this post was submitted on 26 May 2026
325 points (98.5% liked)

Technology

84965 readers
3955 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 3 years ago
MODERATORS
top 50 comments
sorted by: hot top controversial new old
[–] commander@lemmy.world 4 points 3 hours ago

Centimeter by centimeter getting people towards signal and matrix chats

[–] 1984@lemmy.today 4 points 4 hours ago

I know but I trust it more than Google.

There is value in spreading out your data to different companies in different countries. All the American big tech services sends a copy of everything to the nsa.

Maybe telegram doesn't. Who knows. Maybe they are being a bit more difficult at least.

[–] SethTaylor@lemmy.world 10 points 12 hours ago (1 children)

So it's not selling all my information to the Kremlin?

[–] columbus@lemmy.world 3 points 12 hours ago

Russia is a toothless tiger.

[–] Treczoks@lemmy.world 21 points 15 hours ago (1 children)

As long as the keys are handled via a closed source app and server system, e2ee is potentially broken.

Even if you generated the key, keep the private part locally and submitted only the public part to your communication partner, you can never be sure that the intransparent app does keep your private key private.

With WhatsApp I'm quite sure that they somehow can retrieve the private key. Certain events point to that. But I see no reason to consider signal or telegram any more trustworthy - they are all prone to governmental influence.

And as open source and closed app infrastructure are incompatible, I would not handle anything important on an Android or Apple device.

[–] punkisundead@slrpnk.net 5 points 14 hours ago (3 children)

With WhatsApp I’m quite sure that they somehow can retrieve the private key. Certain events point to that.

What events point there?

[–] Treczoks@lemmy.world 2 points 2 hours ago

A number of WhatsApp conversations unexpectedly appearing in courts.

[–] adhdsergio@lemmy.world 3 points 8 hours ago

I've no proof of this, but technically the whatsapp app is closed source so they could push an update that collects the private keys, if they don't do this already

[–] Scrollone@feddit.it 6 points 13 hours ago

I don't know about WhatsApp, but macOS backups your keys on iCloud by default, so...

[–] morto@piefed.social 28 points 19 hours ago

I try not to be repetitive with the astronaut meme, but they don't help. Here we go:

image

[–] SnotFlickerman@lemmy.blahaj.zone 121 points 1 day ago (2 children)

More people need to understand this, Telegram was never trustworthy to begin with.

[–] Natanael@slrpnk.net 66 points 1 day ago (5 children)

They spent years lying about their encryption algorithms too acting like they're more secure than Signal when they never were

load more comments (5 replies)
[–] Treczoks@lemmy.world 1 points 15 hours ago (1 children)

In the same class as any app store based communication software.

[–] Natanael@slrpnk.net 2 points 11 hours ago (1 children)

Signal can be installed from an apk from their site

https://signal.org/android/apk/

[–] Treczoks@lemmy.world 1 points 2 hours ago (1 children)

And can you review the source for this APK?

[–] Natanael@slrpnk.net 1 points 1 hour ago

Yes, you can even confirm the published source reproduce this specific apk

https://github.com/signalapp/Signal-Android/blob/main/reproducible-builds/README.md

[–] esc@piefed.social 6 points 15 hours ago

It was made by m*scovites in m*scovia with fsb money, by the same guys that tried to copy facebook.

[–] wuffah@lemmy.world 57 points 23 hours ago* (last edited 13 hours ago) (1 children)

Ever since the CEO of Telegram was basically lured to Paris, arrested, then read the riot act for Telegram’s non-cooperation with French authorities, the company has been responding to warrants and downplaying its “E2EE” features. Expect them to have a fully accessible backdoor for LE.

By the way, don’t forget about that Bitlocker backdoor that “mysteriously” doesn’t affect Windows 10.

The EU and US digital surveillance states have been tightening their grip on encryption and online anonymity for years now. “Age verification” is just the latest push.

[–] wizardbeard@lemmy.dbzer0.com 22 points 23 hours ago

I can only assume there's a different backdoor for 10 that just hasn't been published. Even if there isn't, Windows defaults to backing the key up to the attached Microsoft account. You think they'd ever tell intelligence agencies to come back with a warrant for that?

Just use Veracrypt folks.

[–] magnue@lemmy.world 8 points 16 hours ago (1 children)

Better than WhatsApp at least

[–] Treczoks@lemmy.world 4 points 15 hours ago (1 children)

As in "with WhatsApp we know, with others we cannot exclude the possibility"?

[–] magnue@lemmy.world 9 points 15 hours ago (1 children)
[–] Treczoks@lemmy.world 1 points 1 hour ago

I would not limit it to him.

[–] OhVenus_Baby@lemmy.ml 6 points 17 hours ago

Security doesn't equal private.

[–] aeronmelon@lemmy.world 27 points 1 day ago (4 children)

Signal (assuming you live in a country that hasn’t blacklisted them for refusing to install backdoors).

[–] lepinkainen@lemmy.world 8 points 16 hours ago (1 children)

Signal still doesn’t support bots and is shit for bigger groups

Good for 1-10 friends and 1on1 chats tho

[–] Coldcell@sh.itjust.works 3 points 13 hours ago (2 children)
[–] lepinkainen@lemmy.world 3 points 6 hours ago* (last edited 6 hours ago) (1 children)

People criticising Telegram have no idea how big some of the channels there are. They’re stupid big. Like full ass Discord server but with one channel big.

That needs automated moderation tools - bots as well as built in tools to manage lager groups.

Signal doesn’t do that at all. It’s a good replacement for group texts, not communities.

And for me personally: missing first party bot support makes it a complete non-starter.

[–] Coldcell@sh.itjust.works 2 points 5 hours ago (1 children)

I mean, fair enough on you opinions, but it sounds as if all you're saying is this one particular messaging tool doesn't fit your requirements?

As I see it, (and I may be speculating and/or wrong), supporting bots might worsen some aspects of other users experience. If there necessitates a worsening of other users' experience in order to support what you'd want to do, at what point should you just use a different app?

There's little reasoning for catering to a niche use like huge channels and bots, and tbh that sounds like a dreadful experience to me. Dev time is costly, feature creep is a killer, I don't see lack of support for unwanted (to me) features as a negative.

[–] lepinkainen@lemmy.world 2 points 4 hours ago

Signal has bit me already. Every single *Claw supports Signal bots, which pretend to be actual people.

Telegram has explicit first party bot support, a bot is always a bot and identified as such

[–] Treczoks@lemmy.world 2 points 15 hours ago

Same. Any non-verifyable app in an app store is at least suspect.

[–] SnotFlickerman@lemmy.blahaj.zone 13 points 1 day ago (2 children)

Matrix, Session, SimpleX chat, Tox chat, Jami... and so on.

[–] unitedwithme@lemmy.today 11 points 23 hours ago

Session EoL this July.

[–] REDACTED@infosec.pub 8 points 23 hours ago

Clash of Clans

[–] Ricaz@lemmy.dbzer0.com -2 points 13 hours ago

Signal is legitimately one of the worst messaging apps I've tried

[–] melfie@lemmy.zip 7 points 18 hours ago

Tried to sign up once, but it wanted my real phone number and a fake one from a temp SMS site wouldn’t work. Private messaging? Sure, Jan.

[–] kungen@feddit.nu 21 points 23 hours ago (1 children)
[–] Treczoks@lemmy.world -2 points 15 hours ago

Just like any app-store based software.

[–] redsand@infosec.pub 4 points 17 hours ago
load more comments
view more: next ›