Beehaw
  • Communities
  • Create Post
  • search
    Search
  • Login
  • Sign Up
Andromxda 🇺🇦🇵🇸🇹🇼 ( Andromxda@lemmy.dbzer0.com )  to Privacy@lemmy.dbzer0.comEnglish · 1 year ago

Telegram is indistinguishable from an FSB honeypot

rys.io

external-link
message-square
14
link
fedilink
  • cross-posted to:
  • privacy@lemmy.ml
  • Tech@europe.pub
  • technology
49
external-link

Telegram is indistinguishable from an FSB honeypot

rys.io

Andromxda 🇺🇦🇵🇸🇹🇼 ( Andromxda@lemmy.dbzer0.com )  to Privacy@lemmy.dbzer0.comEnglish · 1 year ago
message-square
14
link
fedilink
  • cross-posted to:
  • privacy@lemmy.ml
  • Tech@europe.pub
  • technology
Many people who focus on information security, including myself, have long considered Telegram suspicious and untrustworthy. Now, based on findings published by the investigative journalism outlet ISt
alert-triangle
You must log in or # to comment.
  • cookie019 ( cookie019@lemmy.dbzer0.com ) 
    link
    fedilink
    English
    arrow-up
    4
    ·
    1 year ago

    For every smart educate person it is obvious that Telegram is honeypot created by Russian-Dubai oligarch

  • herseycokguzelolacak ( herseycokguzelolacak@lemmy.ml ) 
    link
    fedilink
    arrow-up
    4
    ·
    1 year ago

    Telegram is very successful in getting people off Meta’s ecosystem. It has open source clients and very good Linux support.

    This is why western media is obsessed with Telegram and spend a lot of time smearing it.

    • Andromxda 🇺🇦🇵🇸🇹🇼 ( Andromxda@lemmy.dbzer0.com ) OP
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 year ago

      Telegram literally stores all your messages, metadata, etc. in plain text on their servers. This means that it provides considerably worse security than even proprietary messengers, such as WhatsApp and Facebook Messenger. Telegram has an option for encrypted chats, but it’s not available for groups, lacks support for voice and video calls, and Telegram deliberately goes out of their way to make the experience of using encrypted chats as painful as possible.

      You’re even better off using WhatsApp, but if you actually want a good messenger, switch to Signal. It’s free and open source (both the clients and the backend server), developed by a nonprofit organization, and it’s basically the gold standard for encrypted communications.

      • herseycokguzelolacak ( herseycokguzelolacak@lemmy.ml ) 
        link
        fedilink
        arrow-up
        1
        ·
        1 year ago

        nothing you say will make me use a closed source app like whatsapp.

        • Andromxda 🇺🇦🇵🇸🇹🇼 ( Andromxda@lemmy.dbzer0.com ) OP
          link
          fedilink
          English
          arrow-up
          2
          ·
          1 year ago

          Literally no one here is advocating for the use of WhatsApp. Stop making up straw man arguments.

          • herseycokguzelolacak ( herseycokguzelolacak@lemmy.ml ) 
            link
            fedilink
            arrow-up
            1
            ·
            1 year ago

            Just above you said “You’re even better off using WhatsApp”.

            I will use Signal if Signal devs get over their hate of F-Droid.

            • Andromxda 🇺🇦🇵🇸🇹🇼 ( Andromxda@lemmy.dbzer0.com ) OP
              link
              fedilink
              English
              arrow-up
              1
              ·
              1 year ago

              You’re better off using WhatsApp compared to Telegram, but that’s a very low bar, and it absolutely doesn’t mean that anyone should use WhatsApp. Signal, Threema, Wire and SimpleX are far better options. I prefer Signal, because it’s very easy to use, the UI/UX is basically the exact same as on WhatsApp. It’s also free, unlike Threema, and uses either phone numbers or user names as identifiers, unlike SimpleX, which requires you to share a QR code. Signal is also the most popular of these messengers, so there’s a larger chance that someone is already using it.

              As for F-Droid: It’s not a good way of distributing such privacy/security-relevant apps like Signal. F-Droid doesn’t have certificate checks built in, thus the APK could easily be modified without the user ever noticing. Again, I don’t like Google, but you’re better off downloading Signal from the Play Store. The best option is to use Obtainium and automatically fetch the latest version of the Signal APK directly from their website https://signal.org/android/apk/ That way, you’re at least getting the app from an official source, built and signed by the Signal developers, not a random third party.

              You can use AppVerifier to verify the integrity of the downloaded app aginast the certificate fingerprint on the website.

              • herseycokguzelolacak ( herseycokguzelolacak@lemmy.ml ) 
                link
                fedilink
                arrow-up
                1
                ·
                1 year ago

                I don’t trust an app that tells me to download from Google Play. Sorry, not going to happen. Signal has too many red flags.

                • Andromxda 🇺🇦🇵🇸🇹🇼 ( Andromxda@lemmy.dbzer0.com ) OP
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  ·
                  1 year ago

                  I don’t trust an app that tells me to download from Google Play.

                  So almost any Android app in existence?

Privacy@lemmy.dbzer0.com

privacy@lemmy.dbzer0.com

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !privacy@lemmy.dbzer0.com

Welcome! This is a community for all those who are interested in protecting their privacy.

Rules

PS: Don’t be a smartass and try to game the system, we’ll know if you’re breaking the rules when we see it!

  1. Be civil and no prejudice
  2. Don’t promote big-tech software
  3. No apathy and defeatism for privacy (i.e. “They already have my data, why bother?”)
  4. No reposting of news that was already posted
  5. No crypto, blockchain, NFTs
  6. No Xitter links (if absolutely necessary, use xcancel)

Related communities:

Some of these are only vaguely related, but great communities.

  • !opensource@programming.dev
  • !selfhosting@slrpnk.net / !selfhosted@lemmy.world
  • !piracy@lemmy.dbzer0.com
  • !drm@lemmy.dbzer0.com
Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 91 users / day
  • 796 users / week
  • 1.03K users / month
  • 3.17K users / 6 months
  • 32 local subscribers
  • 6.24K subscribers
  • 1.01K Posts
  • 5.3K Comments
  • Modlog
  • mods:
  • Otter ( otter@lemmy.ca ) 
  • shaytan ( shaytan@lemmy.dbzer0.com ) 
  • BE: 0.19.15
  • Modlog
  • Legal
  • Instances
  • Docs
  • Code