I wasn’t able to replicate this, in safari highlighting a couple words or several hundred words both worked fine, the copy option was there and stayed there both times. I tried on a iPad mini and an iPhone SE
I’d be interested to hear too as I’ve been using Canva for a while now as it’s pretty slick and quick for what I do. I really wish Gimp would get a bit slicker with its UI. When I struggle to find a tool I want to use something else.
Just had a Quick Look on mobile and this seems to be more like a Figma alternative (still very used to know though). Canva is more like a online (and simplified) Gimp/Photoshop alternative.
Hello! I have some experience on that as a user(cpap) and as someone that checked the IT system for an health provider that used resmed.
it’s super late here already so I’ll in greater detail what usually happens with resmed equipment as well as what the company may be receiving in their systems
It’s good i left bill gayts’ sinking boat recently Feeling really great running my nixos flake on my surface go (this was the last device, everything else migrated a long time ago)
No. Whatsapp’s metadata is not encrypted and can be used by its parent company, also backups are not secure. While telegram’s is opt in (yeah that sucks and here’s there excuse for that tsf.telegram.org/manuals/e2ee-simple), they are as secure as signal’s (if not more).
I am not talking about mtproto lmao. I was talking about their opt-in e2ee feature. Edit: Also the research you shared is based on mtproto 1.0 which telegram abandoned almost a decade ago and there have been No such defects found in mtproto 2 yet.
And that UX makes it a hard sell to non-tech/privacy folks.
I had a few converts, then they pulled SMS. My converts left.
Telegram has its problems, I completely agree the encryption issue is problematic. But how do you get non-tech people to use a tool like this when to have a new device get the history, or signing into multiple devices simultaneously, requires transmitting an encryption key? I really don’t know.
I know SimpleX is working on this very issue - their current approach requires switching between active devices by scanning a QR code (or sharing code between devices out-of-band). So currently only one device can be active with your credsntials/ID. It has an ok UI, I’d say slightly better than Signal. But it’s security and privacy are just about the best I’ve seen.
This seems to be the big hurdle - people want a simple login, most don’t care if their convos are stored in servers iut means they can just login.
I’m using telegram with a few people for just this reason, since it gets us off SMS. They like that they can use whatever device is in front of them.
Getting people to switch to Telegram is far easier than anything else, since it’s UI is much better than Signal, Wire, XMPP clients (which can be some of the best).
We know exactly how bad Whatsapp is from a privacy standpoint - I’d choose telegram over it any day.
I would prefer telegram because its just not from Meta. There is bounty on breaking telegram’s protocol too.
Telegram sells ads on public channels with consent of owners and the ads are based on the channel data and not users data. They are back up with their crypto schemes, infact idk whats wrong with crypto, they are better for privacy than normal bank transactions. Anyone cant pay from their pocket for lifetime, it was coming since longway because telegram have no parent company to fund it neither its founder are that rich to spend billions of dollars on it every year. Those “nitro” features didnt take anything away from free users tho, also if they are trying to cover up their cost from the userbase that just proves they have no dubious financing from backdoors.
I dont know how rape laws are connected with a messenger being based there. US have its social problems too or wherever signal is located, every country have social issues.
Yeah facebook is big enough reason to not use facebook. On top of that there have been no data breaches, almost no big outages in telegram till date. They offer a lot of features, from bots to channels, to large public communities and much more.
Telegram just claims its private enough and they never said they are e2ee by default, I dont see the misinformation here, yeah they exaggerate it sometimes but the fact that there have been no data breaches in a decade with almost 800 million monthly active users is quite a bit of achievement. They invested on developing their own encryption protocol, it maybe less private but they made it to remove complexities which signal have. There’s no point on having some 100% secure stuff when no one gonna use it due to complexities, telegram have fueled pro democratic protests worldwide and I thank them for that atleast (even they got banned in many countries for doing so).
MTProto is what Telegram uses for “Secret Chats”, their opt-in end-to-end encryption. Normal messages aren’t encrypted at all. They’re stored in plain text on Telegram servers. The fact that E2EE is opt-in already makes this app ridiculous. On top of that, it isn’t even secure or private lol
the fact that E2EE is opt-in already makes this app ridiculous
in matter of privacy, yes. But it have cool features so.
They’re stored in plain text on Telegram servers No, non secret chats use mptroto but with different schema, thats not plain servers. And no data breach have been reported in telegram yet if it was “that” easy to breach them. From my last comment: “Also the research you shared is based on mtproto 1.0 which telegram abandoned almost a decade ago and there have been No such defects found in mtproto 2 yet.”
