diff --git a/2023/05/18/whatsapp-analyze/index.html b/2023/05/18/whatsapp-analyze/index.html index c3ea53a..94bbe61 100644 --- a/2023/05/18/whatsapp-analyze/index.html +++ b/2023/05/18/whatsapp-analyze/index.html @@ -237,7 +237,7 @@

We can see that the amount of messages remains pretty stable. This could prove our theory of two people in the same household as true. Maybe the gap in August could be a planned vacation?

It would be pretty frighting if I told you all our assumptions were correct. Right? You may now probably recognize that metadata is a lot more valuable than you originally thought. But what conclusions can we draw from this newly gained awareness?

Most people rely on the encryption of their messaging apps. If no one can read my data then I am safe, right? No. As we can see, an attacker does not need access to your communication in order to gather valuable information.

-

Just keep that in mind.

+

If you want to look more into this topic, I’d recommend watching Daniel Kriesel’s 33c3 presentation.

— May 18, 2023

@@ -331,7 +331,6 @@ nanobar.go(100); - + diff --git a/2023/07/18/telegram/index.html b/2023/07/18/telegram/index.html new file mode 100644 index 0000000..05cc0c4 --- /dev/null +++ b/2023/07/18/telegram/index.html @@ -0,0 +1,330 @@ + + + + + + + + + + + + + + + Should it really be Telegram? + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
+
+
+ + + + + +
+
+

+
🌑
+ + +

+
+ +
+

+
Hello World.
+ +

+
+ + + + +
+
+
+ Home + + + Blog + + + + About + + + + + Email + + +
+
+
+
+
+ +
+

Should it really be Telegram?

+ + + + +

In recent years, WhatsApp has become one of the most popular messaging apps worldwide, connecting billions of people across the globe. However, beneath its seemingly user-friendly interface, there are growing concerns about privacy, security, and the impact of its corporate parent, Facebook. As a result, many users are seeking alternatives to WhatsApp that prioritize their digital well-being. However, it seems like most people are switching to another messenger that I’m pretty unsure about.

+

It’s open source. Right?

Telegram states the following on their website:

+

Telegram apps are open source and support reproducible builds. Anyone can independently verify that Telegram apps you download from App Store or Google Play were built using the exact same code that we publish.

+
+ + +

While those two sentences are not wrong, they are dangerously misleading consumers. See, what they are stating here is that their clients are open source. Their server code however still remains closed and therefore we do not know what Telegram actually does with our data.

+

No encryption, no peace of mind

While Telegram offers end-to-end encryption in its “Secret Chats,” this feature is not enabled by default for regular chats. This means that the content of your conversations may not be fully secure unless you specifically opt in for Secret Chats. Telegram has also faced criticism regarding the lack of independent audits of its encryption protocols, unlike Signal, which has undergone extensive third-party security audits. Without such audits, it is rather hard to prove that their E2EE is powerfull enough.

+

But what should we use instead

There are many other great privacy respecting messenging apps which i’d rather use than telegram. I’ve listed my favorite ones below:

+

Signal: Known for its strong encryption, Signal offers end-to-end encryption by default for all conversations and has a focus on user privacy. Like I already said, it has undergone independent security audits and is widely regarded as one of the most secure messaging apps available.

+

Wire: Has a more modern looking user interface than Signal but also has ungergone security audits

+

Threema: Probably the OG because it’s the oldest one. Also requires no phone number to sign up (!!!)

+

Element (Matrix): Element is an open-source, decentralized messaging platform that uses the Matrix protocol.

