This feature should never have been enabled in this one-way manner but being a social platform means trying everything to get users tied down to it.

It’s just like Venmo. I’m seeing users in my newsfeed because they’re in my contacts but not because we added each other. Really bizarre.

Even better, Telegram should allow to register without a phone numbner (they could charge a little sum in Bitcoins if they are afraid that there will be bot registrations). This could even increase their user base because there are users who don't want to give away a phone number.

Agree, except for Bitcoin (or rather, have Bitcoin but Stripe and other options as well.)

That sounds like the perfect way to test stolen credit cards. In high-risk transactions, Stripe uses SMS 2FA so you're back to needing a SIM card.

Hmmm. Good point if Stripe use 2FA even if it would still be harder for the attacker as they would have to correlate payment - sms - account created - account joined group which is significantly harder to do than what is happening currently.

I guess what they'll do instead is to just outlaw Telegram :-|

That defeats the purpose, no?

No, only if you are

- fighting someone who controls Stripe well enough to browse transaction logs

- or you are fighting someone who can access your bank transactions (more likely in this case) and manage to correlate them correctly with Telegram account creation time

Both seems like huge steps forward compared to sms validation.

Furthermore: Bitcoin is not much safer for the ordinary citizen. If anything it is way easier to trace than cash and I guess slightly more different to trace than bank transfers.

Or am I missing something?

If you need anonymity you could buy a prepaid VISA

> This also means that other messengers using similar contact discovery allow to de-anonymize its users the same way.

While I don't like to have messaging apps tied to the phone number, it has become a mainstream model that most people accept and know how to use.

I have been thinking for some time that we need a mainstream messaging app that uses end-to-end encrypted, and you can get in contact with a peer only if it accepts you (just like old messaging apps, WLM, ICQ, etc), so, if the peer doesn't accept to chat with you, you won't even know whether the number is registered.

In fact, my initial PoC is https://safer.chat/, I just need the time to make an app from it.

Yep, expect no privacy in any app that requires a phone number. At least in most places. More than 150 governments require a proof of identity to purchase a SIM card.

I have a question about Telegram. Let's say I have a number in my contacts, but the other side doesn't have my number in their contacts. So I can now see their name and picture and "last seen"? But can they see the same thing about me without having my number saved? Do they get notified at all? Seems really odd to do this one-way.