Hot Saucerman
link
fedilink
English
74
edit-2
1Y

If you trust Telegram you’re naive. Here is a great breakdown earlier this year from Kaspersky.

https://usa.kaspersky.com/blog/telegram-why-nobody-uses-secret-chats/27662/

Signal isn’t perfect either, but their mistakes are far less egregious. They also have removed some of the more egregious mistakes, like needing a phone number (edit: incorrect, see below) or google play services to function. It can be run on a device without Google Play Services because it only uses Google Play Services for push notifications.

quaff
link
fedilink
English
81Y

Thanks for the article. That’s a really good breakdown for most arguments of Telegram propagandists. 🙌

Are you both bots? How can anyone read that crap and say it’s a great breakdown?
It’s a single widely known issue, and it can literally be summed up in one short sentence: by default it doesn’t use end-to-end encrypted chats, which are also far inferior in functionality.

I’ve never seen a pro-telegram propagandist, but you anti-telegram propagandists are swarming and very tiresome.

@bastion@feddit.nl
link
fedilink
English
71Y

lol.

  • post asks which app is preferred
  • a clear winner with lots of reasons why emerges
  • “propagandists!”

I dislike Signal because of the abandonment of SMS as an option. Without that, it’s on par with (not really ahead of) most other secure messengers. Session is pretty decent, and I am curious if SimpleX will take off.

Anyways. Not a Session fanboy by any means, but I cam still see that (given the two options asked about) session is the clear winner. But your take on this all is hilarious.

Ghazi
link
fedilink
31Y

@bastion @Infiltrated_ad8271 But Session doesn’t support SMS too. Why do you consider it superior if that’s the reason you dislike Signal ?

@bastion@feddit.nl
link
fedilink
English
11Y

Two reasons:

  • it’s not simply the fact that SMS is gone, it’s also the administrative decision that caused that. Session will likely have some gaffes administratively as they get larger, but for now, I don’t know of any I particularly dislike.
  • Session has greater anonymity.
Ghazi
link
fedilink
11Y

@bastion Anonymity is useful, sure. But if you’re going to use an IM app like the majority of people do, you’re going to use it to contact friends and family, which means that the account isn’t anonymous.

You should also know that Session lacks forward secrecy (a very important feature imo).

@bastion@feddit.nl
link
fedilink
English
11Y

True. And although perfect forward secrecy isn’t a huge deal, it is potentially useful, if (for example) you have the encrypted messages backed up, then deleted from your phone, and someone gets access to both your backup and secret key (somehow).

If a hacker had access to the private long-term key, though, odds are extremely high that they have access to the message database of decrypted messages that signal keeps around to show your history - so kinda moot at that point. There are some useful niche cases for it, though.

Not a dealbreaker for my by far.

Ghazi
link
fedilink
01Y

@bastion > message database of **decrypted** messages that signal keeps around to show your history

What are you talking about ? Where did you get this from ?

Infiltrated_ad8271
link
fedilink
2
edit-2
1Y

I don’t like to participate in pointless discussions, but I’ll at least clarify it to avoid more silly replies.

-I call the other user a propagandist just for using the other user’s language, obviously the correct thing would be hater.
-The article is crap and I criticize the nonsense of praising it. This is not a defense of telegram, nor being against criticizing it.
-I called them bots in a mocking way for their conclusion to the article.

quaff
link
fedilink
English
111Y

We are in a privacy community. A privacy community with a specific website that makes recommendations on messenger apps. And yet, OP is asking for an opinion on comparisons between Signal (recommended by the guide) and Telegram (which isn’t even in the guide). Why would this be necessary if they weren’t thinking Telegram could be a private and secure messenger too? Even tho it’s not recommended on privacy guides. Draw whatever conclusions you want to fit your own world view. But just because others do so differently, doesn’t mean they’re bots. That’s a very lazy way to view the world. And that is also just my opinion. If you wanted to discuss the points of the article, I’m down. But if you’re coming in here to be reductive because you have a differing opinion, then this is all I’m going to be saying to you.

Hot Saucerman
link
fedilink
English
41Y

I guess it’s too hard to consider real people with real opinions might populate a niche website with small userbase and an active anti-advertising attitude.

I guess it’s also too hard to just look at an account and decide if it seems spammy or if it seems like a real person, and easier to just cast aspersions because they… annoyed you?

Anyway, thanks for standing up for us both.

@Oisteink@feddit.nl
link
fedilink
English
21Y

No idea how they use GPS for push messages, but is the thing that you need to select encrypted chat and that it’s not e2ee otherwise?

Hot Saucerman
link
fedilink
English
41Y

GPS was short for Google Play Services, not Global Positioning System. Sorry.

Signal is always encrypted by default. Same with Matrix. Telegram you have to choose for it to be an encrypted chat, and you can’t do encrypted group chats.

