While messages between people on WhatsApp remain end-to-end encrypted and can’t be read by Facebook, many remain concerned over the amount of personally-identifying data the social networking giant is gathering through WhatsApp.
As a result of the ultimatum, WhatsApp users have been flocking to alternative platforms such as Telegram and Signal.
However, Sadleir has warned that parents may want to take care when allowing their children to install and use Telegram.
Groups Nearby and People Nearby – location-based connection on Telegram
In an interview on 702 and CapeTalk, Sadleir said that she looked into Telegram’s “Groups Nearby” feature after receiving an email from a concerned parent.
As an example, Sadleir pointed out one of the groups in her area which contained disturbing pornographic images.
“I picked up ‘Sluts of Randburg’ and all these groups where there is the most—and I must say I’m hardy because I’ve seen it all—the most horrific, affecting pornography. You can see it without even joining the groups,” said Sadleir.
Sadleir said that parents who are concerned about their children stumbling across this feature should disable Telegram’s access to their phones’ location services.
However, she also warned that there is nothing stopping children from just turning these location permissions back on.
Vulnerability in Telegram’s “People Nearby”
Earlier this year Ars Technica reported that independent security researcher Ahmed Hassan discovered a vulnerability in Telegram’s “People Nearby” feature that makes it easy for a hacker to find the precise location of other Telegram users who have the feature enabled.
The attack exploits the fact that Telegram on Android reports your distance from other nearby users who have enabled People Nearby.
An attacker can spoof their location and get three different distance readings to another user, then triangulate their exact location.
Even if they can’t spoof their location, they can simply walk or drive around an area to get the distance readings and use those.
Ars noted that fixing the vulnerability is technically easy. However, Telegram has told Hassan that it won’t be fixing the issue and that it isn’t covered by its bug bounty programme.
“Users in the People Nearby section intentionally share their location, and this feature is disabled by default. It’s expected that determining the exact location is possible under certain conditions,” Telegram stated.
Easy to find inappropriate groups on Telegram
It should also be noted that blocking Telegram from using location services won’t prevent children from finding inappropriate groups through Telegram’s search function.
The group Sadleir referred to was not discoverable via search at the time of publication, but many other groups that are not suitable for children are.
Telegram does not offer any age restriction features and it’s had a complicated relationship with pornography on its platform.
The company’s terms of service do not outright ban pornography from its platform, but it does allow users to report pornography and according to reports, Telegram has cracked down on such content.
A Change.org petition from three years ago asked Telegram to allow channels that are marked 18+ specifically for pornography. This feature was not implemented.
Despite the crackdown, pornographic material is still available in public groups on Telegram.
It’s also worth noting that Telegram has no minimum age except in the EU and UK.
Telegram’s current terms of service are short and simple:
Use our service to send spam or scam users.
Promote violence on publicly viewable Telegram channels, bots, etc.
Post illegal pornographic content on publicly viewable Telegram channels, bots, etc.
We reserve the right to update these Terms of Service later.
Citizens of EU countries and the United Kingdom must be at least 16 years old to sign up.
WhatsApp’s new terms update is a big concern for a lot of people. A lot of WhatsApp users moved over to Telegram. Telegram surpassed 500 million active users today. In the past 72 hours alone, more than 25 million people joined Telegram.
“The content of your messages is not something to be concerned about unless if you’re involved in criminal activity.
“Broadly speaking, the content of any WhatsApp message is encrypted and cannot be read by anyone else. But we do have the right to be concerned about the extent of information that is now being put together in order for advertisers to target us.”
And, while some have already moved on to alternative Apps such as Telegram or Signal, Goldstuck said if you were able to persuade people you knew to make the move, it made sense to leave WhatsApp completely. If not and you lost your contacts, it didn’t make sense.
“Signal and Telegram are definitely a lot safer than WhatsApp in terms of the information they collect and even in terms of security. Telegram is the best-known. The reason why the apps owned by Google are so intrusive is that they are providing it to you for free.”
He added that Facebook had made a comment that it’s about business use of WhatsApp, but he questioned how people knew when they’re engaging with business and when you were not.
Some WhatsApp users had mixed reactions. “If you really want to get off-grid and keep your things private, don’t own a smartphone,” one user said.
Another said: “I would leave WhatsApp but at the same time, I need WhatsApp.”
In this article, we will compare these three instant messengers on a number of fronts: security, features, and ownership. What you will get and lose by choosing one of these messengers over the others, so you can make a well educated choice about which app you want to use.
Security is the most debatable and contentious topic among the three messaging services.
One thing that WhatsApp definitely has going for it is its end-to-end encryption. Plus, E2E on WhatsApp is available on every single mode of communication that the app enables. So all your messages, video calls, voice calls, photos, and anything else you share is end-to-end encrypted on WhatsApp.
What that means, is that you and the recipient are the only people who can read the messages you send to them. WhatsApp can’t decrypt the contents of your messages, calls, photos, etc, thus ensuring your security and privacy.