+ +

— Jul 18, 2023

+ +
+
+ + + + + +
+ + + +
+ +
+

+ + + #opensource

+ +
+ + +
+ + + + + + + + + GitHub + + + + + + LinkedIn + + + + + + + +
+ +
+ +
+
+ +
+ +
+ + + + + + diff --git a/2023/07/18/telegram/telegram.jpg b/2023/07/18/telegram/telegram.jpg new file mode 100644 index 0000000..07d936a Binary files /dev/null and b/2023/07/18/telegram/telegram.jpg differ diff --git a/About/index.html b/About/index.html index 1fb88cc..b1e538a 100644 --- a/About/index.html +++ b/About/index.html @@ -311,7 +311,6 @@ tK.FavColor nanobar.go(100); - + diff --git a/archives/2023/05/index.html b/archives/2023/05/index.html index c11269e..d2098a6 100644 --- a/archives/2023/05/index.html +++ b/archives/2023/05/index.html @@ -298,7 +298,6 @@ nanobar.go(100); - + diff --git a/archives/2023/07/index.html b/archives/2023/07/index.html new file mode 100644 index 0000000..a4d8544 --- /dev/null +++ b/archives/2023/07/index.html @@ -0,0 +1,303 @@ + + + + + + + + + + + + + + + All Posts - Tim Kicker + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
+
+
+ + + + + +
+
+

+
🌑
+ + +

+
+ +
+

+
Hello World.
+ +

+
+ + + + +
+
+
+ Home + + + Blog + + + + About + + + + + Email + + +
+
+
+
+
+ +
+ +

All Posts

+ + + + +
+
    + + +
+
+ + +
+ +
+

+ + + #opensource

+ +
+ + +
+ + + + + + + + + GitHub + + + + + + LinkedIn + + + + + + + +
+ +
+ +
+
+ +
+ +
+ + + + + + diff --git a/archives/2023/index.html b/archives/2023/index.html index 4404270..226e11c 100644 --- a/archives/2023/index.html +++ b/archives/2023/index.html @@ -218,6 +218,22 @@

All Posts

+
+
+ +
+

Jul 18, 2023

+
+
+ + + Should it really be Telegram? + + +
+
+
+
@@ -298,7 +314,6 @@ nanobar.go(100); - + diff --git a/archives/index.html b/archives/index.html index 6a5dc38..28af024 100644 --- a/archives/index.html +++ b/archives/index.html @@ -218,6 +218,22 @@

