3 ms·
Can you do your research before posting statements like these? They hurt a messenger that has done a great deal of good for protestors and other political rebel
by emptysongglass 6y ago
Can you do your research before posting statements like these? They hurt a messenger that has done a great deal of good for protestors and other political rebels.
If I take the kindest interpretation of your statements, they are factually wrong in whole but true in part. That is, the Telegram server code is closed source, yes. But Telegram clients and the protocols they use to "speak" are all either open source or documented where source code isn't applicable (MTProto 2). What's more is that reproducible builds are available for Android and iOS.
There's nothing really wrong with MTProto 2. You appear to be pointing to a very long time ago when MTProto 1 was in use. MTProto 2 is based on standard crypto primitives and is well-documented. No vulnerabilities have been announced by security researchers in the years it's been in use. It is ok that not everyone uses the Signal Protocol. Not everything needs to descend from Moxie.
I run my own Matrix homeserver and it's great. I also have it rolled out to all our employees at my workplace. It's an excellent choice. I also use Telegram because I appreciate its' balance of features and security. All of my family members love Telegram and that makes me happy because they're not using a Facebook product.
The way Matrix handles keys for E2E by default is not great: it's very easy for users to lose the key encryption phrase or not care and throw it away. I'm not sure how much better we can make E2E by default.
I am completely ok with turning on Secret Chats as I need them for chats I know to be disposable. My message history is extremely precious to me and Telegram does an admirable job protecting it and making it searchable for later reference. It truly is a sort of outboard brain for me.
This does not need to be a turf war between Signal people and Telegram people. I have expressed many times on the Telegram subreddit the need to come together in our use of better tools for communication than the incumbents. A person choosing Telegram or Signal over WhatsApp and Discord is a huge win for all of us.
- snvzz 6y agoI do not like it (I prefer Matrix, where accounts are not tied to phone lines), but I am ok with Signal, as it is open source, it is always e2ee and using it really offers privacy. Telegram, on the other hand, is not open source, nor does it do e2ee by default. Having to explicitly select "new secret chat" ultimately means the non-technical inclined can and will use it wrong, getting no privacy whatsoever. Therefore, I cannot support the idea that Telegram is any better than WhatsApp or Discord. Regarding "open protocol", I suspect that what you think it means is not what an open protocol actually is.
- jayp1418 6y agoGood thing. Signal coming up with usernames
- snvzz 6y agoIndeed. I found this: https://signal.org/blog/signal-pins/ https://signal.org/blog/signal-pins/ But as far as I can tell, no steps have been taken since; In the downloads page, it warns me that for the Desktop version to work, I need to create an account with my phone first. I'll keep an eye out.
- hiq 6y ago> My message history is extremely precious to me and Telegram does an admirable job protecting it How would you know without E2EE? A Telegram sysadmin could copy all your messages from non-secret chats and you would never know. The lack of E2EE is also why many (including security experts) recommend WhatsApp over Telegram.
- emptysongglass 6y agoI ought to have qualified "protected" (or used a more suitable word): protected in the sense that it has stayed intact no matter how many devices I have moved between.