Email or username:

Password:

Forgot your password?
Michał "rysiek" Woźniak · 🇺🇦

#Telegram and #Durov are once again in the media, so I translated my May piece about the service to English:

Telegram is neither "secure" nor "encrypted"
rys.io/en/171.html

Calling Telegram "secure" or "encrypted" is misleading, and is journalistic malpractice.

Telegram itself seems to mislead about it on purpose.

Telegram's encryption protocol is suspicious and transmits cleartext device identifiers with every message.

They have been called out for it many times, and refuse to change.

102 comments
Michał "rysiek" Woźniak · 🇺🇦

Despite the claims that #Telegram never shares any data or metadata, there are relatively clear cases of them having shared metadata with an Indian court and German law enforcement.

There are strong indications, as reported by Wired, they might have shared message contents with the Russian government, targeting activists in Russia.

By default, Telegram chats do not use end-to-end encrypted mode aka "Secret Chats". End-to-end encryption is also completely unavailable for groups and channels.
🔗🔝

Despite the claims that #Telegram never shares any data or metadata, there are relatively clear cases of them having shared metadata with an Indian court and German law enforcement.

There are strong indications, as reported by Wired, they might have shared message contents with the Russian government, targeting activists in Russia.

simonboggis

@rysiek they are routinely reported as secure/encrypted when they are in the news - I saw several stories repeating this with the news of the arrest in France.

FediThing 🏳️‍🌈

@simonboggis @rysiek

Yeah, it is weird how articles about Telegram in mainstream press try to paint it as some kind of trusted privacy service.

Has Telegram PR department been briefing press in this way?

Michał "rysiek" Woźniak · 🇺🇦

@FediThing @simonboggis yes. Media is basically parroting Telegram's marketing language without giving it a second thought.

Rich Felker

@rysiek @FediThing @simonboggis Plus they have a cult of toxic fans who "correct" anyone who tries to set the record straight...

Hobson Lane

@dalias
*State sponsored* toxic fans (assets) on both sides of the Ukraine war
@rysiek @FediThing @simonboggis

FediThing 🏳️‍🌈

@rysiek

Possibly quite telling that the Russian government condemned the arrest so strongly. 🤔

Orca🌻 | 🏴🏳️‍⚧️

@rysiek@mstdn.social
I usually consider Telegram a social network (the big group and channel things) instead of "secure messenger".
Unfortunately those who use it as social network also tends to use it to chat privately, that's when things become worse ​:blobcat0_0:​

Schneckbert 🐌

@rysiek we also need to discuss security and privacy separately. I’ve seen so much “the encryption is so bad” but I have not found any information if it’s actually broken.

an then… the very difficult question about moderation - and with that, where censorship may begin.

there is however no doubt that telegram is very important for Ukraine and the people in danger as well.

Michał "rysiek" Woźniak · 🇺🇦

@waldschnecke it's important for Ukraine and people in danger because people choose to use it. We should guide them to safer alternatives instead, Telegram is putting people in harm's way.

I write about the encryption and why it is bad.

One of the main points is that Telegram is misleading people about it.

Secret Chats are unwieldy and limited, and have to be turned on explicitly for each contact separately – and thus almost nobody uses them.

But Telegram pretends everything is encrypted.

Schneckbert 🐌

@rysiek Don't get me wrong; I agree with you!
But the fact they grabbed the CEO, and all this new attention... By that standard they should get to other CEO's too.

Of course it's a choice; but we also know it's difficult to make people change. I deleted Whatsapp years ago, I have lost contacts because of it.
I can't imagine how it must be to live with the constant trauma of "I'm in the middle of a war-zone" - changing platform in that situation, is surely even more difficult.

Michał "rysiek" Woźniak · 🇺🇦

@waldschnecke

> By that standard they should get to other CEO's too.

Other CEOs of what kind of services?

Facebook, Instagram, Twitter? Yeah, probably there is some responsibility to consider for unencrypted social networks.

Signal? WhatsApp? Absolutely not, these are end-to-end encrypted internet messaging services, and the service providers have no access or control over the contents of conversations.

Telegram is a social network that pretends to be an encrypted IM.