All Posts

+ +
@@ -298,7 +314,6 @@ nanobar.go(100); - + diff --git a/atom.xml b/atom.xml index a5078cf..059ba39 100644 --- a/atom.xml +++ b/atom.xml @@ -3,7 +3,30 @@ https://tim.kicker.dev Tim's Blog - 2023-05-18T14:26:18.000Z + 2023-07-18T13:08:40.000Z + + https://tim.kicker.dev/2023/07/18/telegram/ + Should it really be Telegram? + + <img src="/2023/07/18/telegram/telegram.jpg" class="" title="Stock image by Daniel Weibel"> + + +<p>In recent years, WhatsApp has become one of the most popular messaging apps worldwide, connecting billions of people across the globe. However, beneath its seemingly user-friendly interface, there are growing concerns about privacy, security, and the impact of its corporate parent, Facebook. As a result, many users are seeking alternatives to WhatsApp that prioritize their digital well-being. However, it seems like most people are switching to another messenger that I’m pretty unsure about.</p> +<h3 id="It’s-open-source-Right"><a href="#It’s-open-source-Right" class="headerlink" title="It’s open source. Right?"></a>It’s open source. Right?</h3><p>Telegram states the following on their website:</p> +<blockquote><p>Telegram apps are open source and support reproducible builds. Anyone can independently verify that Telegram apps you download from App Store or Google Play were built using the exact same code that we publish.</p> +<footer><strong>Telegram</strong><cite><a href="https://telegram.org/apps">telegram.org/apps</a></cite></footer></blockquote> + + +<p>While those two sentences are not wrong, they are dangerously misleading consumers. See, what they are stating here is that their <strong>clients</strong> are open source. Their server code however still remains <strong>closed</strong> and therefore we do not know what Telegram actually does with our data. </p> +<h3 id="No-encryption-no-peace-of-mind"><a href="#No-encryption-no-peace-of-mind" class="headerlink" title="No encryption, no peace of mind"></a>No encryption, no peace of mind</h3><p>While Telegram offers end-to-end encryption in its “Secret Chats,” this feature is <a href="https://www.howtogeek.com/709484/how-to-start-an-encrypted-secret-chat-in-telegram/"><strong>not enabled by default</strong></a> for regular chats. This means that the content of your conversations may not be fully secure unless you specifically <strong>opt in</strong> for Secret Chats. Telegram has also faced criticism regarding the lack of independent audits of its encryption protocols, unlike Signal, which has undergone extensive third-party security audits. Without such audits, it is rather hard to prove that their E2EE is powerfull enough.</p> +<h3 id="But-what-should-we-use-instead"><a href="#But-what-should-we-use-instead" class="headerlink" title="But what should we use instead"></a>But what should we use instead</h3><p>There are many other great privacy respecting messenging apps which i’d rather use than telegram. I’ve listed my favorite ones below:</p> +<p><a href="https://www.signal.org/de/">Signal</a>: Known for its strong encryption, Signal offers end-to-end encryption by default for all conversations and has a focus on user privacy. Like I already said, it has undergone independent security audits and is widely regarded as one of the most secure messaging apps available.</p> +<p><a href="https://wire.com/de/">Wire</a>: Has a more modern looking user interface than Signal but also has ungergone security audits</p> +<p><a href="https://threema.ch/de">Threema</a>: Probably the OG because it’s the oldest one. Also requires no phone number to sign up (!!!)</p> +<p><a href="https://element.io/">Element</a> (Matrix): Element is an open-source, decentralized messaging platform that uses the <a href="https://matrix.org/">Matrix protocol</a>. </p> + + 2023-07-18T13:08:40.000Z + https://tim.kicker.dev/2023/05/18/whatsapp-analyze/ Data about data @@ -29,7 +52,7 @@ <p>We can see that the amount of messages remains pretty stable. This could prove our theory of two people in the same household as true. Maybe the gap in August could be a planned vacation?</p> <p>It would be pretty frighting if I told you all our assumptions were correct. Right? You may now probably recognize that metadata is a lot more valuable than you originally thought. But what conclusions can we draw from this newly gained awareness? </p> <p>Most people rely on the encryption of their messaging apps. If no one can read my data then I am safe, right? No. As we can see, an attacker does not need access to your communication in order to gather valuable information.</p> -<p>Just keep that in mind. </p> +<p>If you want to look more into this topic, I’d recommend watching <a href="https://www.youtube.com/watch?v=-YpwsdRKt8Q">Daniel Kriesel’s 33c3 presentation</a>.</p> 2023-05-18T14:26:18.000Z diff --git a/feed.json b/feed.json index 5e374b5..b856bd2 100644 --- a/feed.json +++ b/feed.json @@ -4,12 +4,20 @@ "description": "Personal website of Tim Kicker", "home_page_url": "https://tim.kicker.dev", "items": [ + { + "id": "https://tim.kicker.dev/2023/07/18/telegram/", + "url": "https://tim.kicker.dev/2023/07/18/telegram/", + "title": "Should it really be Telegram?", + "date_published": "2023-07-18T13:08:40.000Z", + "content_html": "\n\n\n

In recent years, WhatsApp has become one of the most popular messaging apps worldwide, connecting billions of people across the globe. However, beneath its seemingly user-friendly interface, there are growing concerns about privacy, security, and the impact of its corporate parent, Facebook. As a result, many users are seeking alternatives to WhatsApp that prioritize their digital well-being. However, it seems like most people are switching to another messenger that I’m pretty unsure about.

\n

It’s open source. Right?

Telegram states the following on their website:

\n

Telegram apps are open source and support reproducible builds. Anyone can independently verify that Telegram apps you download from App Store or Google Play were built using the exact same code that we publish.

\n
\n\n\n

While those two sentences are not wrong, they are dangerously misleading consumers. See, what they are stating here is that their clients are open source. Their server code however still remains closed and therefore we do not know what Telegram actually does with our data.

\n

No encryption, no peace of mind

While Telegram offers end-to-end encryption in its “Secret Chats,” this feature is not enabled by default for regular chats. This means that the content of your conversations may not be fully secure unless you specifically opt in for Secret Chats. Telegram has also faced criticism regarding the lack of independent audits of its encryption protocols, unlike Signal, which has undergone extensive third-party security audits. Without such audits, it is rather hard to prove that their E2EE is powerfull enough.

\n

But what should we use instead

There are many other great privacy respecting messenging apps which i’d rather use than telegram. I’ve listed my favorite ones below:

\n

Signal: Known for its strong encryption, Signal offers end-to-end encryption by default for all conversations and has a focus on user privacy. Like I already said, it has undergone independent security audits and is widely regarded as one of the most secure messaging apps available.

