GadgeteerZA

I blog about #technology #gadgets #opensource #FOSS #greentech #traditionalwetshaving #LCHF #health #alternativeto #hamradio (ZS1OSS) #southafrica - see https://gadgeteer.co.za/blog. I also blog to various other social networks which I list at https://gadgeteer.co.za/social-networks-i-post-to.

  • 13 Posts
  • 25 Comments
Joined 4 years ago
cake
Cake day: January 20th, 2021

help-circle
  • A lot of speculation that does end with this in the article:

    "After discussing her case with experts, Matsapulina now believes her Telegram messages may have been compromised by a form of spyware. When she was told that a hacking device would need to be physically nearby to infiltrate her phone, a memory resurfaced: At times before her arrest, she had noticed an unmarked truck with a dome on its roof parked outside her building. She had even jokingly mentioned it to friends on Telegram. Now, she remembered, as the police were banging on her door that morning, she’d spotted the same mystery vehicle parked outside. By the time the police stormed her home, the vehicle was gone.

    Matsapulina has since started using Telegram again."

    Most messaging apps are vulnerable on the client side with spyware, no matter what E2EE exists along the way.





















  • Surely we need some context with this, as what we post is basically publicly visible. Even if we defederate the posts are anyway visible. Our IP addresses are probably visible to the home instance we connect to (or our VPN IP address etc) but how does our IP address then travel off with the federated post to someone following us on Threads? It’s only what travels out through the ActivityPub federation.

    What would help with this post was, instead of just a link, maybe extracting the two or three issues that look problematic, and say why. That gives us something definite to actually debate.

    For those who have friends stuck on Threads still, this maybe a good way for them to stay in contact. The Threads user gets their login times, IP address, location, etc tracked by Meta, and the Lemmy user with their Lemmy app, only identifies with their Lemmy instance. Threads should only be seeing the post and time that a Lemmy user posts something that is followed by a Threads user.


  • I think it is quite well known that only Telegram Secret Chats are true E2EE. That said, Telegram is still not in the business of selling metadata actively like Whatsapp/Facebook/Meta are. As far as plain features go, Telegram is streets ahead of Whatsapp. But if I needed real “secret chat” I’d probably use Threema, SimpleX, Nostr, Jami, etc where I’m not tied to my mobile phone number or e-mail address.