Schneckbert 🐌

@rysiek That is exactly the question.
E2E encrypted can only be "out of the game" because nobody but the end parties know whats going on.
But "the governments" will only have a universal "apply cream to the whole body" answer to this.
#chatcontrol is a serious threat in europe - and this - what's now going on with Telegram is dangerous because of their stupid single answer.

Mia🏳️‍⚧️🌸(too hot for you)💋

@rysiek @waldschnecke

The question is also privacy against whom.

In Signal and Whatsapp you have the problem that your Phone number is known to anyone in a group chat, which is suuuuuuuper shit when you are a political activist because your phone number means that any police has your location and in germany you cannot even buy a phone number without your state ID.

So from a privacy standpoint Telegram is much much better then Signal, as long as Telegram does not work with the Authorities of your location.

The same is true if you date online, you absolutely do not want that these ppl get your phone number because this is much easier to abuse then some telegram username.

Also the privacy settings for telegram are _really_ good, you can decide who, even down to single persons, can see your pfp pic or a "public pfp" you can set - the same with online status etc.

I just whish telegram would encrypt messages by default end to end, really a shame that they do not, otherwise it would be the best thing out there.

@rysiek @waldschnecke

The question is also privacy against whom.

In Signal and Whatsapp you have the problem that your Phone number is known to anyone in a group chat, which is suuuuuuuper shit when you are a political activist because your phone number means that any police has your location and in germany you cannot even buy a phone number without your state ID.

Michał "rysiek" Woźniak · 🇺🇦

@m @waldschnecke

> In Signal and Whatsapp you have the problem that your Phone number is known to anyone in a group chat

Not in Signal anymore. They finally solved it:
signal.org/blog/phone-number-p

But agreed on privacy controls etc.

Jeder :neocat_floof: :neocat_flag_agender:

@rysiek @waldschnecke it has been partially fixed at best. You still can see the phone number in app versions from before the update.

Schneckbert 🐌

@rysiek @m Yup. About time. Now they need to make sign-up possible without a number at all please

Mia🏳️‍⚧️🌸(too hot for you)💋

@waldschnecke @rysiek

As long as Signal does not cooperate with local officials this would be also okay when not (like telegram) - but they do.

Which means that your activist group can be anonymized with a search warrant against signal.

signal.org/bigbrother/santa-cl

Also Signal is again a central service and it is much better to do this error not again und bring up the next big entity that can screw us over.

Schneckbert 🐌

@m @rysiek True. A question of threat-model to an extend?
Decentralized E2E is probably always better (at least I can't think of why not).
But it doesn't have much exposure. Like Deltachat, Matrix (there might be an encryption or metadata problem with matrix? (Have not read it yet: soatok.blog/2024/08/14/securit) and others.

Mia🏳️‍⚧️🌸(too hot for you)💋

@waldschnecke @rysiek

I use Stickers and Gifs quite extensively and a lot of ppl i know do this too.
And from the idk 5 or so clients i used only one has a solution that works good, but it had a super high frustration hurdle.

ppl just do not care about E2E, they care if their emotion they have can be easily represented and how much fun it makes to write with friends ... all Matrix clients fail miserably at this.

Schneckbert 🐌

@m @rysiek True. Also the clients are sometimes horribly laggy and slow (looking at you iOS Element...) These days user-experience needs to be good, otherwise you can't really migrate anyone but your hardcore-nerd-friends over.

Mia🏳️‍⚧️🌸(too hot for you)💋

@waldschnecke @rysiek

Funnily enough this is also a reason why i don't use Discord that often.

It is just not acceptable nowadays to press enter and your messages only appears after 2 seconds... and your client has layout recalculation errors.

b1_66er

@rysiek @m @waldschnecke this is the reason I stayed with telegram after moving away from whatsapp and trying alternatives years ago.. I wasn't even able to really send videos and such on signal back then in addition to other functionality I considered essential for an IM app. telegram had it all and so i stayed. Turning on e2e manually is annoying but not a deal breaker. Having a half functioning app like signal was back then is one. Still I will try signal again since it seems to have improved a whole lot

Schneckbert 🐌

@b1_66er @rysiek @m It definitely did improve a lot over the past few years yea.

