charges go, and if/to the extent that Durov cooperates with French authorities in giving them the data they want from Telegram remains to be seen. But make no mistake, it was a calculated move.

    (People often refer to Telegram as an encrypted messenger; this is grossly misleading. Everyone and their mother uses transport level encryption these days. Telegram does not do End-to-End encryption [E2EE] except on secret chats. Secret chats are not on by default, and are not available in group chats - meaning the vast majority of content is able to be viewed on Telegram's servers by Telegram's employees. This is why the French are going after the service for openly hosting easy to find publicly searchable illegal content and refusing to moderate/act on it, and it's why Durov has a potentially huge bargaining chip in giving the French what they want in exchange for a deal. Even if Durov decides to be an idealist and stick to principles of not disclosing user data, the next person in charge of Telegram could decide that it's to their favor to cater to one or more international governments and surrender user data/messages surreptitiously.)
    • by sinij ( 911942 )
      Additional background on this. Telegram is crucial for both Russian and Ukrainian war propaganda - most of war news in these countries are shared via Telegram channels. More so, troops routinely stream and post from the battlefield with poor to non-existent opsec. As such, control over Telegram by either side would be major victory in both informational warfare and intelligence gathering operations. However, as far as we know Durov turned down all offers from KGB.
      • by smooth wombat ( 796938 ) on Monday August 26, 2024 @10:47AM (#64736014) Journal
        Russian bloggers who keep toeing the line that everything is fine are now panicking [newsweek.com] over this arrest.

        Responding to the news, Russian journalist Alexander Sladkov said that Russia's military conducts half of its communications via the messaging app, and said an alternative must be created "urgently."

        "Pavel Durov was arrested. This attack on the owner of [Telegram], on which half of the communications in the [war] are held, was expected. Now we urgently need to create a Russian military messenger," he wrote.

        That a supposed military would use a third party for its communications channels is astounding. If there were any doubts remaining how pathetic the Russian military is, this seals the deal.

        • They're not going to use Facebook Messenger, that's for old people, like Putin. Can't use Apple Messenger as no one's going to want to be a green bubble. That leaves Google, and even the RU military probably knows any app from them stands a very good chance of being cancelled within a year or two of release.

          So that leaves Twitter! Perhaps they didn't want to pay Twitter for their blue checkmarks? Depending on the number of personnel to be 'verified' they probably saved a few rubles.
    • by J-1000 ( 869558 )

      the vast majority of content is able to be viewed on Telegram's servers by Telegram's employees

      Can you explain how this works when the server-side data is still encrypted? I want to understand.

      • by Coopjust ( 872796 ) on Monday August 26, 2024 @09:50AM (#64735862)
        So you have three levels of encryption:

        1. Transport level encryption. This is the equivalent of an opaque armored truck pulling up to my home or office (my device using Telegram), I put an envelope with my letter (message) in it, the armored truck being locked, it drives to Telegram (their servers). At the point where the request reaches Telegram's office (servers), the truck is open - the request is open air. But that happens inside Telegram's network (within their server farm/intranet)

        2. Disk level encryption. When the message reaches Telegram's infrastructure, they use a "secret splitting" system where a server with the encryption key encrypts the server, and then sends the decrypted data to another server in a different region. If, say, the server with the secret was in the UAE, and the server itself with the encrypted data was stored on is in Germany, a subpoena is useless in just one of those countries. The server with the message data is useless without the key; the key is useless if you don't have the data you want to decrypt in it. But Telegram's infrastructure has this key, the internet has no borders, and that decryption key in Telegrams infrastructure is what's used to decrypt data before you send it onwards to clients. Imagine that this is like Telegram's office having a massive safe, and a key is required to open it. Telegram possesses the safe, and they possess the key to open it and look at what's inside.

        3. End-to-End Encryption, or E2EE. E2EE, the message is encrypted before it ever leaves my device, using key data that Telegram doesn't have, because it doesn't leave user devices. It'd be the equivalent instead of handing my letter directly to the armored truck to take to Telegram, I put it in a locked box and locked with a lock that only has keys that I and people in the chat have on our devices. Telegram is unable to look at messages encrypted with E2EE because the users possess the keys on their devices; Telegram does not. They can hold and move the lockbox around, but they can't open it without the key. Unfortunately, Telegram does not implement E2EE by default. Secret chats must be used manually, and cannot be used in group chats of three or more people.