\n

Wire: Has a more modern looking user interface than Signal but also has ungergone security audits

\n

Threema: Probably the OG because it’s the oldest one. Also requires no phone number to sign up (!!!)

\n

Element (Matrix): Element is an open-source, decentralized messaging platform that uses the Matrix protocol.

\n", + "tags": [] + }, { "id": "https://tim.kicker.dev/2023/05/18/whatsapp-analyze/", "url": "https://tim.kicker.dev/2023/05/18/whatsapp-analyze/", "title": "Data about data", "date_published": "2023-05-18T14:26:18.000Z", - "content_html": "

I am a huge fan of gathering, analyzing and evaluating data. Creating statistics and colorful graphs just has something to it. But the interesting part is not necessarily the data itself, it’s the data about the data. How often does something occur, at which time and by whom are very important characteristics when it comes to creating patterns.

\n

For example, let’s look at the two weekday-graphs of two different WhatsApp chats of mine.

\n

Weekdays Chat A

\n\n\n

Weekdays Chat B

\n\n\n

It is not that hard to figure out the difference between those two graphs. The number of daily messages in A is pretty stable except for Friday and Monday, which are two extremes. Maybe this could be about a friend group planning what they’re going to do on the weekend? The general quantity of messages is also lower as in figure B. The second chat also has a huge gap between Sunday and Saturday. Could this be a group chat related to work? Or is it someone close who happens to live in the same house?

\n

You can see that it is possible to gather connections and create assumptions about certain topics without even looking at the data itself. Now let’s take a deeper look.

\n

Days-Heatmap Chat A

\n\n\n\n

How interesting. We can see that the group is most active between the end of January till May and spikes again in October. If you happen to live in Austria, you probably know what that means. See, in most areas, the Austrian summer break for students lasts from June till the beginning of September while Christmas lasts from December to January. There is also one small break during November. You can clearly see that this could be a chat between friends who happen to be students but don’t have the same classes together. They probably spend a lot of their free time together, which explains the lack of data during the breaks. No one texts another person while they’re sitting next to them… right?

\n

Days-Heatmap Chat B

\n\n\n

We can see that the amount of messages remains pretty stable. This could prove our theory of two people in the same household as true. Maybe the gap in August could be a planned vacation?

\n

It would be pretty frighting if I told you all our assumptions were correct. Right? You may now probably recognize that metadata is a lot more valuable than you originally thought. But what conclusions can we draw from this newly gained awareness?

\n

Most people rely on the encryption of their messaging apps. If no one can read my data then I am safe, right? No. As we can see, an attacker does not need access to your communication in order to gather valuable information.

\n

Just keep that in mind.

\n", + "content_html": "

I am a huge fan of gathering, analyzing and evaluating data. Creating statistics and colorful graphs just has something to it. But the interesting part is not necessarily the data itself, it’s the data about the data. How often does something occur, at which time and by whom are very important characteristics when it comes to creating patterns.

\n

For example, let’s look at the two weekday-graphs of two different WhatsApp chats of mine.

\n

Weekdays Chat A

\n\n\n

Weekdays Chat B

\n\n\n

It is not that hard to figure out the difference between those two graphs. The number of daily messages in A is pretty stable except for Friday and Monday, which are two extremes. Maybe this could be about a friend group planning what they’re going to do on the weekend? The general quantity of messages is also lower as in figure B. The second chat also has a huge gap between Sunday and Saturday. Could this be a group chat related to work? Or is it someone close who happens to live in the same house?

\n

You can see that it is possible to gather connections and create assumptions about certain topics without even looking at the data itself. Now let’s take a deeper look.

\n

Days-Heatmap Chat A

\n\n\n\n

How interesting. We can see that the group is most active between the end of January till May and spikes again in October. If you happen to live in Austria, you probably know what that means. See, in most areas, the Austrian summer break for students lasts from June till the beginning of September while Christmas lasts from December to January. There is also one small break during November. You can clearly see that this could be a chat between friends who happen to be students but don’t have the same classes together. They probably spend a lot of their free time together, which explains the lack of data during the breaks. No one texts another person while they’re sitting next to them… right?

