Live data from Hacker News

Pavel Durov: "You'd have to be braindead to believe WhatsApp is secure in 2026"

twitter.com

1–10 of 19 posts

Re: Pavel Durov: "You'd have to be braindead to believe WhatsApp is secure in 2026"

#3
WhatsApp by default exports your private key to Google Drive. If you have not done this, probably your conversation partner did.

If neither of you have done this, don't worry the client side code is so sloppy there will be a zero click RCE that can steal all your chats anyway.

Re: Pavel Durov: "You'd have to be braindead to believe WhatsApp is secure in 2026"

#4
I would be highly skeptical about Telegram as well. If I would need to select either Whatsapp or Telegram, Whatsapp would be really easy choice for me, considering the background of Durov. For some reason, Telegram is extremely popular in Russia and still has managed to avoid goverment bans.

Re: Pavel Durov: "You'd have to be braindead to believe WhatsApp is secure in 2026"

#5
post #3

WhatsApp by default exports your private key to Google Drive. If you have not done this, probably your conversation partner did. If neither of you have done this, don't worry the client side code is so sloppy there will be a zero click RCE that can steal all your chats anyway.

Wow, good for you, you can make A LOT of money!! https://bugbounty.meta.com/

Re: Pavel Durov: "You'd have to be braindead to believe WhatsApp is secure in 2026"

#6
post #4

I would be highly skeptical about Telegram as well. If I would need to select either Whatsapp or Telegram, Whatsapp would be really easy choice for me, considering the background of Durov. For some reason, Telegram is extremely popular in Russia and still has managed to avoid goverment bans.

what is wrong with durov?

Re: Pavel Durov: "You'd have to be braindead to believe WhatsApp is secure in 2026"

#7
post #4

I would be highly skeptical about Telegram as well. If I would need to select either Whatsapp or Telegram, Whatsapp would be really easy choice for me, considering the background of Durov. For some reason, Telegram is extremely popular in Russia and still has managed to avoid goverment bans.

What's worse: Telegram's alleged accessibility to Moscow/FSB, or WhatsApp's proven spying and data selling to anyone?

Re: Pavel Durov: "You'd have to be braindead to believe WhatsApp is secure in 2026"

#9
post #4

I would be highly skeptical about Telegram as well. If I would need to select either Whatsapp or Telegram, Whatsapp would be really easy choice for me, considering the background of Durov. For some reason, Telegram is extremely popular in Russia and still has managed to avoid goverment bans.

Telegram isn't even encrypted, at least not in the sense of the on-by-default end-to-end encryption used by WhatsApp, iMessage and Signal. In reality its selling point is that your chat records are placed in foreign jurisdictions so your local police can't easily access them.

https://blog.cryptographyengineering.com/2024/08/25/telegram...

Ultimately the only way to be completely sure is to use an open-source app like Signal that you've either built yourself from source you've inspected; or sourced pre-built from someone you trust.

Re: Pavel Durov: "You'd have to be braindead to believe WhatsApp is secure in 2026"

#10
post #4

I would be highly skeptical about Telegram as well. If I would need to select either Whatsapp or Telegram, Whatsapp would be really easy choice for me, considering the background of Durov. For some reason, Telegram is extremely popular in Russia and still has managed to avoid goverment bans.

What's worse: Telegram's alleged accessibility to Moscow/FSB, or WhatsApp's proven spying and data selling to anyone?

Tough choice, but I would choose Whatsapp over FSB.
Post reply on HN