Live data from Hacker News

Poll: Switching from WhatsApp

news.ycombinator.com

61–70 of 972 posts

Re: Poll: Switching from WhatsApp

#61
post #42

Why not came back to plain old email? The email delivery system is decentralized and can support p2p encryption. You can have "chat-like" user experience with apps like Mailtime ( https://mailtime.com/ )

The same features are just not available. And messages may arrive sometime between 2 second and 2 days with no indication what happened. (Yes, highly skewed towards 2s, until you get graylisted)

Re: Poll: Switching from WhatsApp

#62

Telegram is a downgrade in terms of both security and privacy. Just leaving the comment for people who consider it. It's an excellent platform and a joy to use but I personally refuse to use it.

> Telegram is a downgrade in terms of both security and privacy Care to elaborate? Haven't heard/read anything that points in that direction. Except for the "nearby people" feature but that its up to you to enable.

I trust Bruce Schneier on this stuff and he advises against telegram: https://www.schneier.com/blog/archives/2016/06/comparing_mes...

Also in the comments on that "article" some people link against a cryptoanalysis of telegram, which can be found here: http://cs.au.dk/~jakjak/master-thesis.pdf

Someone else also mentions that telegram stores message logs on their server, if that's true it is definitely a big no no.

Re: Poll: Switching from WhatsApp

#63
post #31

Earlier quoted context omitted.

When they run out of money to pay for servers they can sell assets as they please to whomever they please.

Which app is immune to this?

Moxie doesn't care about sellout money. As I understand it he wants to run signal as a lifestyle business, and he has private donors keeping everything afloat. I'm not sure if it'll stay independant if Moxie ever leaves, but hopefully there's a stable org structure. Source: The JRE podcast he did a couple months back.

Also if they ever sell out, the server & clients are completely opensource. It wouldn't take much for someone else to fork the whole thing and run a competing service if we ever need to.

Re: Poll: Switching from WhatsApp

#64
NOTE: I don't know what Zom is so ignoring it in the below.

Viber, WhatsApp, Signal, Telegram, Threema and Discord are all built on the same paradigm: accounts tied to a single service and thus the inertia of network effect makes vendor lock-in a real problem when acquisitions happen or Terms of Service change.

Signal is in theory the "best" of these 5 options in the short-term, but it being open source is utterly irrelevant when you consider the network effect lock-in of a single-service model.

In fact, Telegram is probably a "more open" option given the portability its API provides. Openness vs privacy/security are entirely different concerns in isolation, but I believe openness is most important for providing a model upon which privacy can be sustained in the longer term.

Of course Matrix is the only truly long-term sustainable option of these. Encouraging users to move to any of the others will only lead to this discussion re-occurring down the line. And being ultimately more difficult as platform-switching fatigue intensifies.

Re: Poll: Switching from WhatsApp

#66
post #42

Why not came back to plain old email? The email delivery system is decentralized and can support p2p encryption. You can have "chat-like" user experience with apps like Mailtime ( https://mailtime.com/ )

People keep saying email has encryption, but in the rare cases when email is encrypted with pgp, only the contents of the messages get encrypted. Not the metadata. And apparently the metadata is the most valuable data for government snoops. They don't care as much what you've been saying, but knowing that you've been emailing back and forth weekly with some person of interest over the last 5 years is what they're really after.

Also pgp doesn't support any of signal's key ratcheting or deniability. And the web of trust leaks information publicly about who your contacts are! (And its vulnerable to Sybil attacks.)

Don't get be wrong, I love email and think its great. But it doesn't hold a candle to Signal when it comes to secure communication.

Re: Poll: Switching from WhatsApp

#67

Telegram is a downgrade in terms of both security and privacy. Just leaving the comment for people who consider it. It's an excellent platform and a joy to use but I personally refuse to use it.

If it's good enough for organised criminals and to anger various governments, it's good enough for me

Don't forget Apple pressured Telegram to remove rooms or be banned.

This type of pressure on centralized systems is exactly why it is unethical as technologists to suggest people centralize the internet.

When you choose to send friends to centralized systems you are voting for the internet to have all the problems and advantages of dictatorships.

When you support open decentralized protocols you get the problems and advantages of a democracy.

Dictatorships can move fast and make sweeping changes. Look at China.

Signal, Telegram, WhatsApp, iMessage are all examples of centralized walled gardens, aka dictatorships. They are all doomed to be co-opted into doing something you don't like at some point and you will have no recourse.

Meanwhile we have decentralized systems like like HTTP, SMTP, and Matrix. Yes they move slower, are more fragmented, need long periods of carefully discussed and rolled out protocol changes and many implementations and servers to all agree on those to function. Decentralized control is messy, and good UX takes longer to materialize, but that is how the internet was built, and how we kept it from being controlled by a single ISP/Browser like AOL.

If you want a modern e2e chat protocol that lets you use any client, server, operating system, or architecture you want and take your social graph with you when you change your mind on any of those things, where no one single entity can change the rules of the network for profit or other reasons... you are looking for Matrix.

Re: Poll: Switching from WhatsApp

#68
I use Telegram long before it became sort of mainstream and I haven't regretted that decision for a minute, minus their outages that started happening once every few months lately and are worrying.

Tried Whatsapp once, hated it, never tried again. Viber is even worse.

Telegram has been what an IM program should be, for years now (it gave me the vibe of my much beloved Miranda IM almost 20 years ago). I'd love it if they added more link previews (9GAG and Instagram previews stopped working almost a year ago and the functionality was never recovered) and even more keyboard shortcuts for full navigation without a mouse -- but even without these it's the most solid IM experience I ever had.

Maybe they are not as encrypted or protected in general as Signal. Maybe (but what do we know about Signal, save for a lot of claims?). But the fact that several governments and corporations demanded them to give access to various keys or to shut down channels is a testament that Telegram isn't as amateur in encryption and protection as the overly nitpicky HN audience would have you believe.

Re: Poll: Switching from WhatsApp

#69

Is Matrix a good alternative to Signal? I'm currently using Signal, but I'm not entirely satisfied. My major issues are that I don't like their stance on a couple of issues: third party clients are not allowed, mobile first and desktop is only synced, phone number required, and distribution only over the app stores. Also we frequently get "encryption errors" and everybody ignores them, this is worse than with SSH key…

matrix-synapse(server) suffers from performance issues[1], dendrite[2], the replacement should be resolving that but is currently in beta.

Apart from that it integrates fairly well with other networks through bridges.[3]

It can be self hosted and it federates, which is a pro. Not too sure about audits and security, it has improved much, when I started using it (2019) they didn't have login throttling[4] and shortly after that were breached.[5] Much has improved since.

[1] https://github.com/matrix-org/synapse/issues?q=is%3Aissue+is...

[2] https://matrix.org/docs/projects/server/dendrite

[3] https://matrix.org/bridges/

[4] https://github.com/matrix-org/synapse/issues/1452

[5] https://securityaffairs.co/wordpress/83751/data-breach/matri...

Post reply on HN