← Back to context

Comment by pizzaiolo

6 hours ago

Bit of a positive piece amid a negative headline this week: https://cybernews.com/privacy/police-telegram-whatsapp-signa...

3 comments

pizzaiolo

Reply
wolvoleo  5 hours ago

That requires access to the actual phone and the unlock code in the case of WhatsApp (you need to identify to add a WhatsApp web client).

For telegram it's a bit easier yes, but the user can set up an additional password. I have done so of course. Note that telegram is not E2EE so they can give your stuff to the police at any time unlike WhatsApp and signal.

For signal I don't know as I don't really use it but i understand it works the same way as WhatsApp, scan a QR code and authenticate to the phone.

Also, with all 3 systems it's clearly visible when you look at the linked systems.

  • xingped  2 hours ago

    It is possible to intercept text messages and phone calls in such a way that the recipient never even knows a text message or phone call was sent to them in the first place. SMS is an extremely insecure channel for handling authentication codes.

    https://youtu.be/wVyu7NB7W6Y

    • wolvoleo  2 hours ago

      Yes I know but when you want to link a WhatsApp Web client to a phone with WhatsApp, SMS is not used. You need to scan a QR with the phone in question and sign in to the phone.

      SMS is used to register WhatsApp to a new phone, but that signs the original phone out. Also, you need the pin code that WhatsApp forces you to set. If you don't have it you have to wait a week if you got a recycled number. Also the original account holder is notified you tried it.

      So this method cannot be used by the police to snoop unnoticed. I believe signal works the same as WhatsApp here, it also forces you to set a pin now.

      For telegram this can be used yes but you can set an optional extra password. And also like I said telegram is not E2EE anyway so it's open to warrants.