zlacker

[parent] [thread] 46 comments
1. technt+(OP)[view] [source] 2020-06-05 04:04:37
The Signal app experience leaves a lot to be desired compared to Telegram or Matrix.
replies(5): >>themod+a >>rubatu+F >>atoav+n1 >>0xy+gb >>partyb+Jq
2. themod+a[view] [source] 2020-06-05 04:07:25
>>technt+(OP)
I was about to ask about this. Signal was comparatively annoying. Can I keep using Telegram or am I postponing the inevitable? Curious.
replies(3): >>technt+d1 >>goneho+j6 >>ViViDb+97
3. rubatu+F[view] [source] 2020-06-05 04:15:51
>>technt+(OP)
You get voice, video, chat, stickers, files. What more do you want?
replies(3): >>technt+t1 >>coolsp+X5 >>pentae+t6
◧◩
4. technt+d1[view] [source] [discussion] 2020-06-05 04:21:16
>>themod+a
As far as I am aware E2E only works on mobile and I think Mac for Telegram, although there may be third-party apps that support it. As long as you use E2E then I believe it has a lot more active users and probably has received an equal amount of security validation, so you should be fine.
5. atoav+n1[view] [source] 2020-06-05 04:22:30
>>technt+(OP)
Does it tho? It changed a lot during the last years and for most stuff I do with my friends (videocalls, textmessages, recorded speechmessages, pictures, videos, groupstuff, desktop app) it just works fine.
replies(3): >>est31+n7 >>jhoech+wb >>jabira+md
◧◩
6. technt+t1[view] [source] [discussion] 2020-06-05 04:24:13
>>rubatu+F
For Signal desktop on Linux to not require that I validate my mobile device randomly to read my encrypted messages. If it used GPG then this wouldn't be a problem.
replies(1): >>ViViDb+s7
◧◩
7. coolsp+X5[view] [source] [discussion] 2020-06-05 05:25:30
>>rubatu+F
Bot API
replies(1): >>ViViDb+x7
◧◩
8. goneho+j6[view] [source] [discussion] 2020-06-05 05:31:56
>>themod+a
Is Telegram at all trustworthy?

I feel like I’ve repeatedly seen on HN that they’re not a good choice for secure messaging (though I don’t remember the specifics around it).

Signal and Matrix are the two options I’ve settled on.

[Edit]: Looks like the main issues with Telegram are that it doesn't use end to end encryption by default and that they rolled their own encryption protocol that's likely not secure. They also used to leak a ton of metadata, but from searching around it looks like they may have made improvements. Either way seems like something to avoid when there are obviously better alternatives.

replies(3): >>est31+K6 >>input_+m7 >>AnonC+9a
◧◩
9. pentae+t6[view] [source] [discussion] 2020-06-05 05:34:40
>>rubatu+F
my encrypted chats saved across multiple devices
replies(2): >>ViViDb+p7 >>AnonC+da
◧◩◪
10. est31+K6[view] [source] [discussion] 2020-06-05 05:36:56
>>goneho+j6
Telegram is not E2E per default. They claim to not turn over data to authorities but I doubt that claim. Signal on the other hand is fully end to end encrypted.
◧◩
11. ViViDb+97[view] [source] [discussion] 2020-06-05 05:42:58
>>themod+a
I switched my friends from Telegram to Signal a few months ago and it’s been great. Probably depends on the features you use most frequently, but we switched as soon as message replies were added.
◧◩◪
12. input_+m7[view] [source] [discussion] 2020-06-05 05:44:47
>>goneho+j6
Telegram only end-to-end encrypts "secret messages", which I assume are rarely used.
replies(1): >>antice+tO
◧◩
13. est31+n7[view] [source] [discussion] 2020-06-05 05:44:47
>>atoav+n1
It's been a massive battery drain for me as I have no Google services. It's a known bug. You can't really turn off that drain either in favor of getting messages later.

https://github.com/signalapp/Signal-Android/issues/6898

https://github.com/signalapp/Signal-Android/issues/9194

Other apps like Threema or Telegram might delay messages sometimes, but at least they keep my device operational. If I'm punished for opting out of Google's spying, I at least want to choose the punishment.

