this post was submitted on 29 Jan 2025
90 points (96.9% liked)

Asklemmy

44602 readers
1212 users here now

A loosely moderated place to ask open-ended questions

Search asklemmy πŸ”

If your post meets the following criteria, it's welcome here!

  1. Open-ended question
  2. Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions. Assume best intent and be excellent to each other.
  3. Not regarding using or support for Lemmy: context, see the list of support communities and tools for finding communities below
  4. Not ad nauseam inducing: please make sure it is a question that would be new to most members
  5. An actual topic of discussion

Looking for support?

Looking for a community?

~Icon~ ~by~ ~@Double_[email protected]~

founded 5 years ago
MODERATORS
 

Greetings!

A friend of mine wants to be more secure and private in light of recent events in the USA.

They originally told me they were going to use telegram, in which I explained how Telegram is considered compromised, and Signal is far more secure to use.

But they want more detailed explanations then what I provided verbally. Please help me explain things better to them! ✨

I am going to forward this thread to them, so they can see all your responses! And if you can, please cite!

Thank you! ✨

(page 2) 23 comments
sorted by: hot top controversial new old
[–] Fake4000 7 points 1 day ago

The fact that telegram operates in a country that scores 18/100 on global freedom and 30/100 on internet freedom.

https://freedomhouse.org/country/united-arab-emirates

[–] flux 5 points 1 day ago* (last edited 1 day ago)

I'm not an expert but I'll use this analogy.

Signal is you meeting a person who gives you secure devices. This person then can only ever provide the following information to someone else. From Signal website. "The phone number. the date and time a user registered with Signal and the last date of a user's connectivity to the Signal service." Only your device and your friends device can read the messages. It goes direct from you to them. The only way to read any message is having the device.

Telegram is like you making an agreement with another person. By default messages are encrypted but go to the other person for decryption before going to your friends device. This other person Telegram has and will give the phone number, messages, serverlogs, dates to legal entities by request. Now there is an option to bypass this person by using "secret chats" . This will make it so the message is directly from your device to their device. Telegram can't read messages but as I understand they can still potentially have metadata, server logs of when messages are sent, how many, what device they are sent from. Bottomline is they have activity logs Signal can only provide the date you signed up and the last time you used the app. Not only that but just being on the Telegram platform which allows bots makes you a target. Bots will contact you like spam. Sending you harmful links, etc.

Almost every security person I've ever read says. "I use Signal". Why wouldn't you go with the service that by default has end to end encryption? Telegram makes it a option you have to select for each person. Both use your phone number.

These are very basic descriptions. I'm Happy to remove or update if I got anything wrong.

More signal encryption info

[–] [email protected] 1 points 23 hours ago (1 children)

I won't be popular in this thread, but I don't fight this battle anymore. Telegram beats Signal in virtually every aspect of user experience. If a person is unlikely to be convinced that e2ee is worth taking all the UX hits, I don't try anymore.

[–] Zak 2 points 23 hours ago (1 children)

I keep seeing this claim, but I may be too much of a computer nerd to notice when using them both. What does Telegram do better and how?

[–] [email protected] 2 points 23 hours ago* (last edited 22 hours ago) (1 children)

I may be too much of a computer nerd to notice when using them both

That's probably true of just about everyone on Lemmy.

What does Telegram do better and how?

User experience, like I said. How many less technically inclined people do you know who will understand why they have no message history in Signal after moving devices? Yes, they could have kept it if they'd had backups enabled and moved the archive over and restored from it, but it's too late now, their entire contact list has been notified that their safety number's changed (another aspect we get to attempt to explain). It's a bummer.

[–] Zak 1 points 3 minutes ago

Message history is a valid point. Signal just announced they're fixing it.

Safety number change notifications are probably necessary to maintain Signal's high level of security. The above device linking improvements should make them less frequent, though I'll concede some might consider that a worse UX than an insecure chat with no such notifications.

[–] [email protected] -1 points 1 day ago (2 children)

Signal needs a phone number.

I don't want to give them one. Also I don't have one.

Oh my, that seems to eliminate Signal as an option.

Next?

[–] [email protected] 2 points 1 day ago* (last edited 1 day ago) (1 children)

Apparently Signal still requires it, though you no longer must reveal it to others.

Wired last year: Signal Finally Rolls Out Usernames, So You Can Keep Your Phone Number Private

Those features, which WIRED has tested, are designed to allow users to conceal their phone numbers as they communicate on the app and instead share a username as a less-sensitive method of connecting with one another.

Whittaker says that, for better or worse, a phone number remains a necessary requisite as the identifier Signal privately collects from its users.

[–] [email protected] 1 points 20 hours ago

Apparently I still don't have one. Haven't had a phone number for about a decade. No SMS spam, no "survey" calls; nothing.

load more comments (1 replies)
[–] TokenBoomer -1 points 1 day ago

You don’t have to learn Morse code.

load more comments
view more: β€Ή prev next β€Ί