this post was submitted on 20 Aug 2023
-1 points (0.0% liked)

Privacy

31893 readers
581 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

Many in the crypto and privacy community mistakenly trust Telegram because it's "end to end encrypted", but there are huge issues including not hiding the metadata, censorship, centralization, and phone numbers.
Send this video to your friend that asks why you won't join: https://video.simplifiedprivacy.com/why-telegram-sucks/

top 3 comments
sorted by: hot top controversial new old
[–] [email protected] 1 points 1 year ago* (last edited 1 year ago) (1 children)

Wow, not to pick on the narrator, but this comes off like the worst small town used car dealership TV advertisement I've ever seen.

Here's a real rundown I've put together over the years:

Pavel Durov's argument is that there should be a high functioning UI/UX experience for "non-secure" communication, and when you need it there's something much closer to Signal's very secure client-to-client encryption.

Arguably Telegram secret chats are even "close enough" to cloud chats an adversary might not notice you're doing the "super secret things" (making it harder to identify what to target).

MTProto Cloud: https://core.telegram.org/file/811140746/2/CzMyJPVnPo8.81605/c2310d6ede1a5e220f

MTProto Secret (Wrapped in MTProto Cloud): https://core.telegram.org/file/811140633/4/hHw6Zy2DPyQ.109500/cabc10049a7190694f

They also provide verified builds even on iOS (though it's a bit of a hack, not "really" quite the same thing).

The only things that can really be said about Telegram's secret chat crypto are that:

  1. It's not "the default"
  2. It's their own crypto (i.e., they broke "rule #1" and "rolled their own")

Ultimately though, it's been just shy of 10 years since Telegram entered the scene, and nobody has actually broken Telegram crypto in any meaningful way -- AFAIK, to this day. Still, there are hypothetical holes in the crypto when scrutinized vs something like signal. So, is it as good as Signal or Threema? Eh, probably not, is it good enough for the average person that isn't target by a nation state? I'd say probably.

[–] [email protected] -1 points 1 year ago (1 children)

I think you missed the most important part: all accounts are tied to a phone number

[–] [email protected] 1 points 1 year ago* (last edited 1 year ago)

Except that's not even true... https://www.livemint.com/technology/apps/telegram-brings-new-update-no-phone-number-needed-for-sign-up-more-features-11670403019183.html

And for most people, it doesn't matter. It really doesn't. I'm not even going to argue about that. I personally couldn't care less about instant messaging with anonymity; anonymity and private are completely separate concerns.