Comment by erelong

19 hours ago

I thought telegram was flagged as insecure like a decade ago, it's never really been "very secure"

Like any number of articles like this: https://hackernoon.com/7-reason-why-telegram-is-insecure-by-...

18 comments

erelong

Reply
misiek08  17 hours ago

Still we are using it, because UX kills any other app and people that are (probably) behind it will cause almost no harm to casual, not-interesting people :)

And yes, I know that by default chats are not E2E, that phone number has way too many effects on accounts etc. Still, UX and agencies interested in important people are more welcome than data selling, ad-based companies.

  • lxgr  15 hours ago

    What a bizarre threat model. Why would you rather have your data with who knows who than just your metadata?

    And what UX problems exactly is Telegram solving that its many competitors aren’t? I hear this all the time, but I use both Telegram and WhatsApp and I haven’t found anything lacking in the latter, UX wise.

    • maxgashkov  14 hours ago

      > and I haven’t found anything lacking in the latter, UX wise

      I'm sorry if I'll sound condescending, but you probably don't use either frequently enough. With telegram it's the little (and sometimes not so little) things, e.g.:

        - voice message transcription
  - you can select part of the message via long-press and use it as a quote when responding
  - massively more complex formatting possible
  - bots as the first class citizens not gated behind some bullshit 'Business' KYC/subscription
  - is not crippled by prohibiting system-level phonebook access like whatsapp
  - extreme flexibility in managing large groups, mostly due to the bot point above
  - and many more

      All of the above does not excuse lack of e2e by default, this is almost embarrassing in 2026 now, but Telegram is the most polished IM experience of all the apps I have tried.

      1 reply →

    • Kinrany  3 hours ago

      I lost access to my WhatsApp history multiple times. This never happened to me anywhere else. This is admittedly an example of WhatsApp UX being terrible, not Telegram UX being great.

    • zahrevsky  10 hours ago

      I agree with maxgashkov about the UX. Just wanted to add that the list of good UX features is much, MUCH longer than the one maxgashkov provided.

    • skeledrew  11 hours ago

      For me it isn't the UX really. I was sold on it NOT being WhatsApp, etc, and then I stayed for the unlimited free storage for life (have a virtual FS built on it). Definitely ain't nobody else offering that.

  • maqp  17 hours ago

    "will cause almost no harm to casual, not-interesting people"

    Yeah same can be said for Facebook and WhatsApp that Durov vehemently claims should not be trusted with user's data. Maybe it's a ploy for the Mark Zuckerberg of Russia to get the data of people.

    Also, Telegram doesn't have to sell it's users if it's an FSB honeypot.

    • mschuster91  14 hours ago

      Well, it makes sense from a threat modeling perspective. If you're Russian, you should use Whatsapp because it is unlikely Whatsapp will cooperate with the Russian dictatorship, but in Western countries, you can assume that anything from Meta, Google or Apple that's in any way useful (and even if it's just metadata) can and will end up in the data lakes at the NSA.

      3 replies →

lxgr  15 hours ago

It was, but most people will believe what their peers (real or parasocial) say over the collective screams of every security researcher on the planet, so here we are.

g-b-r  19 hours ago

Absolutely, but mostly for their protocols, statements, people and infrastructure.

A file exfiltration vulnerability is still noteworthy.

TZubiri  17 hours ago

It has this feature where it tells you about other users that are on the platform. I mean it's not a huge leak, but right off the bat it's pretty poor security posture. For an app that competes with other chat apps on supposedly being more secure and privacy aware, it does worse than whatsapp on that end.

  • lukan  13 hours ago

    "For an app that competes with other chat apps on supposedly being more secure and privacy aware"

    It mainly competes against facebook and other social media plattforms. The privacy is clearly wrong and only believed by non technical people (which can be amusing, when on TG someone posts a link to FB, or a WhatsApp group and people chime in and lecturing others that they should not use that as it is insecure and owned by a big company who will sell them out).

  • thenthenthen  11 hours ago

    This!! Signal also had this back in the day, very bizarre for an app thats privacy focussed… sadly have to use it because some contacts refuse to use anything meta etc. Sadly it is only big corp stuff that works reliably where i am somehow..