Mia🏳️‍⚧️🌸(too hot for you)💋

@rysiek

The only really secure messenger is Matrix, but it is quite unusable.

The best client i have found is FluffyChat which is at least on par with WhatsApp all considered.

Sadly Telegram has by far the best UI, UX and Dev UX there is of all messengers, which is why i like to use it, also it is fast as heck.

Michał "rysiek" Woźniak · 🇺🇦

@m you might want to double check on Matrix though:
soatok.blog/2024/08/14/securit

Matrix is a decent IRC replacement, but a secure messenger it is not. I've always felt that encryption was bolted-on as an afterthought in it and that that will lead to tears, and as time goes by I get more and more proof of this.

Mia🏳️‍⚧️🌸(too hot for you)💋

@rysiek

I have recently and my experience was quite shitty and it is so bad that i cannot use it.

I posted about it a bit, the only thing that somewhat remotely is usable for me is FluffyChat and they do not support a lot of great accessibility stuff i want, like voice messages that you can convert to text easily, send quick videos, send your location for the next hour or have a "send without sound/ send when online" features.
And somehow it seems super slow in comparison with Telegram.

Michał "rysiek" Woźniak · 🇺🇦

@m yeah, the whole encrypted IM space is and has always been a clusterfsck. Sigh. :sad_cat:

FediThing 🏳️‍🌈

@rysiek @m

What do you think about XMPP with OMEMO?

Would be nice to have a decentralised alternative to Signal.

Mia🏳️‍⚧️🌸(too hot for you)💋

@FediThing @rysiek

I _love_ XMPP, I've run a long time a ejabberd server and it was really my favorite until now.

Especially this stuff is _fast_ and the extension system is just technically awesome.

_but_ no one uses it (ik ik WhatsApp but lets be real here, this is not XMPP as in "i use XMPP for IM")
and sadly the extension system makes it so complicated that no one has a real idea what is going on, has problems with writing others and is excessively complicated for wide adaption.

FediThing 🏳️‍🌈

@m @rysiek

So, if XMPP had more people using it, and it was easier to sign up, there's nothing fundamentally wrong with it?

Mia🏳️‍⚧️🌸(too hot for you)💋

@FediThing @rysiek

From a technical standpoint this is correct, if ppl would use the right Extensions as a collective minimum, but this will just not be the case until ejabberd etc. that these Extensions are the minimum and that they will not communicated with anything that has less.

And there is still the problems with clients, which would need to become really good for sticker (packs), voice messages, gifs, many images and videos and good search.

The XMPP clients i used back then where really fast and i liked them a lot to write with 3 friends and a bunch of bots but i think today, since facebook messanger, telegram and snapchat this is just no option anymore for it to be widely adapted.

@FediThing @rysiek

From a technical standpoint this is correct, if ppl would use the right Extensions as a collective minimum, but this will just not be the case until ejabberd etc. that these Extensions are the minimum and that they will not communicated with anything that has less.

And there is still the problems with clients, which would need to become really good for sticker (packs), voice messages, gifs, many images and videos and good search.

FediThing 🏳️‍🌈

@m

I've been playing around with Snikket as a potential way to get more people trying XMPP. Have you any views on it?

For what it's worth, the default Snikket app has OMEMO on by default, voice/video calls and voice messages, plus image/document/location attachments, but it doesn't have stickers or GIF pickers.

Michał "rysiek" Woźniak · 🇺🇦

@FediThing @m I don't have strong opinions on it other than when I tried XMPP the usability was always an issue.

I know there are projects like Snikket that made great strides on this front though.

🚲

@rysiek @m imho matrix is still better than telegram in this respect, and if not using a phone number or not having (latest) android/ios phone is important then i don’t know if there’s better choice.

(i know about jami and briar, but they fill a different niche and syncing messages between devices seem a hassle, if possible at all)

Arcane Alchemist

@rysiek @m Apparently, these issues were already known and not considered to be serious, which is why they remained.

mastodon.social/@krille@troet.

