• XLE@piefed.social
    link
    fedilink
    English
    arrow-up
    1
    ·
    11 hours ago

    That’s at least three points of data we know Signal can’t and won’t share.

    1. Phone number from ID
    2. Account name
    3. IP address
    4. Registration date or, worse, date this information was accurate (suggesting a ledger of changes)
      • XLE@piefed.social
        link
        fedilink
        English
        arrow-up
        1
        ·
        4 hours ago

        The data Telegram is sharing is right there

        And we know Signal doesn’t and can’t because of its architecture and we’ve seen similar letters they had unsealed

        • badmin@lemmy.today
          link
          fedilink
          arrow-up
          1
          ·
          2 hours ago

          You seem to be confused about what Signal protects against, or claims to protect against.

          None of the items from your list apply. Maybe you’re confusing it with another distributed solution with peers connected through anonymous transport.

    • Lena@gregtech.eu
      link
      fedilink
      arrow-up
      15
      arrow-down
      1
      ·
      2 days ago

      From a purely opsec standpoint, it doesn’t really matter whether the backend is open source or not. Either way you can’t know what kind of data is being shared and whether metadata is being deleted or not. What actually matters is that the client is open source and thoroughly reviewed by independent 3rd parties. With a good messaging app, it shouldn’t matter what runs on the server. And it is known that Telegram’s client uses some weird in-house crypto and doesn’t encrypt chats by default.

      This is why I’m not going to ditch Threema, even though its backend isn’t open source. I think they have a solid business model, which is why I support them. I still prefer Signal though.

      • ExperimentalGuy@programming.dev
        link
        fedilink
        arrow-up
        2
        ·
        1 day ago

        Open source means you can audit how the application transfers data. Of course you can’t audit parts of infrastructure and data retention, but you would be able to know if they’re using an outdated dependency or if they’re not using a good encryption algorithm if they’re running an open source project.

    • BeMoreCareful@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      2
      ·
      edit-2
      1 day ago

      That’s a hell of a combo for fucking other people’s countries up.

      Eastern Europe and North Africa are in absolute tatters because of those two.

  • unglueclass23@programming.dev
    link
    fedilink
    arrow-up
    5
    ·
    2 days ago

    So that’s all they had on him? Or all the gov asked for?

    I will have to re-visit telegrams privacy policy at some point, but aren’t they known for storing quite a lot of info (at least when compared to other private messengers like Signal?)

    • kungen@feddit.nu
      link
      fedilink
      arrow-up
      6
      ·
      2 days ago

      That’s all they are willing to share publicly. They could easily extract any normal 1:1 chat history, etc. Normal chats aren’t end-to-end encrypted.