171–180 of 241 posts
Earlier quoted context omitted.
That's a stupid reason. He's not dead (or at least imprisoned) yet because USA doesn't have an extradition treaty with Russia. What does a chat app have to do with it?
Why would he need to be extradited to the USA in order to be killed?
My concern is not about my data being stored on their servers. My concern is about having having marketing data being sold to third parties in order to target advertising at me, just as when you leave "third party cookies" active on your browser. That is creepy and invasive. Would Zuckerburg ever do such thing?
Earlier quoted context omitted.
> The way I've been presenting it to people is that Telegram can look at more data than WhatsApp can. But WhatsApp will use the data they have more than Telegram will. That's the tradeoff. I think you should look at the odds of that "can" turning into a "will" over time. After an acquisition, or a change in business fortunes, or a change in leadership...
It will happen. So far Telegram has developed without consideration for revenue, but it cannot last too long. According to his own numbers [1], Durov's entire net worth [2] can only sustain Telegram for about a decade. [1] https://t.me/s/durov/142 [2] https://www.forbes.com/profile/pavel-durov/
Earlier quoted context omitted.
> Everything is end-to-end encrypted by default, so you know nobody is collecting your data. I think it's wise to remember that what happens on the other "end" is outside of your control. If the other person in the conversation stores chat backups unencrypted you're still at risk, and there's not much you can do about it.
I believe you have self-destroy timers in Signal. Perhaps those help.
What prevents Google from replacing Signal on the Android Application store with their custom and backdoored version ? Can we check a hash or something ? Does the signal foundation do that on a regular basis ?
Well in the case of Telegram, you can trust, that they store your data on their server, because they say so. And it is convenient, because you can just switch your smartphone and still access all your chathistory, without having to manually backup/restore. But Telegram in general does not have a business model yet, so just assume, that one day, they want(or have) to cash out. Signal on the other hand is a non-profit…
Signal’s claim to fame here is that they were subpoenaed in 2016 and could only supply account creation and last connection times: > The American Civil Liberties Union announced Tuesday that Open Whisper Systems (OWS), the company behind popular encrypted messaging app Signal, was subpoenaed earlier this year by a federal grand jury in the Eastern District of Virginia to hand over a slew of information—"subscriber na…
Signal may have only supplied that metadata at the time. But what I am concerned about is that if Signal is US-based, couldn’t the state demand Signal’s app signing key via a NSL, and couldn’t that signing key then be used for targeted attacks by which someone of interest gets a Signal app upgrade that is malicious (while everyone else gets the non-malicious app)? I admit to being somewhat unfamiliar with Android dis…
Earlier quoted context omitted.
Curious. Is there an easy way to validate the code running on my phone is exactly the same code available on Github (here: https://github.com/signalapp ) ?
"Easy" is a moveable feast. Your phone is running an APK, which is a bunch of signed code. You don't have the keys to sign such an APK yourself, but you can get tools that will tell you exactly what's inside the one you have. I believe the Java source in GitHub is designed to be capable of a reproducible build, where you get the exact same Java binaries out as Signal's own builders did and thus you can compare that t…
Still, years ahead anything else that actually have users. The server is mostly 100% closed source. There's one open source that you can host, but it's widely believed to not be even close to the one they use.
I think only matrix is fully open and p2p.
It's important to note that Telegram does store all your data by default as they do not enable E2EE for everything like Signal does. So if you're under the assumption that they don't, this is incorrect. Telegram, for all intents and purposes, is about as secure as using Facebook. The best you can do with Telegram is hope they don't sell out or get compromised at some point in the future, because all your private comm…
Yea, I believe telegram "secret chats" are E2EE and also have auto-destruct capabilities.
Earlier quoted context omitted.
I believe you have self-destroy timers in Signal. Perhaps those help.
Snapchat was based around that and people still copied content. If someone can read it, then they can copy it.
Wickr does "screenshot notification" somehow, so now I occasionally get sent photos taken of phones showing "private" Wickr messages...