◧◩◪
14. ViViDb+p7[view] [source] [discussion] 2020-06-05 05:45:06
>>pentae+t6
You get that on Signal. I’ve got it on my phone, laptop, and tablet and I see the chats on all of them.

Do you mean message history when setting up a new device? They are working on that, but it’s not so easy to do without storing all your chats with a server side encryption key. Apparently something coming soon though.

replies(1): >>sails+e9
◧◩◪
15. ViViDb+s7[view] [source] [discussion] 2020-06-05 05:46:04
>>technt+t1
What does this dialog look like? I don’t recall having seen that in my Signal desktop on Linux or Mac.
replies(1): >>technt+dS2
◧◩◪
16. ViViDb+x7[view] [source] [discussion] 2020-06-05 05:47:48
>>coolsp+X5
They’re working on support for email based accounts rather than just phone numbers. This will likely open up that possibility.

I’m looking forward to it as well as my only Telegram use case is using it as a notification service for my servers. All my chats are transitioned to Signal.

◧◩◪◨
17. sails+e9[view] [source] [discussion] 2020-06-05 06:10:19
>>ViViDb+p7
It was just release on iOS, Android has had it for a while

https://support.signal.org/hc/en-us/articles/360007062012-Ne...

replies(1): >>AnonC+na
◧◩◪
18. AnonC+9a[view] [source] [discussion] 2020-06-05 06:21:44
>>goneho+j6
Telegram's homegrown crypto has been dismissed by many people (including experts). But it offers privacy features that some other messengers do not. Is Signal trustworthy considering that it exposes your phone number to everyone else in groups? With Telegram it's possible to communicate with anyone without revealing your phone number or profile picture or anything else.
replies(2): >>goneho+Ma >>sorenj+Wo
◧◩◪
19. AnonC+da[view] [source] [discussion] 2020-06-05 06:22:42
>>pentae+t6
Wire has E2E synced across devices and platforms, though its client and features lag behind Telegram (it's still better than Signal on features).
replies(1): >>goneho+cb
◧◩◪◨⬒
20. AnonC+na[view] [source] [discussion] 2020-06-05 06:25:16
>>sails+e9
On iOS, Signal has implemented a data transfer from one device to another directly. It's of no use if one loses one's device or just hands over the old device to someone else before completing the setup of the new one (people are accustomed to setup a new device from backups in the cloud, which Signal won't support).
replies(1): >>lorenz+zj
◧◩◪◨
21. goneho+Ma[view] [source] [discussion] 2020-06-05 06:30:13
>>AnonC+9a
The phone number issue is pretty overblown since it's a clear and intentional tradeoff that allows signal to retain very little metadata (leveraging local phone contacts instead of sending your social graph to their servers like everyone else). Moxie Marlinspike is the founder/co-author of the protocol and Brian Acton put in massive funding after the FB/Whatsapp fallout - not sure you can get better than that?

They're also making moves to make the phone number requirement unnecessary. What privacy features does Telegram have? It sounds like they don't even have encryption on by default and people have also dismissed their security? Why would anyone use them?

◧◩◪◨
22. goneho+cb[view] [source] [discussion] 2020-06-05 06:34:15
>>AnonC+da
Wire sends your social graph to the cloud.

Maybe this is an okay trade-off for you, but Signal's phone number as ID requirement means they can rely on the local contacts kept on your device and keep very little metadata about you on their servers.

23. 0xy+gb[view] [source] 2020-06-05 06:34:47
>>technt+(OP)
Telegram is THE standard in messaging apps. It's basically flawless. It's extremely fast, and it works every single time. Notifications are rock solid on every platform, it doesn't hog your battery and it feels fluid to use.

