Telegram has a lot of pros, but it can be safe only as long as you and every person in your circle sets it as such. Chats are not encrypted by default, you have to set it in group settings. Your phone number isn’t hidden by default, you have to manually set its visibility to “Nobody”.
It even asks to let it pull your contacts, Facebook-style. There might be several such gimmicks, but generally they are easy to notice and control.
The biggest advantage(?) Telegram has is that everything is saved server-side instead of your phone. So you don’t need to keep having to back up your chats and be scared of losing everything if you lost your phone.
Pulling your contacts lets it get a pretty good fingerprint of who you are, from who you talk to. It can already get that from who you actually message, but it’s getting a lot more information about you from pulling the whole list and not just who you talk to through telegram.
I understand, but if you are new to this conversation app, right after installing it would be good to know which of your contacts your are able to talk to there. I don’t see asking one by one and adding them manually a good solution, maybe there is another one I don’t see
How does it stay on your device? I’m notified if a contact of mine uses signal. That means if someone has my.number in their phone signal will let them know I use signal. I don’t really want someone to be able to confirm that I use a service.
You were calling someone cringe for asking why Telegram isn’t secure. Now here you are thinking your Signal messages aren’t sitting in an NSA server somewhere in front of all these people. You’re delusional, mate. You’re like a step above a script kiddy in regards to technical understanding. You’re so close to understanding the reality that you have no data privacy, but you’re still so far…
There is an standard client-server encryption in Telegram. If you want e2e encrypted chat, then use Secret chats. Almost all messengers nowadays use client server encryption. So the biggest problem is not man-in-the-middle attack, but physical access to device by someone and malware installed via breaches.
@caglel@people_are_cute The standard encryption is utter trash. First, they never needed to make it. Ever. Second, it was audited and laughed at by everyone. Third, even after they fixed the issues, it’s still laughed at by everyone.
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !privacyguides@lemmy.one
In the digital age, protecting your personal information might seem like an impossible task. We’re here to help.
This is a community for sharing news about privacy, posting information about cool privacy tools and services, and getting advice about your privacy journey.
You can subscribe to this community from any Kbin or Lemmy instance:
Check out our website at privacyguides.org before asking your questions here. We’ve tried answering the common questions and recommendations there!
Want to get involved? The website is open-source on GitHub, and your help would be appreciated!
This community is the “official” Privacy Guides community on Lemmy, which can be verified here. Other “Privacy Guides” communities on other Lemmy servers are not moderated by this team or associated with the website.
Moderation Rules:
We prefer posting about open-source software whenever possible.
No soliciting engagement: Don’t ask for upvotes, follows, etc.
Surveys, Fundraising, and Petitions must be pre-approved by the mod team.
Be civil, no violence, hate speech. Assume people here are posting in good faith.
Don’t repost topics which have already been covered here.
News posts must be related to privacy and security, and your post title must match the article headline exactly. Do not editorialize titles, you can post your opinions in the post body or a comment.
Memes/images/video posts that could be summarized as text explanations should not be posted. Infographics and conference talks from reputable sources are acceptable.
No help vampires: This is not a tech support subreddit, don’t abuse our community’s willingness to help. Questions related to privacy, security or privacy/security related software and their configurations are acceptable.
No misinformation: Extraordinary claims must be matched with evidence.
Do not post about VPNs or cryptocurrencies which are not listed on privacyguides.org. See Rule 2 for info on adding new recommendations to the website.
General guides or software lists are not permitted. Original sources and research about specific topics are allowed as long as they are high quality and factual. We are not providing a platform for poorly-vetted, out-of-date or conflicting recommendations.
Well, movie pirates use it so it must be safe! /s
Telegram has a lot of pros, but it can be safe only as long as you and every person in your circle sets it as such. Chats are not encrypted by default, you have to set it in group settings. Your phone number isn’t hidden by default, you have to manually set its visibility to “Nobody”. It even asks to let it pull your contacts, Facebook-style. There might be several such gimmicks, but generally they are easy to notice and control.
The biggest advantage(?) Telegram has is that everything is saved server-side instead of your phone. So you don’t need to keep having to back up your chats and be scared of losing everything if you lost your phone.
yeah, having all your secret data on a server you know nothing about is massive advantage 😂
What is the problem in asking for pulling your contact list? Isn’t it to check which of your contacts also have telegram?
Pulling your contacts lets it get a pretty good fingerprint of who you are, from who you talk to. It can already get that from who you actually message, but it’s getting a lot more information about you from pulling the whole list and not just who you talk to through telegram.
I understand, but if you are new to this conversation app, right after installing it would be good to know which of your contacts your are able to talk to there. I don’t see asking one by one and adding them manually a good solution, maybe there is another one I don’t see
Well, I’d say they can do that as long as it stays on my device like with Signal.
How does it stay on your device? I’m notified if a contact of mine uses signal. That means if someone has my.number in their phone signal will let them know I use signal. I don’t really want someone to be able to confirm that I use a service.
It just does. Your phone can check by itself if someone is on signal or not - no upload of contacts needed.
You were calling someone cringe for asking why Telegram isn’t secure. Now here you are thinking your Signal messages aren’t sitting in an NSA server somewhere in front of all these people. You’re delusional, mate. You’re like a step above a script kiddy in regards to technical understanding. You’re so close to understanding the reality that you have no data privacy, but you’re still so far…
Signal still have access to your contact list at first, they simply not store it anywhere. Which is good for me
There is an standard client-server encryption in Telegram. If you want e2e encrypted chat, then use Secret chats. Almost all messengers nowadays use client server encryption. So the biggest problem is not man-in-the-middle attack, but physical access to device by someone and malware installed via breaches.
@caglel @people_are_cute The standard encryption is utter trash. First, they never needed to make it. Ever. Second, it was audited and laughed at by everyone. Third, even after they fixed the issues, it’s still laughed at by everyone.