It is noteworthy that WhatsApp uses the E2E protocol developed by Open Whisper Systems, which is the name behind Signal messenger. That’s a good thing, because the Signal protocol is open source, widely peer-reviewed, and is generally considered one of the best protocols for implementing end-to-end encryption in messaging platforms.
It’s also noteworthy that even though all your communication on WhatsApp uses E2E encryption, the company does not encrypt backups (cloud and local). Also, it does not encrypt the metadata which is used to carry communication between two endpoints. This is one of the major criticisms of WhatsApp’s security model. While metadata does not allow anyone to read your messages, it lets authorities know whom and when you messaged someone, and for how long.
But that’s on the back-end. What about security features on the user-facing side of WhatsApp. Well, WhatsApp offers a built-in app lock feature on both the Android and iOS apps, so you can lock your WhatsApp chats with biometrics. Moreover, you get support for two factor authentication (2FA) on the app, which is great for security as well.
Overall, WhatsApp does a pretty solid job of ensuring security for its users. That said, WhatsApp has suffered a couple of major privacy nightmares, especially the recent issue with group chats getting indexed on Google search. That issue has been fixed, however, it was not a good look for the messaging app.
As far as security is concerned, Telegram does offer some protections to its users. However, there are multiple pain points in the way Telegram encrypts your messages and other information. For one, while Telegram supports E2E encryption, it’s not enabled by default. The only way to use E2E encryption on Telegram is to use its secret chats feature.
Messages sent in a secret chat are E2E encrypted, which is nice, but regular chats are not. This means that the messages are encrypted on your device and then they are decrypted on Telegram’s server. Again, the messages are encrypted on the server and sent to the recipient’s device for final decryption. As you can see, in this process, Telegram has the encryption keys on the server-side and can, in theory, access your normal chats.
Telegram states that it manages its message storage and decryption keys in a way that one would require court orders from multiple legal systems around the world to be able to access any of your data. In fact, the company says that it has shared 0 bytes of data with third-parties and governments to this date.
Even if you’re using secret chats, Telegram uses its own proprietary encryption protocol, MTProto, to encrypt your messages. This may very well be fine, but since its a closed-source protocol, security researchers can’t verify it. As such, security researchers believe that using an open-source and widely trusted protocol such as the Signal protocol would have been better than using a proprietary closed-source encryption protocol in Telegram.
On the user-facing side of things, Telegram, like WhatsApp, also offers a built in app lock. However, end-to-end encryption is incredibly scarce in the app. Telegram groups are not encrypted because Secret Chats are only supported for single-user communication. Moreover, Telegram’s desktop client doesn’t support E2E encryption on any platform other than macOS.
Telegram’s security isn’t nearly as robust as WhatsApp’s or Signal Messenger’s.
Signal is by far the best when it comes to security, be it on the back-end or on the user-facing side of the service.
As mentioned above, Signal uses the open-source Signal Protocol to implement end-to-end encryption. And just like WhatsApp, the E2E encryption covers all forms of communication on Signal.
While WhatsApp encrypts messages and calls (and that’s enough for most users), Signal goes one step further and encrypts the metadata too. In order to protect user privacy from all corners, Signal devised a new way to communicate between the sender and the recipient and it’s called Sealed Sender. Basically, with Sealed Sender, no one will be able to know — not even Signal — who is messaging whom, which is amazing.
In addition, you have some incredible privacy features on Signal that is going to make your messaging experience even more private and secure. For instance, you can lock Signal with a passcode or biometrics. Then there is 2FA and an option to block screenshots within the app and the recent screen. And recently Signal added a new feature to blur faces automatically before sending images.
Not to mention, Signal by default encrypts all the local files with a 4-digit passcode. And if you want to create an encrypted local backup then you can do that as well. The app now also supports encrypted group calls.
There was recently some reporting about Cellebrite cracking Signal’s security. However, Signal has since debunked that news and you can read more about it here. All in all, in terms of security and privacy protection, Signal stands head and shoulder above WhatsApp and Telegram and that make it the most secure messaging app between the three.
For the most part, WhatsApp offers almost every feature you might need. You get support for group chats with up to 256 members. You can also broadcast messages to multiple contacts at the same time.
There’s also support for voice and video calls, both for individual users and groups. However, for group video calls, you are restricted to 8 users at any time.
Apart from that, WhatsApp offers a distinct feature that neither Telegram offers nor Signal. WhatsApp Status (also called Stories). Users love this feature as they are able to express their thoughts and feelings to their closed ones. In a way, this makes WhatsApp a social media platform, and not just a messaging service.
You can also share all sorts of files on WhatsApp, but there are file size limits to adhere to. For photos, videos, and audio files, the limit is 16 MB. However, documents can be up to 100 MB. You can also share live location with your contacts.
And since WhatsApp is meant for general users, it offers seamless backup and restore functionality through cloud services like Google Drive and iCloud. And the best part is that cloud backup is completely free. Not to mention, WhatsApp now also supports dark mode.