Signal, Wickr, WhatsApp and others do not have this experience. They all have drawbacks and do not feel Telegram fast.

replies(2): >>goneho+Rc >>mossel+wq
◧◩
24. jhoech+wb[view] [source] [discussion] 2020-06-05 06:36:54
>>atoav+n1
It doesn't do Video calls for one thing.
replies(1): >>daeken+6c
◧◩◪
25. daeken+6c[view] [source] [discussion] 2020-06-05 06:42:53
>>jhoech+wb
Signal has video calls
◧◩
26. goneho+Rc[view] [source] [discussion] 2020-06-05 06:52:19
>>0xy+gb
It may be the standard for speed, but it's not the standard for security.
◧◩
27. jabira+md[view] [source] [discussion] 2020-06-05 06:57:24
>>atoav+n1
With the exception of desktop app, I agree :).

The desktop app takes several minutes to open (at least on Linux), so I find that the only way to use it is to start it at boot and always leave it open. I'm still hoping that someone may create other clients, e.g. a Pidgin backend.

The mobile apps, on the other hand, work really well. Been using them for years now, both on Android and iOS.

replies(2): >>Hamuko+rf >>lorenz+lj
◧◩◪
28. Hamuko+rf[view] [source] [discussion] 2020-06-05 07:25:47
>>jabira+md
The desktop app situation is pretty similar for all messaging apps. I don't really know any messaging application that has good, native desktop apps. Can't really include iMessage in good faith due to the platform restrictions.
replies(2): >>KitDun+mg >>fauige+7s
◧◩◪◨
29. KitDun+mg[view] [source] [discussion] 2020-06-05 07:38:00
>>Hamuko+rf
Telegram desktop is great and Matrix desktop apps are definitely getting there.
◧◩◪
30. lorenz+lj[view] [source] [discussion] 2020-06-05 08:09:36
>>jabira+md
When did you last try it? Startup speed of Signal-Desktop has been much improved in recent months, like, by an order of magnitude. Maybe give it another shot.
replies(2): >>fauige+Yr >>jabira+i21
◧◩◪◨⬒⬓
31. lorenz+zj[view] [source] [discussion] 2020-06-05 08:13:24
>>AnonC+na
"Won't support" is wrong, this is explicitly on the roadmap, they've stated that multiple times. "Doesn't currently support" would be more accurate. For the technical aspects, secure cloud backups are going to be made possible with https://signal.org/blog/secure-value-recovery/.
◧◩◪◨
32. sorenj+Wo[view] [source] [discussion] 2020-06-05 09:16:26
>>AnonC+9a
> Telegram's homegrown crypto has been dismissed by many people (including experts).

Only the expert's opinions are of any value IMO, and I've never seen anyone showing an attack on Telegram's encryption. Telegram themselves seem to claim that it's never broken. I often see vague criticism over the fact that they use their own protocol, but never anything more detailed than that.

https://core.telegram.org/techfaq#q-i-39m-a-security-expert-...

replies(1): >>AnonC+rD
◧◩
33. mossel+wq[view] [source] [discussion] 2020-06-05 09:36:15
>>0xy+gb
Telegram by far has the best user experience, yes.
34. partyb+Jq[view] [source] 2020-06-05 09:38:39
>>technt+(OP)
It's just a fact that Telegram has more features. Every few weeks I get a notification with a long list of features, it's a more rich experience. My main favourite thing is just that gifs show up bigger.

Muted chat, chat groups, draw on photos, stickers on photos, quiz / polls, dice rolls.

Signal does cover the basics well through (GIFs, voice messages, video, photo, replies) and it has a clean interface.

replies(1): >>smiche+ts
◧◩◪◨
35. fauige+Yr[view] [source] [discussion] 2020-06-05 09:49:26
>>lorenz+lj
It opens pretty quickly for me, but almost every time it wants to be re-linked to a mobile device.