\n

Days-Heatmap Chat B

\n\n\n

We can see that the amount of messages remains pretty stable. This could prove our theory of two people in the same household as true. Maybe the gap in August could be a planned vacation?

\n

It would be pretty frighting if I told you all our assumptions were correct. Right? You may now probably recognize that metadata is a lot more valuable than you originally thought. But what conclusions can we draw from this newly gained awareness?

\n

Most people rely on the encryption of their messaging apps. If no one can read my data then I am safe, right? No. As we can see, an attacker does not need access to your communication in order to gather valuable information.

\n

If you want to look more into this topic, I’d recommend watching Daniel Kriesel’s 33c3 presentation.

\n", "tags": [] } ] diff --git a/index.html b/index.html index 292b6d8..7f1c186 100644 --- a/index.html +++ b/index.html @@ -226,6 +226,20 @@

Recent Posts

+
+ +
+

Jul 18, 2023

+
+
+ + + Should it really be Telegram? + + +
+
+
@@ -299,7 +313,6 @@ nanobar.go(100); - + diff --git a/newPost.json b/newPost.json index 8b03cb2..7e62cff 100644 --- a/newPost.json +++ b/newPost.json @@ -1 +1 @@ -{"title":"Data about data","id":"2023/05/18/whatsapp-analyze/","date_published":"05/18/2023","summary":"","url":"https://tim.kicker.dev/2023/05/18/whatsapp-analyze/","tags":[],"categories":[]} \ No newline at end of file +{"title":"Should it really be Telegram?","id":"2023/07/18/telegram/","date_published":"07/18/2023","summary":"","url":"https://tim.kicker.dev/2023/07/18/telegram/","tags":[],"categories":[]} \ No newline at end of file diff --git a/rss.xml b/rss.xml index 38e2521..f2dc17b 100644 --- a/rss.xml +++ b/rss.xml @@ -5,8 +5,31 @@ https://tim.kicker.dev Personal website of Tim Kicker en - Thu, 18 May 2023 14:26:18 +0000 - Thu, 18 May 2023 14:26:18 +0000 + Tue, 18 Jul 2023 13:08:40 +0000 + Tue, 18 Jul 2023 13:08:40 +0000 + + https://tim.kicker.dev/2023/07/18/telegram/ + Should it really be Telegram? + https://tim.kicker.dev/2023/07/18/telegram/ + Tue, 18 Jul 2023 13:08:40 +0000 + + https://tim.kicker.dev/2023/05/18/whatsapp-analyze/ Data about data @@ -33,7 +56,7 @@ <p>We can see that the amount of messages remains pretty stable. This could prove our theory of two people in the same household as true. Maybe the gap in August could be a planned vacation?</p> <p>It would be pretty frighting if I told you all our assumptions were correct. Right? You may now probably recognize that metadata is a lot more valuable than you originally thought. But what conclusions can we draw from this newly gained awareness? </p> <p>Most people rely on the encryption of their messaging apps. If no one can read my data then I am safe, right? No. As we can see, an attacker does not need access to your communication in order to gather valuable information.</p> -<p>Just keep that in mind. </p> +<p>If you want to look more into this topic, I’d recommend watching <a href="https://www.youtube.com/watch?v=-YpwsdRKt8Q">Daniel Kriesel’s 33c3 presentation</a>.</p> ]]> diff --git a/sitemap.xml b/sitemap.xml index 8249b6b..6c287fa 100644 --- a/sitemap.xml +++ b/sitemap.xml @@ -1,10 +1,19 @@ + + https://tim.kicker.dev/2023/07/18/telegram/ + + 2023-07-18 + + monthly + 0.6 + + https://tim.kicker.dev/2023/05/18/whatsapp-analyze/ - 2023-07-17 + 2023-07-18 monthly 0.6 @@ -13,7 +22,7 @@ https://tim.kicker.dev/About/ - 2023-07-17 + 2023-07-18 monthly 0.6 @@ -22,7 +31,7 @@ https://tim.kicker.dev/ - 2023-07-17 + 2023-07-18 daily 1.0