While WhatsApp offers most of the features you’d need, Telegram is basically overloaded with features. Similar to WhatsApp, you get the basics such as chats, group chats and channels. However, unlike WhatsApp’s 256 member limit, Telegram brings support for groups with up to 200,000 members.
It also offers multiple group-specific features such as bots, polls, quizzes, hashtags and a lot more which can make group experiences a lot more fun.
The app also offers unique features such as a self-destructing messages feature which is great if you’re sending messages that you don’t want to remain on the recipient’s device for eternity. You also get support for editing sent messages, along with features like message scheduling, sharing uncompressed media, themes, and a lot more.
Telegram also offers incredible granular support over notifications you receive from the app. Plus, the size limit for sharing files on Telegram is a whopping 1.5 GB.
Up until a while ago, Telegram didn’t offer video calls. However, the app now supports both voice and video calls on Android and iOS devices, which is great because video call support was a big omission from the app.
While Signal beats Telegram and WhatsApp handily when it comes to security, it falls short on the features it offers.
You have secure messaging, voice, and video calls and all communications are end-to-end encrypted. Further, you can create groups, however, you don’t have the option to broadcast messages to multiple contacts at once. Plus, Signal has recently added support for group calling as well, something that was missing from the app for a long time.
You have features such as disappearing messages similar to self-destructing messages of Telegram, and the ability to send a one-time viewable image. Unlike WhatsApp, you don’t have to create a single-member group to send notes to yourself. On Signal, the feature is available natively and you can jot down your thoughts and ideas while messaging with your friends and family.
Apart from that, Signal allows you to relay voice calls to its servers so your identity remains concealed from your contacts. The feature is somewhat similar to what a VPN does. Signal also offers a built-in option to hide your IP address. Further, you can enable incognito keyboard while typing on Signal, apply dark mode, delete old messages in one stroke, and of course, blur faces and private information from images using its powerful photo editor.
There are also emojis and some privacy stickers, but they are very limited in comparison to WhatsApp and Telegram. All in all, Signal has some of the best privacy features but might fall short for users who want endless customization options.
Ownership is important because it allows us to understand how companies are looking to monetize user data and lets you take an informed decision.
WhatsApp is owned by Facebook, and while for quite some time the company had managed to keep WhatsApp at least a little bit less intrusive into your personal life as compared to its eponymous social media platform, that’s changing now.
That’s not all, throughout WhatsApp’s lifetime under Facebook, there have been multiple allegations around the company breaking encryption and creating backdoors for government agencies.
There are also reports about ads on WhatsApp becoming a reality sooner rather than later. That gives Facebook even more incentive to monetize your WhatsApp data. Plus, since WhatsApp doesn’t encrypt metadata, Facebook can readily use that to track your behavior.
Facebook proofed previously their sheer incompetency (or unwillingness) to protect user data or give any sort of privacy protections. That’s something we have witnessed in a lot of detail since the Cambridge Analytica scandal.
Coming to Telegram, it was launched in 2013 by Nikolai Durov and his younger brother, Pavel Durov. Both are from Russia and are currently on a self-imposed exile. Pavel Durov was dismissed as CEO of a Russian social-media site after he refused to hand over data of Ukrainian protesters to Russia’s security agencies.
Apart from that, on many occasions, Pavel Durov has taken a principled position against censorship and government interference. Looking at the history that geared the development of Telegram, it does inspire trust. However, the closed-source encryption protocol and optional E2E support leave the room for more transparency and improvement.
Signal is owned by the nonprofit Signal Foundation which is run by cryptographer Moxie Marlinspike and Brian Acton. Moxie Marlinspike used to run Open Whisper Systems — the brainchild behind the Signal protocol. After he met Brian Acton in 2018, they formed a new alliance called Signal Foundation. It now wholly funds the development of Signal messenger. It’s noteworthy that Brian Acton was the co-founder of WhatsApp. However, he left the company 3 years after Facebook acquired it.
Now, he oversees the development of Signal along with Moxie Marlinspike. Many high-flying people including Edward Snowden, the American whistleblower; Jack Dorsey, the CEO of Twitter, and others endorse Signal. In addition, Signal has received top scores on the EFF’s Secure Messaging Scorecard making it the most secure messaging platform.
Signal is run by donations and grants.
The Verdict: WhatsApp vs Telegram vs Signal
On the other hand, Telegram messenger may not be the best in terms of security. However, it offers a lot of features that are enough to make any group admin drool. Plus you do get end-to-end encryption on Telegram, albeit restricted to secret chats.
To sum everything up, we suggest going with Telegram if you want more features than the average messenger. You can consider Signal if you’re looking for the essential messaging and calling features along with a high-standard of security. However, WhatsApp is looking more dicey than ever now with the new policy update.
About Tame Times
Tame Communications (known as tameTIMES) was established in 1997. This long-established popular community title includes the key shopping centres: Alberton City, Mall...