        #3 is what sets Signal and Telegram apart. Signal is 100% E2EE. Telegram is almost 100% not E2EE, most users do not manually turn on secret chats, and secret chats can't be used in group chats.
    • One would assume he could have flown to any number of other countries where he would at least be free. The only way that flying into an arrest warrant makes sense is if you have a sincere belief that Putin wants you dead, which is far harder for him to do if you're in the custody of the French government.
    • Combine the two facts - that Durov has said the Russian government has it in for him and Putin refused to meet with him - and that France will not extradite their own citizens to other countries - and you have the reason for Durov to fly to France knowing he will be arrested. He knows that he's on the outs with Putin's government, he went in for one last hail mary to try go buy favor back in with Putin. When Putin refused, he flew to France - where even if Russia fabricates some bullshit charges and demands

      • by Coopjust ( 872796 ) on Monday August 26, 2024 @10:02AM (#64735894)
        That's not how international flights work. There are passenger lists that you have to send before you enter a country. Durov was on the passenger list for the flight [wired.com]:

        According to an unnamed police source who spoke to Reuters, investigators saw Durov’s name on a passenger list ahead of his private jet’s arrival.

        Durov is a billionaire, and not an idiot; he's generally avoided travel to Europe. And the timing of him entering France, a country that won't extradite him, right after the leader of Russia who has not been a fan refused to meet with him is surely not a coincidence.

    • Because when Putin says "He's not one of our spies", that's when he doesn't lie.
    • > He's probably fleeing Russian influence

      Isn't it ironic he gets arrested in free France /s
  • If Telegram lacks the ability to view group chats due to their "globally fragmented key" setup (my paraphrase; I don't know what it's officially called), and if they claim they've shared 0 bytes due to the effectiveness of this arrangement, then what is France's case against Durov? Are they wanting to punish him A) simply for creating and maintaining enabling technology, or B) because they believe he has the ability to decrypt these group chats and refuses?

    Both would be concerning, but A) especially so.

    • Telegram's "secret splitting" of putting the servers with the public/private keys in different areas than the servers themselves is essentially marketing fluff, with a slight side benefit of making it harder to subpoena them (if the key #1 is in country A and the server that stores the data encrypted by key #1 is in country, B, a subpoena in country A or B alone would be useless. having the key with no data is useless, and having the data with no key is useless).

      The internet means that for Telegram's ser
      • by J-1000 ( 869558 )

        Thanks for the explanation. So it sounds like they make it difficult to be forced into cooperation, and there's a good chance they never had any intent of moderation for group chats and likely lack good tooling and personnel to accomplish it. But that wouldn't save them from prosecution, because the technical capability is there.

      • Its really dumb though, It just requires countries to work together. The UK worked with the US to arrest The wiki leader, they could work out dual subpenas if they needed to. I imagine many countries would be willing to pair together.
      • Isn't this like depriving us all of air, because air carries sound signals that some government has decided is illegal? Why can't a provider be simple like the air and not look at anything, simply serving as a medium?

        If you have a problem with the content of some messages, why isn't it your responsibility to track down the perp some other way? Why are you too lazy to get a warrant to spy on his house and listen to his phone taps?

    • C) Because there is illegal content on his networks that he refuses to take the required steps to moderate.

      That's difficult because of A, but they don't care. Because C is still against the law ( in France's view). You can't create technology that allows one to avoid compiling with the law and then claim you don't have to follow the law because of the technology you created.
      • What if the law is unconstitutional? Does anyone remember Voltaire saying "I may not agree with what you say but will defend to death your right to say it"? How about "Liberté, Fraternité, Egalité", does liberty include providing a medium for messages that you never have to read, and if you have a problem with the words being transmitted, you really need to find another way to go after the people saying those words?

  • Yes, he has nothing to hide. We all know it is a favorite messaging app for criminals.

