mstdn.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
A general-purpose Mastodon server with a 500 character limit. All languages are welcome.

Administered by:

Server stats:

18K
active users

and are once again in the media, so I translated my May piece about the service to English:

Telegram is neither "secure" nor "encrypted"
rys.io/en/171.html

Calling Telegram "secure" or "encrypted" is misleading, and is journalistic malpractice.

Telegram itself seems to mislead about it on purpose.

Telegram's encryption protocol is suspicious and transmits cleartext device identifiers with every message.

They have been called out for it many times, and refuse to change.

Songs on the Security of Networks · Telegram is neither "secure" nor "encrypted"Telegram is a popular – especially in the East – internet messenger. It bills itself as “encrypted”, “private”, and “secure”. One of its creators (and the CEO of the company that operates the service)

@rysiek also #Telegram - like @signalapp - demand and collect #PII like #PhoneNumbers which ain't possible to acquire anonymoisly in more and more juristictions.

Using #XMPP+#OMEMO by contrast is secure and adding @torproject / #Tor to tunnel it makes it even more anonymous.

  • So don't expect any messenger to cover your 6, but instead go out of your way so that even when held at gunpoint, they can't decrypt comms!

Cnsider every #Messenger that doesn't #decentralize and support #Tor oit of tue box to be insecure!

Twitterthaddeus e. grugq on Twitter“I’m gonna tell you a secret about “logless VPNs” — they don’t exist. Noone is going to risk jail for your $5/mo https://t.co/Q2aOQJkG4g”
Michał "rysiek" Woźniak · 🇺🇦

@kkarhan I consider a service that actively, relentlessly misrepresents its security and encryption stance way worse and more harmful than a service that does not.

@signalapp @torproject

@rysiek Agreed.

Tho I'd say that @signalapp is just marginally less shit in execution AFAICT, not in concept tho...

@kkarhan I have criticized @signalapp publicly for a bunch of things.

But saying that Signal is "marginally" better than Telegram is simply wrong. Signal is leaps and bounds better than Telegram, in execution and in concept.

Telegram's concept is "let's implement just enough e2ee to be able to lie our way into pretending we're an e2ee IM, while being nothing of the sort."

They do this *on purpose*, knowing this puts people in harm's way.

Making any sort of equivalence here is not justified.