they definately installed signal and fucked afterward
What is not mentioned... there's no privacy when the device itself is compromised. For instance, Android phones can read and phone home data from your notifications. In that case, any messenger app wouldn't be private from Google's eyes.
...and once you get to "AI" with system level access that is supposed to scan for "bad content" (like with Apple's supposed "CSAM scanning" and Google's Android System Safety Core), all bets are off.
All of the major platforms owned by corporations (including Apple) are or will be compromised.
The only way out is degoogled Android (for now) or, better, a true Linux device.
As much as I'd like to favor foss and federated messenger apps, telegram isn't as much garbage as whatsapp:
1.The client is somewhat open source and have forks like Forkgram, Materialgram and unoffical clients like Telegrand.
2. Telegram isn't E2EE by default but at least it doesn't lie about it and have E2EE secret chat when nessesary, that means crucial chats stay on your device and the rest stay on their database recoverable and syncable across devices.
(Yes, whatsapp supposedly is E2EE but we can't know for sure, it's closed-source.)
3. You can use telegram as a cloud service with only 2GB per file limit, unlike whatsapp.
(There's even a third-party app that utilise this as a cloud gallery.)
4. Even tho telegram has ads in large channels, telegram isn't funded by a greedy big-corp and it doesn't datamine you, ads are based on the channel's topic.
Yes, in terms of privacy, telegram isn't the best option, Signal, Session, XMPP, Matrix, or SimpleX have better privacy features, less linkability and E2EE by default but telegram is very mainstream and got more publicity, making it the whatsapp alternative it advertises itself as-is.
Publicity doesn't make a better messenger app, but for what it tries to do, it's adoptable for simple users, doubles as cloud storage and is more secure than the garbage being whatsapp.
Immigrating users to different apps is a headache on it's own, but if they know of telegram and it's not privacy invasive, that's not bad.
Isn't it possible to verify WhatsApp encryption with packet sniffing?
Yes, but how would you know Meta doesn't have a copy of your encryption key (ex: when you sign up) and keeps a copy of your encrypted messages somewhere?
AFAIK your encryption key resides as whatsapp's data folder but since whatsapp is closed-source you can't guarantee that whatsapp gave the encryption key to Meta's server at some point when it was created; (or it was created on their servers and sent to your device.)
One would just assume the encryption key is made on your device and never sent to Meta and all the E2EE messages aren't kept on Meta's server after they are sent.
Again, Meta is a company that is profiting on targeted advetising and selling user data, how would whatsapp be a free service without any profit?
Also, Here's someone who saw their whatsapp chat used for targeted ads on them in case you have doubt.
Why is this interview happening inside a sauna?
She likes putting guests on the hot seat.
If you watch the video - its explained starting at 1:13, Moxie built it himself: https://www.youtube.com/watch?v=cPRi7mAGp7I
I predict yet another Signal-related hack within the month.
yet another? what dou mean?
Dude for the first 15s I thought this is porn
its the sauna
How I hate that saunas are associated with porn and sex. It's not supposed to be sexual and more importantly it's an awful, just terrible place to have sex
Where I am, Telegram is mainly used by alt- und far right figures close to Russia. Facts don't matter in these circles any more. Feelings do. And Durov knows how to manage those.
Unlike Signal, Telegram is successful in getting people to move away from Meta's Whatsapp.
Why are they sitting in a sauna?
It should be the law that any information a online service collects about it's users should be given to the government immediately and unconditionally, then suddenly people will start really caring about how much information a service has access to.
then suddenly people will start really caring about how much information a service has access to
I sincerely doubt it. The majority of people will accept that this is just "how it is" and will move on with life. After all, they're not doing anything wrong.
I agree, if majority of people would care, Linux PCs would be the most popular option. They care about convenience only, but not even that much. Instead of researching the best they are just ok with the advertised options. They eat what they get.
It's also important to continue educating people about the fact that Signal is incredibly problematic as well, but not in the way most people think.
The issue with Signal is that your phone number is metadata. And people who think metadata is "just" data or that cross-referencing is some kind of sci-fi nonsense, are fundamentally misunderstanding how modern surveillance works.
By requiring phone numbers, Signal, despite its good encryption, inherently builds a social graph. The server operators, or anyone who gets that data, can see a map of who is talking to whom. The content is secure, but the connections are not.
Being able to map out who talks to whom is incredibly valuable. A three-letter agency can take the map of connections and overlay it with all the other data they vacuum up from other sources, such as location data, purchase histories, social media activity. If you become a "person of interest" for any reason, they instantly have your entire social circle mapped out.
Worse, the act of seeking out encrypted communication is itself a red flag. It's a perfect filter: "Show me everyone paranoid enough to use crypto." You're basically raising your hand.
So, in a twisted way, Signal being a tool for private conversations, makes it a perfect machine for mapping associations and identifying targets. The fact that Signal is operated centrally with the server located in the US, and it's being developed by people with connections to US intelligence while being constantly pushed as the best solution for private communication should give everyone a pause.
The kicker is that thanks to gag orders, companies are legally forbidden from telling you if the feds come knocking for this data. So even if Signal's intentions are pure, we'd never know how the data it collects is being used. The potential for abuse is baked right into the phone-number requirement.
Opinion: I think painting in Signal in such negative light is more harmful in the practical sense. Having fragmented messaging towards the public that does not care about many of these aspects just makes them a lot more hesitant to change, from my perspective.
We as a community should, in my opinion, pick a "good enough" solution for the majority of the people we interact with. That in itself is a market force to show interest and demand for private solutions. Most people I know don't have the tools or knowledge or time to understand nuances and all they'll hear are conflicting messages.
For us more technically inclined people: hell yeah, let's figure out the ideal model and bring it up to maturity so others can join when it's fleshed out. E.g. when lemmy came to my attention in the reddit 3rd party app fiasco, I was really confused on how to sign up and use it. And I'm no stranger to tech.
Edit: spelling
They've done a really amazing job of convincing the world that this is an encrypted messaging app.
This is a play on people's naivety. It is an encrypted messaging app in as much as regular messages are encrypted between the client and the server. It's just that this achieves nothing for the user in terms of privacy unless you can both completely trust the provider (you shouldn't) and be confident that the back-end can't be compromised (you can't).
They do also have "secret chats" that are apparently E2E encrypted, but you'd be mad at this point to give them the benefit of the doubt without at least looking at independent security audits of the client.
Remember how Telegram said they would stop providing Chinese authorities with user data during the Hong Kong protests. Implying that they were doing it at some stage.
Also remember how the FBI have said in several leaked documents they hate signal because the only data they get is when the user signed up and the last time they were online, nothing else.
Which app would you rather use?
When you build a backdoor into your "encrypted messenger" its just a surveillance app
Telegram had a good PR from Mr. Robot.
His NAME is MARLINSPIKE?? Like the ancestral home of Captain Haddock from Tintin?! We really are living in a simulation
It's a surname, he used to be a boat punk younger.
It’s not his real name
Lol of course
I've been saying this for years. Telegram is a social media app.
I don't think, at this point, people who use Telegram do it for their privacy. I still use it, but I don't trust it one bit more than I trust WhatsApp.
I stopped using Telegram as soon as I learned their chats aren't E2E encrypted unless you create a secret chat. Their advertising is so misleading. Even WhatsApp is more private than Telegram.
Privacy
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
much thanks to @gary_host_laptop for the logo design :)