    • by sinij ( 911942 )
      Criminals like to eat cheese, therefore cheese is enabling crime.
      • A more apt analogy would be that if local police came up to your hotel and showed proof that you had a guest who was running a meth lab out of the penthouse, that you not only didn't look into it, but refused to give them access or kick the people out.

        Telegram gets groups reported for drug dealing, selling malware, selling stolen credit card data, governments and people report them, and Telegram not only refuses to act on said reports (ban the group, ban the people in it), they don't share any informatio
        • by sinij ( 911942 )

          Telegram gets groups reported for drug dealing, selling malware, selling stolen credit card data, governments and people report them, and Telegram not only refuses to act on said reports (ban the group, ban the people in it), they don't share any information back. At which point, they are accessories.

          Based on what legal theory and more importantly in what jurisdiction?

          • >Based on what legal theory and more importantly in what jurisdiction?

            In general? It would be accessory [wikipedia.org]. This applies a lot in English law. In France, it would be article 121-7:

            The accomplice to a felony or misdemeanor is the person who, by aiding or abetting, facilitates its preparation or commission. Any person who, by means of a gift, promise, threat, order or an abuse of authority or powers, provokes the commission of an offence or gives instructions to commit it, is also an accomplice. It follow

            • by sinij ( 911942 )
              I am not satisfied by your answer and see citing legal code without explaining why you think it is applicable as a misdirection. What I wanted to hear from you is an explanation why you think providing a communication service to the public makes one an accessory to any crime that was discussed. If postal service is not accessory to mail fraud, then why would Telegram be any different? Also, why are you so specific in prescribed actions (i.e., act on requests for censorship and bans) that would absolve Teleg
              • >I am not satisfied by your answer and see citing legal code without explaining why you think it is applicable as a misdirection. What I wanted to hear from you is an explanation why you think providing a communication service to the public makes one an accessory to any crime that was discussed.

                The point at which you become aware a crime was committed and do nothing about it.

                >What I wanted to hear from you is an explanation why you think providing a communication service to the public makes one an ac

                • by sinij ( 911942 )

                  In general, warning/suspension/ban of the user from the platform and banning of the group chat violating the law would show intent to prevent that person/group from using the platform to advance criminal activity again. Telegram could not stop someone from getting a new phone number and then re-registering...

                  Why does show of intent matters when you admit that requested action would be ineffective? What if they posted "Please don't do crime" click-through every time log in, would that be sufficient show of intent?

                  ...that they were not tolerating illegal activity on the platform at the point where they were made aware that specific illegal activity was happening.

                  There is no universal definition of illegal activity, as it largely depends on jurisdiction. For example, in Russia it is illegal to refer to invasion of Ukraine as anything but 'special military operation' and many people went to jail for long time for that. Would you like Telegram to enforce that ille

                  • >Why does show of intent matters when you admit that requested action would be ineffective? What if they posted "Please don't do crime" click-through every time log in, would that be sufficient show of intent?

                    Bare minimum? It disrupts the groups. You can't prevent Joe and his drug distributor Dave from giving out a new handle. You can prevent a group of up to 200,000 people on Telegram from exchanging illegal material and contacts.

                    >There is no universal definition of illegal activity, as it largely

                    • by sinij ( 911942 )

                      You can either make yourself aware of how to comply, or make it structurally so you are unable to, completely technically comply.

                      You do understand that "compliance" is the problem in both scenarios? Also, how likely do you think 'unable to comply' will remain an option?

                    • Why should we, the people, support the government compelling compliance over what are really simply symbols? Why can't the government find other ways of enforcing its laws that don't remove privacy from the vast majority of users who are not criminals? Why do you trust the French government so much? Can they make mistakes? How many false positives cause people problems that they should not have to go through, due to government overzealousness? Why should we support the government forcing compliance over com

        • What if the war on free speech is as futile as the War on Drugs?

