News for hackers. Stuff that matters.
Re:Signal Desktop is corrupting its database by 88840-8855 on Sunday February 28, 2021 @05:51AM (#26292391)
As much as I want to move to Signal, I cannot. Their apps feel like a hobby project from the iOS 5 era. Especially the desktop app has a terrible UI. It feels, looks and behaves very bad.

And then I am looking at telegram - everything is polished, many smart and useful functionality is included. The design is outstanding, the updates seem to add useful stuff.

Can someone explain to me why Signal is so very bad compared to telegram?

Re:Signal Desktop is corrupting its database by domano on Sunday February 28, 2021 @05:54AM (#26292406)
My guess is that the priorization is different - signal implements everything with a privacy first approach in mind, whereas telegram is not even encrypted by default (even Whatsapp does that AFAIK).
Re:Signal Desktop is corrupting its database by Sebb767 on Sunday February 28, 2021 @07:57AM (#26293078)
> telegram is not even encrypted by default

That's technically not true - it's not end-to-end-encrypted by default.

But yes, it is a design choice - telegram puts usability first - see all their innovations with large groups, stickers etc -, even at the expense of some privacy (i.e. no e2e-chats). But that's why you can have Telegram open on every device you own and probably why they are the second largest chat app by now.

Signal, on the other hand, values privacy first, everything else second. This is why this bug is open for 6 months - they see your chat log as a convenience feature and mostly a burden. In addition, Signal is a smaller team with less funding, so that their UI is not as polished is partially also due to lacking manpower, but its simply not a priority for them.

Re:Signal Desktop is corrupting its database by xvector on Sunday February 28, 2021 @06:40AM (#26292655)
Signal requires a telephone number. This makes the privacy bit is a complete joke, even if your chats are E2EE. Your Signal account is bound to a KYC identity.
Re:Signal Desktop is corrupting its database by abdullahkhalids on Sunday February 28, 2021 @06:53AM (#26292727)
Privacy and anonymity are distinct concepts. Signals provides very high privacy and low anonymity - which is totally acceptable for many people's threat model.

Other apps may provide higher anonymity, but none provide privacy guarantees higher than (or even close to) Signal.

Re:Signal Desktop is corrupting its database by corty on Sunday February 28, 2021 @08:19AM (#26293226)
Privacy and anonymity are distinct, but strongly correlated. Without anonymity, there will always be enough metadata to hang you with. Using Signal as a surveillance-evasion-tool will get you into trouble in a lot of the more unsavoury corners of this planet.

So, being "best" at privacy is meaningless unless you are in the very lucky position that your local jurisdiction fits Signal's threat model. There aren't many in the west even...

Re:Signal Desktop is corrupting its database by blazzy on Sunday February 28, 2021 @01:21PM (#26295625)
Meaningless? I value private communication with my friends and family. I don't exactly need anonymity there. In fact I want the opposite. In the absence of phone numbers I would be adding very explicit metadata on my device to distinguish between my friends.

Signal has taken measures to limit its ability to know who I'm sending and receiving messages from. Though it's still possible by mapping my IP address to me. So yes there is still a centralized metadata problem, but I'm not letting perfect stand in the way of better.

Re:Signal Desktop is corrupting its database by upofadown on Sunday February 28, 2021 @01:35PM (#26295785)
>Without anonymity, there will always be enough metadata to hang you with.

Not in most cases, for most people, most of the time. Everyone knows you communicate with your family, friends and business associates. Very few people communicate out of those groups and even if they do they rarely have to worry about anyone finding out about it.

Re:Signal Desktop is corrupting its database by saurik on Sunday February 28, 2021 @03:47PM (#26296919)
Umm... in fact "most people" communicate outside of those groups, as that's how dating works, and it is a big reason why Snapchat dominates "private communication": people don't want to give their "real phone number" to someone until they trust them. Signal needs to realize its big competition is not WhatsApp, but is Snapchat (particularly given that WhatsApp is pretty damned secure, and so should be seen as an ally versus all of the actually-insecure messaging apps of the world).
Re:Signal Desktop is corrupting its database by jhatemyjob on Monday March 01, 2021 @11:00PM (#26311771)
Idk how giving someone your Snapchat/Instagram is less risky than giving them your number. You can block people from calling/texting you. In fact iOS recently came out with a feature that blocks all incoming calls/texts from unknown numbers. So even if you give somebody your number and they are evil enough to sign you up for a robocall list it would still be fine
Re:Signal Desktop is corrupting its database by symlinkk on Sunday February 28, 2021 @01:19PM (#26295600)
I feel like that’s a handwavey academic answer. In real life situations you always need both privacy and anonymity. Do you think a gay rights activist in the Middle East wants all of their contacts to know their phone number and therefore their personal identity?
Re:Signal Desktop is corrupting its database by appleflaxen on Sunday February 28, 2021 @08:18AM (#26293217)
can anyone commment on the design consideration that the telephone requirement addresses?
Re:Signal Desktop is corrupting its database by xvector on Sunday February 28, 2021 @01:51PM (#26295940)
This is designed to make Signal more popular while solving some fake account issues:

- Using phone numbers means that Signal can constantly check against your contacts to let you know if any of your contacts are now using Signal. As such, using phone numbers encourages use of Signal.

