"deprecated":"Cuid and other k-sortable and non-cryptographic ids (Ulid, ObjectId, KSUID, all UUIDs) are all insecure. Use @paralleldrive/cuid2 instead."
"deprecated":"Please upgrade to version 7 or higher. Older versions may use Math.random() in certain circumstances, which is known to be problematic. See https://v8.dev/blog/math-random for details.",
In recent years, WhatsApp has become one of the most popular messaging apps worldwide, connecting billions of people across the globe. However, beneath its seemingly user-friendly interface, there are growing concerns about privacy, security, and the impact of its corporate parent, Facebook. As a result, many users are seeking alternatives to WhatsApp that prioritize their digital well-being. However, it seems like most people are switching from one bad messenger to another.
## But it's open source. Right?
Telegram states on their website that their "apps are open source and support reproducible builds. Anyone can independently verify that Telegram apps you download from App Store or Google Play were built using the exact same code that we publish." While those two sentences are not wrong, they are dangerously misleading consumers. See, what they are stating here is that their **clients** are open source. Their server code however still remains **closed** and therefore we do not not what Telegram can and does with our data.
## No encryption, no peace of mind
While Telegram offers end-to-end encryption in its "Secret Chats," this feature is **not enabled by default** for regular chats. This means that the content of your conversations may not be fully secure unless you specifically opt for Secret Chats. Telegram has also faced criticism regarding the lack of independent audits of its encryption protocols, unlike Signal, which has undergone extensive third-party security audits. Without such audits, it is rather hard to prove that their E2EE is powerfull enough.
## But what should we use instead
There are many other great privacy respecting messenging apps. I've listed my favorite ones below:
Signal: Known for its strong encryption, Signal offers end-to-end encryption by default for all conversations and has a focus on user privacy. Like I already said, it has undergone independent security audits and is widely regarded as one of the most secure messaging apps available.
Wire: Has a more modern looking user interface than Signal but also has ungergone security audits
Threema: Probably the OG because it's the oldest one. Also requires no phone number to sign up (!!!)
Element (Matrix): Element is an open-source, decentralized messaging platform that uses the [Matrix protocol](https://matrix.org/).
{% asset_img telegram.jpg "Stock image by Daniel Weibel" %}
In recent years, WhatsApp has become one of the most popular messaging apps worldwide, connecting billions of people across the globe. However, beneath its seemingly user-friendly interface, there are growing concerns about privacy, security, and the impact of its corporate parent, Facebook. As a result, many users are seeking alternatives to WhatsApp that prioritize their digital well-being. However, it seems like most people are switching to another messenger that I'm pretty unsure about.
Telegram apps are open source and support reproducible builds. Anyone can independently verify that Telegram apps you download from App Store or Google Play were built using the exact same code that we publish.
{% endblockquote %}
While those two sentences are not wrong, they are dangerously misleading consumers. See, what they are stating here is that their **clients** are open source. Their server code however still remains **closed** and therefore we do not know what Telegram actually does with our data.
### No encryption, no peace of mind
While Telegram offers end-to-end encryption in its "Secret Chats," this feature is [**not enabled by default**](https://www.howtogeek.com/709484/how-to-start-an-encrypted-secret-chat-in-telegram/) for regular chats. This means that the content of your conversations may not be fully secure unless you specifically **opt in** for Secret Chats. Telegram has also faced criticism regarding the lack of independent audits of its encryption protocols, unlike Signal, which has undergone extensive third-party security audits. Without such audits, it is rather hard to prove that their E2EE is powerfull enough.
### But what should we use instead
There are many other great privacy respecting messenging apps which i'd rather use than telegram. I've listed my favorite ones below:
[Signal](https://www.signal.org/de/): Known for its strong encryption, Signal offers end-to-end encryption by default for all conversations and has a focus on user privacy. Like I already said, it has undergone independent security audits and is widely regarded as one of the most secure messaging apps available.
[Wire](https://wire.com/de/): Has a more modern looking user interface than Signal but also has ungergone security audits
[Threema](https://threema.ch/de): Probably the OG because it's the oldest one. Also requires no phone number to sign up (!!!)
[Element](https://element.io/) (Matrix): Element is an open-source, decentralized messaging platform that uses the [Matrix protocol](https://matrix.org/).
@ -39,5 +39,5 @@ It would be pretty frighting if I told you all our assumptions were correct. Rig
Most people rely on the encryption of their messaging apps. If no one can read my data then I am safe, right? No. As we can see, an attacker does not need access to your communication in order to gather valuable information.
Just keep that in mind.
If you want to look more into this topic, I'd recommend watching [Daniel Kriesel's 33c3 presentation](https://www.youtube.com/watch?v=-YpwsdRKt8Q).