I’m not saying that WhatsApp is the good guy here, Meta sucks but compared to Telegram I rather trust them if I have to.
And the unencrypted backups are only problematic when you use the automatic Google Drive upload.
They tell whatever they want until their claims can be validated with the source code. If we take it for granted that they use an original, unmodified version of the signal protocol programming libraries, there are still multiple questions:
how often do they update the version they use
what are they doing with the messages after local decryption (receiving), and before encryption (sending)
how are they storing the secret keys used for encryption, and what exactly are they doing with it in the code
Any of these questions could reveal problems that would invalidate any security that is added by using the signal protocol. Like if they use an outdated version of the programming library that has a known vulnerability, if they analyze the messages in their plain data form, or on the UI, or the keypresses as you type them, or if they are mishandling your encryption keys by sending them or a part of them to wherever
Firefox blocked this page because it might try to trick you into installing programs that harm your browsing experience (for example, by changing your homepage or showing extra ads on sites you visit).
But there were many more vulnerabilities or “features” that WhatsApp allowed attackers or governments to get into user data. While I haven’t read anything about against Telegram security.
Both WhatsApp and Telegram suck. Just like any other messenger that’s either proprietary or not end to end encrypted. Signal is clearly the best choice.
Signal is not the best choice, it’s just a somewhat aceptable middle ground. I prefer something that doesn’t require a phone number and something you can self-host, like XMPP.
Good luck convincing normies to use some obscure messaging protocol. It’s difficult with Signal, even harder with Matrix, basically impossible with XMPP. 99.99999% have never in their life heard about XMPP. Also most mobile clients absolutely suck. You also can’t get proper push notifications without completely ruining your battery life. What a great choice!
Conversations is only available on Android. And that’s the problem. You need different clients on different plattforms, etc. It’s just a mess. Some clients don’t support encryption and everything is just unnecessarily complicated, especially for new users. You can’t just tell someone “let’s chat on XMPP”. You need to explain to them what XMPP is, what app to download depending on what OS they use, tell them how to set everything up, etc, etc…
Signal is definitely not perfect, but it’s the best known private messenger and doesn’t compromise on privacy and security. It’s very simple to use, the setup process is basically the exact same as on WhatsApp or Telegram, it has good clients for every platform and they have operated safely with a great record for over 10 years.
I understand that other solutions might be better in theory, but if we keep suggesting a new obscure and hard to use messenger to noobs, they will never make the switch. In order to get more privacy for ourselves and the (potentially less technical) people we need to communicate with, let’s just get them to use something simple and private like Signal.
Yea, ive gotten pretty wide adoption from friends and family on Signal, but id love to have a comparable product with even more features/security/privacy
Matrix may get there eventually, but for now its Signal.
The major clients now do have OMEMO. Yea, I agree it’s flawed but that’s so far it’s the one I settled on. Do you know other, more refined selfhostable solutions? I am now looking for development there but doubt I’d get few people that I already got there to switch again.
Not aware that there is a modern decentralized secure and private chat protocol. Sadly. I also am not aware of any developmenta of something like that, so XMPP is the best we got (for decentralized open widly supported protocols)
I know that a lot of clients do encryption of the message body by default, but it still leaves a lot of stuff in plain text (afaik).
What a load of hipocrisy. The dude uses unauthenticated DH for his apps “secret chats”, which a bored student with a laptop can MITM in seconds. Other chats use just TLS, meaning they get to read EVERYTHING.
Users can’t report it because there is no way to tell for them
Atleast the one who breached can tell? no telegram users data have been seen on dark web yet, no person/org have claimed to get any vulnerability in their system. Also if its that easy to breach why govt’s keep banning telegram for not giving them userdata? despite telegram is the biggest app where most terrorist orgs operate, hub of piracy and illegal things, you can call it “public” darkweb.
I have some friends working in the police, many years they showed me how they can read messages of like anyone on telegram I was trying to tell people to stop using telegram for years, but now at least therecs some conversation is going on because of the journalists
I have tried to google, most of them were assumptions or russian agencies using ISPs to login to their account in which case its not telegrams fault. Can you provide a substantial proof?
That article literally praises telegram despite being non e2ee by default, authorities can only get ip address and phone number from it (those are public info already and both of them could be avoided by using voip amd paid VPNs), that just proves how solid mtproto have become. Also they are saying one can see your telegram message when they are physically logged in your account for which the Russian authorities took the help of their ISP, in that case its not telegrams fault, set up 2fa on your account or use VoIP.
privacy
Oldest
This magazine is from a federated server and may be incomplete. Browse more on the original instance.