PS: If the issues were as basic and far-reaching as the blog insinuates, why are multiple countries using Matrix for their military and administration?

Michał "rysiek" Woźniak · 🇺🇦

@ArcaneAlchemist it's not "some blog", Soatok is a solid security researcher. Ignore his insight at your own peril.

Also, did you really just argue that surely a certain solution is perfectly fine because nation states use it? Really? :blob0w0:

Because that would make Microsoft Teams by far the best communication solution in the world.

@m

Arcane Alchemist

@rysiek @m I'm judging it as a "blog" because of the style of language and the disclaimer at the beginning. I'm not saying Matrix is perfect, but considering that (at least Germany) is actively contributing to it, I expect that they also have experienced security researchers looking at the codebase. To use your argument, why go through all that effort if they could have just used WebEx and Teams? Arguing that the devs and auditors are all incompetent is a bit far fetched, don't you think?

Michał "rysiek" Woźniak · 🇺🇦

@ArcaneAlchemist I am not arguing that "devs and auditors are all incompetent", please kindly refrain from putting words in my mouth.

People miss things all the time. The fact that A Large Organization or State is using a given tool does not necessarily mean they audited it. And even if they have, it doesn't mean there are no security issues.

I linked to a specific piece of information on specific security issues found by a good security researcher. Do what you will with that info. 🤷‍♀️

@m

Arcane Alchemist

@rysiek @m I was referencing what was written in the blog, where he explicitly warns against using Matrix and repeatedly questions the developers' competence.

blausand 🐟

@rysiek I also wrote about the factually bypassed Encryption in #Telegram on wp.blausand.net/telegram-vs-si
Although Telegram is still installed for those few contacts, I strongly recommend switching to #Signal and pushing relatives to abandon Wha'pp and Telegram.
Remaining question is of course: How do we protect the single safe solution from bad legislatory forces while it's neither decentralized nor open-sourced?

cherti

@blausand @rysiek

For the moment it might not be quite the challenge, because Signal just set up their system smarter than Telegram did, from what I remember.

Signal's legal strategy when it comes to government requests is to first fight it tooth and nail, but when they eventually have to cooperate, they do, via "ah well, there you go, take this bit of nothing". It's a consequence of their messenger design, but it means they are legally cooperative when required, and they have designed…

cherti

@blausand @rysiek

… their messenger accordingly, knowing they have to, which is a smart move.

Telegram's legal strategy, from what I remember, seemed to be to just plainly ignore any government requests, the consequence of which might just have happened to Durov now.

So I think Signal has already a pretty smart response to legislatory forces.

Of course there could always be a more authoritarian environment, but that would require a very straightforward mask-off approach in legislation. …

cherti

@blausand @rysiek

… While we shouldn't get complacent, I am carefully optimistic that we might manage to steer clear of any obvious legal constructs forcing more invasive measures from communications providers.

But the legal requirement of moderation has been there forever, and Telegram's design is such that it would in principal be possible. Telegram just ignoring anything in that regard might not have been the smartest approach.

That's of course just my superficial read on the situation.

Michał "rysiek" Woźniak · 🇺🇦

@cherti I feel it's worse. Telegram is a mostly unmoderated social network that is purposefully masquerading as and pretending to be an encrypted IM.

What this means is that its users are tricked into a false sense of security and thus put in harms way.

And it also means that the actually secure, encrypted IM services, like Signal, become tagged with Telegram's failings.

Pretty obnoxious if you ask me. But hey, how would Durov get a private plane otherwise, right?

@blausand

Gentleman of Leisure 🍉🏴🚩

@rysiek et all. This where I feel we might mention Vailid chat and as things get worse Reticulum. If they haven't been mentioned. I am still in the process of figuring them out (I'm an enthusiastic end user with little technical skill)

Michał "rysiek" Woźniak · 🇺🇦

@fiend_unpleasant I am pretty excited about Veilid and Veilid Chat, but Veilid Chat is a proof of concept at this stage.

Nsukami _ | 巣神

@rysiek Thanks a lot for sharing this, really 🙏

Andrzej Stamburski

@rysiek You might reconsider the part "Telegram vs Signal". Signal does not offer functionalities that are used by most users of Telegram. There is only "one small feature" in a "big Telegram shop" that can be replaced by Signal. The funny part is, that feature is not used by most users.