- The usage of phone numbers instead of email or usernames also helps combat temporary/fake account creation abuse, as phone numbers are KYC if you ban VoIP numbers

That said, in the end it is a compromise on privacy and anonymity to increase the popularity and stability of the app.

Re:Signal Desktop is corrupting its database by SignalNotSecure on Sunday February 28, 2021 @09:29AM (#26293610)
Whatsapp E2E is a red herring. It's not protecting you from your perceived threat like you think it is.

https://telegra.ph/Why-WhatsApp-Will-Never-Be-Secure-05-15

Re:Signal Desktop is corrupting its database by domano on Monday March 01, 2021 @07:25AM (#26302091)
Sure i agree, just saying that even WhatsApp ticks that box in some way.
Re:Signal Desktop is corrupting its database by saddlerustle on Sunday February 28, 2021 @06:21AM (#26292560)
WhatsApp is encrypted by default
Re:Signal Desktop is corrupting its database by croes on Sunday February 28, 2021 @07:24AM (#26292888)
That's what he/she wrote.
Re:Signal Desktop is corrupting its database by einpoklum on Sunday February 28, 2021 @06:15AM (#26292524)
That's not it. That is, choosing whether conversations are encrypted by default or not has very little to do with whether the client application has polished UI.
Re:Signal Desktop is corrupting its database by alerighi on Sunday February 28, 2021 @07:00AM (#26292775)
To me Telegram is better even from a privacy point. Sure, if someone breaks into the Telegram servers can read you messages, but to me that isn't the first privacy concern.

I'm more concerned about every day privacy, and Telegram is far better on them. Do you realized that you sent by mistake some data to the wrong people? In Telegram you can delete or edit every messages you want whenever you want.

Don't you want to share your phone number in a group? In Telegram your phone number is hidden by default, meaning that other group members doesn't see you number unless you share it with them.

Also Signal is open source but not really open. In Telegram you can use whatever client you want, in Signal you are forbidden to use anything else than the official client. And the official client is open source, but it depends on proprietary services, like the Google Play services on Android, so you really can't use it on a 100% open source system. You can't even find online the Signal apk by their choice, so the only official way is to install it from the Google Play Store (and how do you verify that the apk that Google provided to you doesn't contain a backdoor?)

Re:Signal Desktop is corrupting its database by growse on Sunday February 28, 2021 @08:10AM (#26293168)
> To me Telegram is better even from a privacy point. Sure, if someone breaks into the Telegram servers can read you messages, but to me that isn't the first privacy concern.

For a lot of people, that's exactly the concern.

> Also Signal is open source but not really open. In Telegram you can use whatever client you want, in Signal you are forbidden to use anything else than the official client.

There's nothing in open source that requires people running services to allow anyone to connect to it however they like. You still have the freedom to inspect, modify, run and distribute both the server and client, so it's to see what part of that in "not really open".

> And the official client is open source, but it depends on proprietary services, like the Google Play services on Android, so you really can't use it on a 100% open source system.

I agree, this is annoying. But it depends on your threat model and it seems that most people don't see Google as the threat to protect against.

> You can't even find online the Signal apk by their choice, so the only official way is to install it from the Google Play Store

https://signal.org/android/apk/

> (and how do you verify that the apk that Google provided to you doesn't contain a backdoor?)

https://signal.org/blog/reproducible-android/

Re:Signal Desktop is corrupting its database by pseudalopex on Sunday February 28, 2021 @01:19PM (#26295609)
The source is open. The system is closed.
Re:Signal Desktop is corrupting its database by Normille on Sunday February 28, 2021 @06:37PM (#26298187)

  >In Telegram you can delete or edit every messages you want whenever you want...
I'm always gobsmacked when people cite this as a positive. I'm a [mostly] happy user of Telegram. But this is the single stupidest 'feature' of the app. The only person who should be able to decide to delete data off my devices is me. No-one else. Full stop.

Remember the furore when Amazon were caught deleting books off people's Kindles? Everyone was rightly outraged by that. Yet so many people think it's a great idea that Telegram allows other people to arbitrarily delete content from your devices.

Re:Signal Desktop is corrupting its database by orbifold on Sunday February 28, 2021 @07:39AM (#26292977)
Telegram hires excellent developers and was started by someone that had successfully run a company before. The clients for the different platforms in the case of telegram were developed by very small teams (1-2) of exceptional programmers.

- macOS client: https://github.com/overtake/TelegramSwift/graphs/contributor.... Written almost single handedly by one developer.

- Telegram Desktop: https://github.com/telegramdesktop/tdesktop/graphs/contribut.... Written almost single handedly by one developer, who also wrote almost all of the supporting Qt code.

