This link has been bookmarked by 26 people . It was first bookmarked on 11 Jan 2017, by paulo Fraga.
-
28 Feb 17arcojedi
Why I told my friends to stop using WhatsApp and Telegram: Even with end-to-end encryption Big Brother is still in your phone: metadata
ifttt delicious privacy technology technology_software technology_security
-
25 Feb 17
-
Signal
The only data Signal retains is the phone number you register with and when you last logged into their server.
That is it.
It doesn’t even record the hour, minute, or second — only the day.
If you’re feeling mischievous, Signal even has disappearing messages.
And Signal is free. Really free. Meaning that they aren’t trying to turn your eyeballs into a product for advertisers like Facebook or Google want to do with their messaging apps. You can donate to Signal here.
By the way, Signal code is free and open-source, available on GitHub for you to check.
-
-
03 Feb 17
-
17 Jan 17
-
16 Jan 17
-
15 Jan 17
-
14 Jan 17
-
The Signal Protocol is a non-federated cryptographic protocol that provides end-to-end encryption for instant messaging conversations. — Wikipedia
-
In October 2016, the Signal protocol was reviewed by an international team of security researchers and got glowing reviews.
-
Reading the above, you might think you are fine since WhatsApp, Facebook Messenger, and Google Allo also use the Signal Protocol.
Well, you’re not.
-
Facebook Messenger and Google Allo don’t enable end-to-end encryption by default. Facebook Messenger users have to enable “Secret Conversations” and Google Allo users have to enable Incognito Mode.
-
Telegram, the 100-million-user app made by social network VK’s founder Pavel Durov, uses its own encryption protocol: MTProto.
-
Telegram was the subject to a lot of controversies over its encryption protocol. Then in 2015, a security researcher published a paper revealing several major exploits in MTProto and concluded that Telegram shouldn’t have tried to roll their own encryption.
-
So this leaves us with WhatsApp and Signal — the only two applications to use the Signal Protocol by default for all messages sent.
-
You may be asking — why not stick with WhatsApp then?
The reason lies in WhatsApp’s collection of metadata.
-
using end-to-end encryption does not prevent messaging services from collecting metadata.
-
-
What’s interesting is that WhatsApp doesn’t store your messages on its servers. Instead, your messages are stored on your phone — then ultimately on the servers where you back up your phone.
-
As for the information WhatsApp collects about when, where, and with whom you communicate, it’s a lot more vague
-
WhatsApp also collects device-specific information when you install, access, or use their service — such as the model of your phone, its operating system, and information from your browser, IP address, and mobile network — including your phone number.
-
Facebook is collecting the most extensive data set ever assembled on human social behavior.
-
Google Allo has been widely criticized by security experts.
Not only can Google actually read every message you say, they will store all conversations.
-
Telegram is a tricky one since as I mentioned its encryption protocol is not secure.
-
Messages, photos, videos, and documents are encrypted and stored on Telegram’s servers (except for the Secret Chat messages, which aren’t stored on Telegram’s servers). Like WhatsApp and Facebook, Telegram accesses and stores your contact list on its server. This is how they’re are able to send you a notification when someone new from you contact list joins Telegram.
-
Signal
The only data Signal retains is the phone number you register with and when you last logged into their server.
-
That is it.
It doesn’t even record the hour, minute, or second — only the day.
If you’re feeling mischievous, Signal even has disappearing messages.
-
And Signal is free.
-
You can donate to Signal here.
-
Signal code is free and open-source, available on GitHub
-
-
13 Jan 17
-
12 Jan 17
-
11 Jan 17
Would you like to comment?
Join Diigo for a free account, or sign in if you are already a member.