This is an article written by telegram’s founder and CEO Pavel Durov in 2019 on “Why whatsapp will never be secure”. Your thoughts?

  • Gooey0210@sh.itjust.works
    link
    fedilink
    arrow-up
    2
    ·
    edit-2
    6 months ago

    Guys, please stop using telegram if you care for your security and privacy

    Telegram is not fully open source, sometimes they release the source, but the hashes of the builds don’t even match (so it’s a different source code) 🚩

    Zero transparency about data handling, even when they get caught they don’t tell details 🚩 (Telegram in the recent years has got really shady reputation)

    Very often ways they implement security is weird: non open source app, non open source server, leaking APIs, use of phone numbers, at some point they started asking for an email, non encrypted chats by default, never encrypted group chats… it can continue forever 🚩

    Non-standard encryption is a real red flag, non-open-source 🚩

    I know some people that work/worked for the police, and they can read all the messages easy peasy, i was trying to tell to the people many years ago, but everyone was so amused by the stickers. Now you can just read stories of the journalists and activists, and how they got imprisoned with the use telegram 👁️‍🗨️💀

    PLEASE, STOP USING TELEGRAM IF YOU CARE FOR YOUR PRIVACY OR SECURITY

  • Arthur Besse@lemmy.ml
    link
    fedilink
    arrow-up
    1
    ·
    edit-2
    6 months ago

    Sure, fuck WhatsApp, but Telegram isn’t even end-to-end encrypted most of the time. Their group chats never are, and their “secret chat” encryption for non-group chats must be explicitly enabled and hardly ever is because it disables some features. And when it is encrypted, it’s with some dubious nonstandard cryptography.

    It’s also pseudo open source; they do publish source code once in a while but it never corresponds to the binaries that nearly everyone actually uses.

    And the audacity to talk about metadata when Telegram accounts still require a phone number today (as they did five years ago when this post was written) is just… 🤯

    State-sponsored exploits against WhatsApp might be more common than against Telegram, or at least we hear about them more, but it’s not because the app is more vulnerable: it’s because governments don’t need to compromise the endpoint to read your Telegram messages: they can just add a new device to your account with an SMS and see everything.

    (╯° °)╯︵ ┻━┻

    Anything claiming to prioritize privacy yet asking for your phone number (Telegram, WhatsApp, Signal, …) is a farce.

    • nutomic@lemmy.ml
      link
      fedilink
      arrow-up
      1
      ·
      6 months ago

      Telegram isn’t perfect, but it is infinitely better than Whatsapp because it doesn’t belong to Facebook, and also isn’t from the United States. Also it can be used by normies without problem, unlike Matrix or Xmpp or what have you.

    • Gooey0210@sh.itjust.works
      link
      fedilink
      arrow-up
      1
      ·
      6 months ago

      Bravo, bravo, bravo!!

      Dude, see you on the same side of the barricades when the time comes to fight the centralized army of agent Smiths 👏👏👏

      • BearOfaTime@lemm.ee
        link
        fedilink
        arrow-up
        0
        arrow-down
        1
        ·
        edit-2
        6 months ago

        Simplex - requires nothing, just install. But you connect with other people by sending a code outside of SimpleX. Though they’ve added a directory service for groups.

        XMPP

        Wire (not Wiremin), though it requires an email account, which is easily addressed with a disposable email.

        Signal is very secure from what I’ve read, despite the phone number identifier.

  • amanneedsamaid@sopuli.xyz
    link
    fedilink
    English
    arrow-up
    1
    ·
    6 months ago

    “Here’s what someone who has never created a private messenger thinks about Whatsapp’s privacy.”

    Why would anyone care about what he has to say? 💀

  • ara@lemmy.ml
    link
    fedilink
    arrow-up
    1
    ·
    6 months ago

    WhatsApp will be never private and secure, while Telegram will be never private. 😁

  • mustbe3to20signs@feddit.de
    link
    fedilink
    arrow-up
    0
    ·
    6 months ago

    WhatsApp’s e2e encryption is based on the Signal protocol and active by default. Telegram’s is opt-in. So much for Telegram’s superior privacy…

    • Clot@lemm.eeOP
      link
      fedilink
      arrow-up
      0
      ·
      6 months ago

      No. Whatsapp’s metadata is not encrypted and can be used by its parent company, also backups are not secure. While telegram’s is opt in (yeah that sucks and here’s there excuse for that https://tsf.telegram.org/manuals/e2ee-simple), they are as secure as signal’s (if not more).

      • mustbe3to20signs@feddit.de
        link
        fedilink
        arrow-up
        0
        ·
        edit-2
        6 months ago

        I’m not saying that WhatsApp is the good guy here, Meta sucks but compared to Telegram I rather trust them if I have to.
        And the unencrypted backups are only problematic when you use the automatic Google Drive upload.

          • mustbe3to20signs@feddit.de
            link
            fedilink
            arrow-up
            0
            ·
            edit-2
            6 months ago

            Telegram is a shell company and only offers mediocre, opt-in encryption. The thing I like most about them is their support for 3rd party clients.
            I have to use their service for some contacts same as with WhatsApp but I would prefer more secure and privacy friendly alternatives.

            • BearOfaTime@lemm.ee
              link
              fedilink
              arrow-up
              0
              arrow-down
              1
              ·
              6 months ago

              You obviously haven’t seen the charts of the metadata that WhatsApp collects. And we know how anti-consuner, adversarial and anti-privacy Facebook is overall with their tracking pixels, ghost profiles, etc.

              Telegram at least doesn’t have the FB dataset. FB knows about me, though I’ve never once in my life been on their website or used anything related to them. Not once. The first I heard of FB I saw immediately the privacy problem with them, and made sure to never have anything to do with them. But they know about me from other peoe posting pics and such, which they then correlate with sites I’ve been on that have tracking pixels. WhatsApp ads a metric shitton of metadata to that pile, with date, time, location, duration of conversations, businesses you’re near at the time, their operating hours, etc, etc. They have a massive, constantly growing dataset, which they can easily correlate elements.

              WhatsApp may be encrypted, but I trust Zuck so little that I wouldn’t doubt they capture keystrokes in app before the message is sent. They have the capability as was shown in a recent research article (though no evidence of it happening).

              Id rather not use Telegram, but it’s far lesser of the two evils. I’m trying to get folks to other apps. Signal doesn’t sell, SimpleX isn’t quite ready, I think Wire has the same stored encryption key issue, though I may be mistaken (I’m not fully clear how it’s managed).

  • crispy_kilt@feddit.de
    link
    fedilink
    arrow-up
    0
    ·
    6 months ago

    What a load of hipocrisy. The dude uses unauthenticated DH for his apps “secret chats”, which a bored student with a laptop can MITM in seconds. Other chats use just TLS, meaning they get to read EVERYTHING.

    Use Signal, people.

  • labbbb@thelemmy.club
    link
    fedilink
    arrow-up
    1
    arrow-down
    1
    ·
    6 months ago

    Durov is a suspicious RuSSian who very likely works for FSB. Do not use Telegram at all costs!

      • labbbb@thelemmy.club
        link
        fedilink
        arrow-up
        0
        arrow-down
        1
        ·
        edit-2
        6 months ago

        Where is racism there? I’m Russian myself and I know what I’m saying.

        Ok, use Telegram, then don’t cry when they leak your data

        • Clot@lemm.eeOP
          link
          fedilink
          arrow-up
          1
          ·
          6 months ago

          Yeah you clearly are a russian and you clearly know what you are saying by those intentional caps.