Signal is really annoying with all the things it wants me to do. Re-linking a mobile device. Re-entering a PIN/password for no reason other than to prove that I still know the password.

And when I'm finally logged in it shows me a completely useless selection of mostly obsolete contacts.

replies(2): >>lorenz+NI >>rconti+1W
◧◩◪◨
36. fauige+7s[view] [source] [discussion] 2020-06-05 09:50:38
>>Hamuko+rf
Skype has always worked for me. Unfortunately it's not secure.
replies(1): >>Hamuko+UC
◧◩
37. smiche+ts[view] [source] [discussion] 2020-06-05 09:53:40
>>partyb+Jq
> Muted chat, chat groups, draw on photos, stickers on photos,

Signal has all of these

> quiz / polls, dice rolls.

Not these, as far as I know.

replies(2): >>partyb+qt >>0x49d1+yu
◧◩◪
38. partyb+qt[view] [source] [discussion] 2020-06-05 10:02:55
>>smiche+ts
By chat groups I mean chat folders. You can put some chats into a folder to organise them. Clearly every chat app has group chats.
◧◩◪
39. 0x49d1+yu[view] [source] [discussion] 2020-06-05 10:12:18
>>smiche+ts
Also lacks proper fast and memory efficient desktop client, good cloud backups, settings for almost everything (traffic usage/space/visuals), programmable bots. And I'm not saying about some features that for example I use a lot, like "Channels" (Almost always for news, but with ability to offline access to linked websites). Anyway: you just have to test for yourself how comfortably fast their software is on both desktop/mobile platforms. Tho sure I like Signal very much, it's just not a product for "average human" for now.
◧◩◪◨⬒
40. Hamuko+UC[view] [source] [discussion] 2020-06-05 11:41:20
>>fauige+7s
I usually hear nothing but complaints about Skype.
◧◩◪◨⬒
41. AnonC+rD[view] [source] [discussion] 2020-06-05 11:48:01
>>sorenj+Wo
GP here. I agree. I believe there’s a stigma against Telegram. There was one security issue with the MProto version 1 several years ago, which was reported (given a bounty too, IIRC) and fixed. I don’t recall any other issue being reported after that.
◧◩◪◨⬒
42. lorenz+NI[view] [source] [discussion] 2020-06-05 12:33:40
>>fauige+Yr
I think you need to open it at least every other month or so, otherwise it loses the pairing. I've never had to relink a desktop instance under any other circumstances.

You can turn off the PIN reminders in Settings → Privacy.

replies(1): >>fauige+rM
◧◩◪◨⬒⬓
43. fauige+rM[view] [source] [discussion] 2020-06-05 13:00:19
>>lorenz+NI
>You can turn off the PIN reminders in Settings → Privacy.

Ah, that's good to know. Thanks!

◧◩◪◨
44. antice+tO[view] [source] [discussion] 2020-06-05 13:14:25
>>input_+m7
Telegram secret chats allow self-destruct timers and remote retraction of messages.
◧◩◪◨⬒
45. rconti+1W[view] [source] [discussion] 2020-06-05 13:57:40
>>fauige+Yr
I feel like I'm constantly re-linking machines. I have 4 computers I use regularly, so it's a hassle. I can't say for sure if it's been a month since I last opened the app-- maybe a week or two, sure.
◧◩◪◨
46. jabira+i21[view] [source] [discussion] 2020-06-05 14:29:38
>>lorenz+lj
Interesting, it does indeed start in seconds instead of minutes now. That’s great!

I also see that the other issues I noticed previously (high latency when typing, “compose key” not working) have now been fixed as well.

◧◩◪◨
47. technt+dS2[view] [source] [discussion] 2020-06-06 01:36:01
>>ViViDb+s7
It looks like a yellow notification that says you need to re-link your mobile device, and in order to do so you have to take a picture of a QR code from your mobile device.
[go to top]