• 0 Posts
  • 3 Comments
Joined 2 years ago
cake
Cake day: June 12th, 2023

help-circle
  • Well there is enjoying an artists music and there is supporting an artist and defending them. But you have to decide when to cut off an, “abusive relationship”. I can hold a person and artist in separate spaces. A love a lot of music, literature, art that was created by terrible people but try and avoid giving those people my attention and money. Other people have said that while an artist creates, its not their art, it’s ours. Perfect example is Harry Potter books. I would say that people’s experience and enjoyment of the books is not JK. Now the tough decision comes when you want something created by an artist/company and you have to support them for your own enjoyment. That is the line we all consider. Just trust yourself to find it. Nothing is truly just in this world but we shouldn’t stop trying.


  • So if I understand it Signal has your phone number but only logs sign up date and last activity date. So yes they can say this person has Signal and last used it on date X. Other than that no information.

    Matrix doesn’t require a phone number but has no standard on logging activity so it’s up to the server admin what they log, and they could retain ip address, what users are talking in what, rooms, etc. and E2EE is not required.

    I think both have different approaches. I’m just trying to understand. On one hand you have centralized system that has a standard to minimize logs or decentralized system that must be configured to use E2EE and to remove logs.


  • I’m not an expert but I’ll use this analogy.

    Signal is you meeting a person who gives you secure devices. This person then can only ever provide the following information to someone else. From Signal website. “The phone number. the date and time a user registered with Signal and the last date of a user’s connectivity to the Signal service.” Only your device and your friends device can read the messages. It goes direct from you to them. The only way to read any message is having the device.

    Telegram is like you making an agreement with another person. By default messages are encrypted but go to the other person for decryption before going to your friends device. This other person Telegram has and will give the phone number, messages, serverlogs, dates to legal entities by request. Now there is an option to bypass this person by using “secret chats” . This will make it so the message is directly from your device to their device. Telegram can’t read messages but as I understand they can still potentially have metadata, server logs of when messages are sent, how many, what device they are sent from. Bottomline is they have activity logs Signal can only provide the date you signed up and the last time you used the app. Not only that but just being on the Telegram platform which allows bots makes you a target. Bots will contact you like spam. Sending you harmful links, etc.

    Almost every security person I’ve ever read says. “I use Signal”. Why wouldn’t you go with the service that by default has end to end encryption? Telegram makes it a option you have to select for each person. Both use your phone number.

    These are very basic descriptions. I’m Happy to remove or update if I got anything wrong.

    More signal encryption info