Ukraine's National Coordination Center for Cyber Security on September 20 banned the usage of the Telegram messenger app for state officials, military personnel, and employees of key infrastructure, citing security issues.
Wait, the centralized service that security experts warned for years could be easily compromised because a centralized messaging service is inherently insecure has now been compromised? Surprised Pikachu face
It is. But it is open source and the encryption is solid. All communication data is end-to-end encrypted. They have been subpoenaed before and all they could provide was when the account was first registered and when it was last used.
The signal protocol is well documented and open source. The foundation and LLC behind it are registered in California and are run by reputable people.
Telegram is run by shady people, supposedly out of Dubai, while it is registered in the British Virgin Islands. Its clients are also open source, however the encryption, if enabled, is of the home cooked variety, although it was improved over time. Unfortunately it is not enabled by default, you need to enter a „secure chat“ for that, which only works with single contacts, not with groups. Despite having access to everything else, and working like a social media-messenger-hybrid, telegram is very reluctant to get rid of clearly illegal content.
The data is not centralized in the same way, making it slightly better, but yeah. A lot of the same pitfalls of centralization happen there. The whole system doesn't operate without the corporate servers in the middle, even though they don't see or store the data. They have total access to Metadata. The organization could be sold for profit, shut down, change terms, etc.
If security is important, you're better off with something decentralized like matrix. I'm not an expert, so hopefully, a lot of people here who are smarter than me will fact check these statements, but at least those are my impressions.
It is, which is why the comment didn't advocate for it. Signal has more robust encryption than telegram, but its not zero-trust. They should really be using private hosted services instead of public or pgp, but when battle kicks off you use whatever works and then go back and revise as needed when you're not dodging bombs.
I know nothing about cyber security, but it's funny to me that depending on the time of day these comment sections either mostly criticize Telegram or mostly support it. I have no idea what to believe or whether it's safe for me to use Telegram.
telegram chats are also not end to end encrypted to my knowledge, only the secret chats which have some limitations afaik. and group chats also aren't encrypted. unless that changed recently. id even trust Whatsapp more than telegram, at least they say they're end to end encrypted.
I would never risk any third party messaging service in military or critical state matters. It's just common sense, even for a layman. Everything is compromised, Telegram is, Whatsapp is, Signal is, all of them are.
It's not, unless they're some sort of cryptography expert with a peer-reviewed white paper pending publication. The Signal protocol (GPLv3) is extremely robust and has almost no capacity for metadata generation, and both the app and server-side code are under the AGPLv3 (technically if they were compromised they could use different, unaudited server-side code, but refer back to "basically no metadata"). Signal has essentially no capacity to be compromised; they can't even bait and switch users with a pre-compiled app whose source code isn't the publicly available one and actually has a backdoor because their builds are reproducible and it would be caught immediately.
Maybe they take issue with the crypto bullshit, which is valid but doesn't compromise messaging security. Maybe they don't like that they took away SMS, which I completely agree with, but also actually makes it marginally more secure. Either way, I seriously doubt if they had any mathematical insight into Signal being "compromised" that they would be here hanging around on Lemmy right now.
SMMs for officials, volunteers and military would keep posting, right. It's inside communications that are a concern. And as some ukrainians wrote, in some places it was an obvious rule from the very start.