Michał "rysiek" Woźniak · 🇺🇦

@stamberry the whole point of this piece is that:

1. Telegram bills itself as "encrypted IM" (which it is not)

2. Telegram constantly compares itself to Signal on security and privacy, claiming Signal is less secure and private (which is also false).

I do believe it's fair game to take Telegram to task on this.

If Telegram wants to not be compared unfavourably to Signal on secure IM features, it is welcome to stop comparing itself to Signal on secure IM features. 🤷‍♀️

Andrzej Stamburski

@rysiek When you write a text about Telegram, you represent yourself, not "Telegram marketing team".
If today, you say "Signal is better than Telegram", to people who use Telegram, to join "groups" and "channels" with some kind of info, are you clarifying confusion or just adding to it?
What will they think, if they follow your advice?

Krzysztof Sakrejda

@rysiek do they just make money by being a leaky crypto-fetish app

Brandon 🇨🇦😷5×💉

@rysiek

> Claiming that “Telegram is encrypted” is like claiming that pizza is a healthy food, because there’s a slice of tomato on it.

***chef's kiss***

Thank you for translating the article into English. It was very informative.

NextGraph

@rysiek It is even worst than that, as you detail it in the article. By default, the messages are not sent E2EE at all. They are just encrypted by the TLS connection to the Telegram servers. That's all. And you can imagine that of course most of the surveillance agencies of the west, have the private keys of those TLS certificates. So the question remains about the true motives of the US+FR authorities in arresting him.

Noxy 🐾

@rysiek Not to mention their end to end encryption, as flawed as it is, isn't even available on desktop clients. Huge hassle to deal with chats that only appear on my phone.

Arsimael Inshan

@rysiek That's why I don't share important personal data via telegram. Telegram is for the lulz. For getting cheetah/Fox/wolfpics every hour, joining the "TechCrimes" channel or talking shit with some gaming buddies.

For serious conversation, there's Signal.

Kevin Karhan :verified:

@rysiek also #Telegram - like @signalapp - demand and collect #PII like #PhoneNumbers which ain't possible to acquire anonymoisly in more and more juristictions.

- Plus, both are #centralized, #SingleVendor & #SingleProvider solutions that don't allow for #SelfCustody of all the keys nor #SelfHosting and thus violate #KerckhoffsPrinciple, meaning they are inherently #insecure.

Using #XMPP+#OMEMO by contrast is secure and adding @torproject / #Tor to tunnel it makes it even more anonymous.

- So don't expect any messenger to cover your 6, but instead go out of your way so that even when held at gunpoint, they can't decrypt comms!

Cnsider every #Messenger that doesn't #decentralize and support #Tor oit of tue box to be insecure!

@rysiek also #Telegram - like @signalapp - demand and collect #PII like #PhoneNumbers which ain't possible to acquire anonymoisly in more and more juristictions.

- Plus, both are #centralized, #SingleVendor & #SingleProvider solutions that don't allow for #SelfCustody of all the keys nor #SelfHosting and thus violate #KerckhoffsPrinciple, meaning they are inherently #insecure.

Ehay2k for Harris

@rysiek

Thanks for this writeup. I have had many people tell me I should use Telegram because it's "safe and secure" and I no longer try to argue, I just laugh.

Alastair Cooper

@rysiek@mstdn.social It may also suit the intelligence services if this misconception continues to exist.

Prepare for Deallocation

@rysiek Oh god, yes goddamnit! I watched a Fireship video about the arrest and it was crap, with an even worse comments section. Telegram's sus at best.

sss
@rysiek also, long time ago Russian crypto researchers discovered what dh params for e2e in telegram generated on server-side, but i do not know if it's fixed yet or not...
Random Geek

@rysiek okay this is the one I was stalking through your feed for. Gonna need to talk to some friends about switching off Telegram.

kroy

@rysiek When the Russian State media makes a press release saying how secure Telegram is, I'm guessing it's probably not.

Just sayin.

Go Up