  • by sinij ( 911942 ) on Monday August 26, 2024 @09:18AM (#64735780)
    There is a good chance that charges will be dropped and there is even better chance that if this goes to trial Durov gets acquitted. After all, conflating offering open digital communications platform with enabling terrorism and dealing drugs is clearly inane position. If Pavel Durov can be conviceted, then so can Whitfield Diffie or Martin Hellman.

    Low probability of prosecution is not the point of this undertaking - the point is to increase perceived costs to refusing to "voluntarily" cooperate with the intelligence apparatus.
    • by Anonymous Coward

      Talk about a persecution complex

    • Don't think so. Telegram KNOWS there is crime going on, they are asked to do more moderation, which is something they can do despite complaints that they can't (can be done, just would cost money and drive away business). Diffie can't be convicted here because he was not involved in the company and has no access to unencrypted data and was not asked to monitor the data.

      • Who moderates the air? Why can't Telegram model the air, which transmits evil signals without moderation? What if government is overreaching by demanding every communication be moderated? What if that is literally Big Brother, which we have been warned against? Why are you supporting the continued expansion of the surveillance powers of the state? Were you personally hurt by some Telegram scam?

  • Messaging app Telegram has said its CEO Pavel Durov, who was detained in France on Saturday, has "nothing to hide."

    The app said that? Holy AI, batman.

    I tried to submit a story recently, about how cryptocurrency corporations have contributed more in this election cycle than all other corporate donations combined, and asked if this was undue influence on our process. The submit page errored out and wouldn't accept the story, after several minutes of spinning.

    Slashdot has gone sadly to shit.

  • I'd really appreciate if someone could help out with a first hand source from the French authorities on this. I (not French-speaking) have tried but not come up with anything. I'd like to know exactly what they say on why Durov is being detained. I don't expect there to be anything more than a press release but I'd like to see it.

    • There's already another story for this on the front page, and someone posted it in the comment thread for that one.

      • Macrons comment that the political branch had nothing to do with it is a bit less than I expected, but as another poster suggested it may be all there is.

    • There is a statement from macron stating that this was a judicial decision without political involvement.

      That's probably all you're going to get since I imagine like the US DOJ they do not comment to the media about ongoing investigations.

      Without knowing French law specifically but if it's anything like US law If they are detaining him they will either release him shortly or charge him and those charges will be made public.

      • Thanks! I my part of the world freedom of information access is quite strong so it may very well be that I'm expecting something that doesn't exist in this case.

        • In the US it get's a little hairy since 90% of the crimes are state level and state agencies have differing rules on information that is released.

          Example is I live in Florida, here there is a called "The Sunshine Law" where a lot of public information is released immediately including some things related to criminal cases (your mugshot in Florida is public info pretty much immediately) and why you see so many "Florida Man" stories. In other states there are more rules about when and how this info goes out

          • Part of the issue is that releasing this info early can and does hurt the actual cases when they get to court. However there are many people who feel that they must win in the court of public opinion even though the public opinion does not decide whether someone goes to prison or not. Thus major politician who keeps talking to the news about his defense but screws up the defense when court is in session. Many companies would just say "no comment" in such a situation, as that's the smartest thing to do.

    • Thanks ofr asking, I searched and I just posted the detailed accusations in the more recent thread. Here is the link, https://www.tribunal-de-paris.... [justice.fr] you can paste the contents in google translate, or you read my poor translation there https://yro.slashdot.org/comme... [slashdot.org]

  • --Tubbs, League of Gentlemen
  • More than just sheltering the worst criminals in the world, Telegram itself probably directly committed financial crimes such as money laundering. Take a look at the long and very sketchy list of financial transaction "processors" they work with. Criminals are so stupid.
    • What if the government could find plenty of fraud within its own glass house before going around throwing stones?

  • Comment removed based on user account deletion
  • Mr Durov's detention was extended on Sunday and could last as long as 96 hour

    96 hours means the prosecutor considers this is a terrorism case. It is quite common noowadays, and it is a shame to handle citizen like that. It is not worse because the citizen is the Telegram CEO, but it helps making the situation more visible for everyone. Yes, they can detain you for 96 hours with very little reason.

To avoid criticism, do nothing, say nothing, be nothing. -- Elbert Hubbard

Working...