@Asudox@lemmy.world
link
fedilink
English
11Y

deleted by creator

@Oisteink@feddit.nl
link
fedilink
English
31Y

Ah - I’m on iOS but should have figured that out. https://emteria.com/blog/what-is-google-push-service

I still get shit video on signal, but for texts it’s ok. I use both - and don’t really trust any of them

plz1
link
fedilink
English
111Y

Since when does Signal not require a phone number?

Hot Saucerman
link
fedilink
English
91Y

Earlier this year. It no longer functions as an SMS service and you now have a username instead. I think the changeover was in March or April.

@Asudox@lemmy.world
link
fedilink
English
11Y

Usernames still aren’t a thing. What are you talking about?

Usernames have not been released yet. When they are released, phone number will still be required for registration, but you will be able to hide it from other people on Signal.

quaff
link
fedilink
English
231Y

Hm? Not sure which Signal you’re using. But it very much still requires a phone number to use. Usernames are not available just yet. There’s activity related to usernames in the GitHub repository, but no release yet.

They did remove the ability to send and receive SMS from their Android app. That was about last year or so.

https://signal.org/blog/sms-removal-android/

plz1
link
fedilink
English
31Y

I knew about the SMS thing (Android only), but thought they had yet to release user names as a feature. I see no settings related to user names on iOS. The SMS retirement was to remove the ability to use Signal to replace an SMS app on Android.

Hot Saucerman
link
fedilink
English
31Y

Forgive me, you’re correct. I stopped using it when it dropped SMS, because I had only ever able to get people on it through SMS, but at the time had read plans about eventually dropping the phone number requirement. I mixed those things up in my head.

From what I understand, they’re fully invested in dropping the phone number requirement though, and some more googling says that they’ve had versions of Signal PNP (phone number privacy) running for a while now.

You’re correct, that part hasn’t actually changed over yet, but it’s in the works.

@bastion@feddit.nl
link
fedilink
English
21Y

Hehe! I was just bitching about them dropping SMS (and a crapton of users) in another post.

It used to be the perfect app to get people into secure messaging. Now it’s just another chat app to most people, who tend to think “who really cares when you’ve got WhatsApp etc, that actually have users? Why would I want some obscure app on my phone? More shit to think about.”

They do not at this time intend to drop the phone number requirement, as they see it as an anti-spam measure. Meredith Whittaker has said as much. Phone number privacy is a project independent of requiring phone number at signup, and it just prevents other users from seeing your number.

plz1
link
fedilink
English
31Y

It is planned, and “in the works” for at least two years at this point. It’ll happen, eventually.

Create a post

In the digital age, protecting your personal information might seem like an impossible task. We’re here to help.

This is a community for sharing news about privacy, posting information about cool privacy tools and services, and getting advice about your privacy journey.


You can subscribe to this community from any Kbin or Lemmy instance:

Learn more…


Check out our website at privacyguides.org before asking your questions here. We’ve tried answering the common questions and recommendations there!

Want to get involved? The website is open-source on GitHub, and your help would be appreciated!


This community is the “official” Privacy Guides community on Lemmy, which can be verified here. Other “Privacy Guides” communities on other Lemmy servers are not moderated by this team or associated with the website.


Moderation Rules:

  1. We prefer posting about open-source software whenever possible.
  2. This is not the place for self-promotion if you are not listed on privacyguides.org. If you want to be listed, make a suggestion on our forum first.
  3. No soliciting engagement: Don’t ask for upvotes, follows, etc.
  4. Surveys, Fundraising, and Petitions must be pre-approved by the mod team.
  5. Be civil, no violence, hate speech. Assume people here are posting in good faith.
  6. Don’t repost topics which have already been covered here.
  7. News posts must be related to privacy and security, and your post title must match the article headline exactly. Do not editorialize titles, you can post your opinions in the post body or a comment.
  8. Memes/images/video posts that could be summarized as text explanations should not be posted. Infographics and conference talks from reputable sources are acceptable.
  9. No help vampires: This is not a tech support subreddit, don’t abuse our community’s willingness to help. Questions related to privacy, security or privacy/security related software and their configurations are acceptable.
  10. No misinformation: Extraordinary claims must be matched with evidence.
  11. Do not post about VPNs or cryptocurrencies which are not listed on privacyguides.org. See Rule 2 for info on adding new recommendations to the website.
  12. General guides or software lists are not permitted. Original sources and research about specific topics are allowed as long as they are high quality and factual. We are not providing a platform for poorly-vetted, out-of-date or conflicting recommendations.

Additional Resources:

  • 1 user online
  • 8 users / day
  • 30 users / week
  • 110 users / month
  • 1.09K users / 6 months
  • 1 subscriber
  • 660 Posts
  • 11.1K Comments
  • Modlog