I see i can find a foss version on f-droid, and that’s something not a lot of social networks can have, i don’t really like all the crypto bullshit and ads testing they’ve been up to lately, but still looks better to me compared to what Reddit have done lately or what other platforms have done in these years…

I don’t know about their privacy feature, but i wouldn’t trust their chat as for as far as i knew they were not end to end encrypted some time ago (except for secret chats).

Anyway it still looks like one of the at least still decent platforms out there, or am i wrong?

39 points

I put it in the same boat as WhatsApp. Better than SMS, but I’ll be sticking to Signal.

permalink
report
reply
19 points
*
Removed by mod
permalink
report
parent
reply
13 points

+many for Signal.

permalink
report
parent
reply
3 points
*
Deleted by creator
permalink
report
parent
reply
30 points

Telegram is neither private nor secure. Its not encrypted bu default. Normal texts as well as group chat is stored unencrypted on its servers.

For everyday use with friends, family and work (assuming these folks already have your number), Signal may be the best thing out there as its open source both on server and app levels. Signal is also end to end encrypted (E2EE) with decryption keys stored on device.

For anonymous communications Session and SimpleX may be better as they are both E2EE and doesnt requie a phone number as an identifier.

Just chuck out Whatsapp, Telegram and all the other closed sourced garbage apps.

permalink
report
reply
5 points

What about Matrix?

permalink
report
parent
reply
5 points

Unless you want to run communities there I wont bother with it. I feel everything from setting up accounts (anonymously) to getting people to join, works better in SimpleX and Session. I’d even be happy using SimpleX as my everyday messenger. Matrix is a little clunky and the fact that all conversations get duplicated on the primary Matrix servers is cause for concern.

With Signal and SimpleX, servers are used only for relaying messages beteeen users - messages which are encrypted on the device.

In the end you are going to be sacrificing something, and the last thing you’d want to sacrifice is privacy and security.

If I was pushed to list my go to, it’ll be Signal for chats with people I know: because its open source, battle-tested against adversities, and can be set up by anyone who understands how ro use Whastsapp / Telegram.

For communitties (and even as a daily text solution beteeen collaborators or anyone you dont want to exchange numbers with), I’d use SimpleX as it has a lot of in-built anonymity and decent privacy (so far - its a fairly new project).

Theres just too much fuzziness round Matrix for anyone to trust it.

permalink
report
parent
reply
2 points
*
Deleted by creator
permalink
report
parent
reply
-1 points

Signal is also end to end encrypted (E2EE) with decryption keys stored on device.

And how decryption key gets to other device 👀?

permalink
report
parent
reply
3 points

It’s a “basic” Diffie-Hellman key exchange that’s been a solved issue since before mobile phones were even invented[0].

Think of it like this:

I give you a lock that only I have they key to open it. You can secure (read encrypt) any message with it by placing it in a box and locking it with my lock, send me the box and - because I’m the only person in the world with the key to open it, we can say you’re sending me a secured (encrypted) message. It doesn’t matter if anyone can intercept this lock because all they’ll be able to do is send me secure messages from their inbox. Now, in the digital world this lock we’re giving each other is a cryptographic “public key” that you can lock a million things with (messages, images, videos) and send them to me via the internet. We can thus exchange public keys and securely message each other.

I’ve simplified it a lot, as Signal actually uses something called the “Extended Triple Diffie-Hellman” (X3DH) [1], but I hope this explains how it works. You can read more about it here [2]

[0] https://studybuff.com/when-was-diffie-hellman-key-exchange-invented/#When_was_Diffie-Hellman_key_exchange_invented

[1] https://www.signal.org/docs/specifications/x3dh/

[2] https://security.stackexchange.com/questions/45963/diffie-hellman-key-exchange-in-plain-english

permalink
report
parent
reply
-2 points

Signal is also end to end encrypted (E2EE) with decryption keys stored on device.
And how decryption key gets to other device 👀?

permalink
report
parent
reply
12 points
*

The company’s CEO is Pavel Durov, the very clown who built russian alternative to Facebook, VKontakte, and then practically sold it to russian government with all it’s users. And russian government, being itself, repressed anyone who liked “wrong” stuff there. So, Durov being no stranger to selling things to governments, in my opinion, deserves zero trust.

permalink
report
reply
10 points

He didn’t voluntarily sell it to the Russian government.

permalink
report
parent
reply
13 points

Didn’t he basically get ousted and kicked out of Russia since he didn’t wanna sell VK?

permalink
report
parent
reply
3 points

Yes

permalink
report
parent
reply
4 points

You don’t know, what are you talking about.
https://lemmy.world/comment/1556530

permalink
report
parent
reply
-1 points

I’m perfectly aware of what I’m talking about. He lost control of company’s shares to government-affilated people and they fired him. What an unpredictable turn of events. I don’t really care if it happend due to stupidity or malice, considering the amount of public stunts he pulled off at the time, I doubt you can call his course of action straightforward.

Even when he was fired, they did it with his own resignment notice he submitted as April Fool’s joke. The guy is a literal clown, I have no idea why you’d entrust him with your data.

permalink
report
parent
reply

Being encryption needs to be enabled highlights how Telegram is trying to increase users who want privacy & security but don’t exactly know how to go about it. Granted, the option makes it a step up above sms, but that’s not saying a lot…

permalink
report
reply

Just use Signal or Matrix.

permalink
report
reply

Privacy

!privacy@lemmy.ml

Create post

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

  • Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post
  • Don’t promote proprietary software
  • Try to keep things on topic
  • If you have a question, please try searching for previous discussions, maybe it has already been answered
  • Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
  • Be nice :)

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

Community stats

  • 7.3K

    Monthly active users

  • 2.7K

    Posts

  • 74K

    Comments