Re:Signal Desktop is corrupting its database by chovybizzass on Sunday February 28, 2021 @05:56AM (#26292424)
Telegram has a bit better and also has e2e encryption (optional).
Re:Signal Desktop is corrupting its database by spacemanmatt on Sunday February 28, 2021 @07:00AM (#26292771)
Optional E2E means there's a chance that misunderstanding or misusing the GUI results in exposure. For critical purposes, that's unacceptable.
Re:Signal Desktop is corrupting its database by frereubu on Sunday February 28, 2021 @10:17AM (#26293928)
E2E encryption is only available in one-to-one chats, and those chats are specific to the device. So, like Signal chats effectively.
Re:Signal Desktop is corrupting its database by henearkr on Sunday February 28, 2021 @06:29AM (#26292599)
Not the same purpose: Telegram as a SNS, Signal as a messaging app.
Re:Signal Desktop is corrupting its database by waheoo on Sunday February 28, 2021 @06:01AM (#26292452)
I've been using signal since release, never had any issues with its level of polish.

Updates have been meaningful and minimal.

Can't say I'd be happy if it started adding a bunch of features I didn't ask for.

Re:Signal Desktop is corrupting its database by primeos on Sunday February 28, 2021 @06:53AM (#26292736)
> Updates have been meaningful and minimal.

Opinions may differ here. Their sticker packs feature added at least 50 MB (mostly via node_modules): https://github.com/signalapp/Signal-Desktop/issues/3919

> Can't say I'd be happy if it started adding a bunch of features I didn't ask for.

What features do you mean here? The GitHub issue is a bug report and not a feature request. However, there are two features that could help: Backups (export and import functionality) and syncing older messages from the phone during the initial setup. Both of these features can be fully optional and shouldn't require much code.

And they do regularly add new features (that I didn't ask for but I get why) anyway: https://github.com/signalapp/Signal-Desktop/releases

Re:Signal Desktop is corrupting its database by rvz on Sunday February 28, 2021 @05:54AM (#26292409)
> Can someone explain to me why Signal is so very bad compared to telegram?

The Signal desktop app is Electron, where as Telegram is native. That's why and it's that simple.

Re:Signal Desktop is corrupting its database by fauigerzigerk on Sunday February 28, 2021 @06:15AM (#26292525)
No, it's not that simple at all. The Signal desktop app is bad in ways that have nothing to do with Electron at all.

Most importantly, it's bad at protecting my privacy. You can't show any message to anyone on your screen or have someone look over your shoulder unless you want them to see who you recently communicated with in what order as well as the start of the most recent messages.

Re:Signal Desktop is corrupting its database by primeos on Sunday February 28, 2021 @07:20AM (#26292865)
> unless you want them to see who you recently communicated with in what order as well as the start of the most recent messages.

Thanks for mentioning that. I always wondered why there's no option to at least hide the most recent messages and dates (or temporarily hide the whole sidebar). I guess most people are either fine with it or use their phone instead (and using Signal-Desktop in public / when someone's looking is probably uncommon). It seems like at least Telegram-Desktop has this issue as well (not sure if there's an option for it).

Anyway, a slight modification to the UI to hide/minimize the sidebar would be something I'd appreciate for those rare situations.

Re:Signal Desktop is corrupting its database by fauigerzigerk on Sunday February 28, 2021 @07:55AM (#26293064)
I think it's a pretty common situation for someone to come up to your desk to talk about something they sent you earlier. Not rare for me at all.
Re:Signal Desktop is corrupting its database by Kelteseth on Sunday February 28, 2021 @06:24AM (#26292574)
Telegram desktop is a Qt Widgets application.
Re:Signal Desktop is corrupting its database by dgellow on Sunday February 28, 2021 @06:27AM (#26292591)
If you're on macOS you have the choice between a native app and the QT client.

Native: https://macos.telegram.org/

Qt client: https://desktop.telegram.org/

Re:Signal Desktop is corrupting its database by kitsunesoba on Sunday February 28, 2021 @10:40AM (#26294110)
There’s also an unofficial native Windows 10 + Xbox client: https://github.com/UnigramDev/Unigram

In addition, there’s a libpurple plugin should one want to use Telegram with Pidgin, as well as several other clients including one that’s TUI based.

The choice of client is a massive boon. It’s unfortunate that one can’t use a alternative Signal clients, because they’d likely solve many of the gripes people have with Signal.

Re:Signal Desktop is corrupting its database by metachris on Sunday February 28, 2021 @06:08AM (#26292488)
That's certainly not the reason.

There are many really good Electron applications, Visual Studio Code being one of them.

Re:Signal Desktop is corrupting its database by fouc on Sunday February 28, 2021 @06:43AM (#26292674)
Visual Studio Code is literally the only good Electron application, the rare exception that proves the rule.
Re:Signal Desktop is corrupting its database by Griffinsauce on Sunday February 28, 2021 @07:54AM (#26293063)
GitKraken, Insomnia, Postman, Mongo Compass, Mingo, Mockoon, Notion (yes it's slow AF to load, but that's not due to electron), LosslessCut, Gitify
Re:Signal Desktop is corrupting its database by dewey on Sunday February 28, 2021 @06:05AM (#26292469)
There's non-native apps that are not as bad as Signal so that doesn't really explain that.