Hacker News new | ask | show | jobs
by kome 768 days ago
this is honestly quite surprising... why are they so adamant? we know telegram is not super safe, but at least is not facebook.
4 comments

Ironically I saw that FB Messenger started adding E2EE by default to my chats, whereas Telegram I believe still requires opt-in.
yes, but that's the point: it's not a technical problem, it's an institutional problem. Facebook is pure surveillance capitalism. They live by scooping your data. E2EE is hardly a concern or a solution.
While metadata can leak a lot about conversations, it doesn't leak nearly as much as plain-text data of conversations. I've argued for years that companies have an incentive to do E2EE on private messages so they don't have to be held liable or have to get involved in a lot of investigations if they don't have any access to the info. Telegram has access to the plain-text data of the conversations, as far as I know. Signal, WhatsApp, and Messenger (more and more), seem to not have much, if any, access to the plain-text data of conversations.

But the Meta companies are lying about E2EE, I don't know? Signal has seemed to me to be the company (org actually, nonprofit) that cares the most about privacy in terms of intentions and implementation.

My theory is - Telegram gained some extra traction after Carlson's interview
Facebook actually has had optional E2EE with the Signal protocol since at least 2016 (in my experience), as "secret chats". This puts it on a better security standing than Telegram.
Telegram has a similar feature I believe.
Yes, but Facebook (and others) uses the Signal protocol in its optional E2EE chats, because it has withstood the test of time. But Telegram uses its custom protocol (MTProto2) in its optional E2EE chats, which has a host of problems and has not withstood the same weathering.
I would definitely recommend Signal over it, yes.
It’s ultimately a distinction without a difference, as it is an appeal to the morality of the corporation behind the product, which can change from based on their incentives. E2EE protects against that.