dread News




Stop using Telegram.

Telegram is a very popular messaging application. There are numerous problems with it however. Telegram doesn't have encryption enabled by default, it is only enabled in secret chats. Even if you enable a secret chat in Telegram, Telegram rolls its own crypto, it uses its own protocol instead of something more established like the Signal Protocol or something based off of the Signal Protocol.

I also see people linking their Telegram on dark-net posts and operations asking people to contact them. This is very bad, telegram is not anonymous and should never be used for that purpose.

/u/culper

I agree it isn't secure at all. The sad part is as far as messaging apps go the layout is beautiful. I like how it works and groups are easy to setup

/u/thorchan

I agree with you, but...
my income and traffic comes from telegram too and I also have my own autoshop on telegram so I don't have any more options.
For that same reason I have telegram installed in a single vm and that single vm will only be used for telegram.


/u/acronym
Telegram can be torified with no problem actually, it's just slow but it works. What do you mean exactly?

/u/acronym

Ok thanks, I'll check it out.

/u/Zunero

It doesn't work on Tails? Mhmm I did not know that. Well anyway it works fine on Whonix last time I tried.

/u/[deleted]

it allows you to set tor as proxy
localhost:9050

/u/ModernGhost

Yes it can quite easily

/u/An0n_kushpusher

Try a program like torghost-ng it torifies all traffic and will block anything not going through tor. Its pretty simple.

/u/itsawizardharry

Agreed. However, you will never see a seasoned threat actor dropping there TG lol.

No matter if u create a fake account or not, the security is virtually non existent if someone wants to find you.

/u/footsteps𝐁u𝐧𝒵 & 𝐆u𝐧𝒵

that is a nonsensical statement. if you create a genuinely fake account, with genuinely fake or random real data, then "someone" can only find what you put there. the security on almost every application is non-existent unless you do something about it and verify it, but even having watertight security and the most magical tech in the world, won't protect an idiot.

/u/ReadMENOT66

and genuinely fake phone number?

/u/QueenOfCannabis

Valueable information here, and yes follow what he is saying as it is true and not really addressed as a problem. SimpleX is a project that can replace Telegram usability and UI/UX friendlyness.

Won't ever recommend Session for all the drama regarding Oxen, Lokinet and the rugpull that took place. Do not trust that messanger at all, SimpleX or XMPP/Jabber with OMEMO.
Even if SimpleX is very immature at the moment we recommend the community to keep an eye on it for its Tor proxy support and the possibility to self-host nodes over Tor.

/u/CoolGuyy98

Yeah isn't their source code proprietary as well? I can't remember for sure because I haven't looked at Telegram's specs since I first saw it. That was years ago and I wasn't impressed then and I'm dam sure not impressed now.

Signal is probably better. In fact there's little speculation in my opinion otherwise. Especially after Signal basically told the FBI they couldn't provide information on someone they were trying to learn about because said information "didn't exist."

However I ultimately think no centralized messaging app is ideal. GPL licensed or not. The centralization aspect is the same issue I have with VPNs. The idea of consolidation seems counterintuitive to privacy when dispersion makes more since. Gajim (or methods like it) seems far superior.

Their encryption protocol OMEMO is top tier as well. Like any messaging app that's worth your time, Gajim can also be routed through Tor. Unless we're talking about a messaging app that communicates only inside the Tor network through onions (beta ideas of this exist like Ricochet) Gajim is the best.

/u/abracabra

WHile I agree it not secure people jut use it since it's convenient especially in EU, 9/10 you're okay using telegram but I still wouldn't feel comfortable, you can't convince everyone not to use it adly and it's somewhat secure compared to other messengers, dealers use secret chats to to meet up irl and use channels to advertise and drop in person,again I'm not advocating you should do this or that it's even safe but just saying it is used widely and decent security and privacy wise so it appeals to the less savvy people.

/u/[deleted]📢

Not only have to given a terrible alternative like fucking signal, you haven't even explained the point. What protocol does Telegram use? What protocol does Signal use? If you're not going to compare them, at least state the fucking protocols.

Signal is a far worse alternative because you literally have to get in on Android and it's really hard to get it on desktop because you have to scan their QR code.


You have misunderstood what I have written.

I have not recommended Signal I have recommended its protocol and protocols based off of it a good example is OMEMO. Telegram made their own protocol called MTProto and MTProto 2.

Note that Edward Snowden actually says not to use Telegram too, and that is saying something.
https://www.hackread.com/snowden-explains-why-telegram-messenger-is-unsafe/
https://anonhq.com/edward-snowden-warns-whatever-dont-use-telegram-messenger-app/

You also don't understand business. Vendors wouldn't give a FUCK about what the buyers' OpSec is, they just want to spread the most sales and Telegram does it perfectly, predominantly in Eastern Europe. If a vendor doesn't setup Telegram properly then that's on them...

This is why they get caught.

/u/Doraemon

listen, I know some private groupe for cocaine seller in France where are litterally the street address where to buy drugs. they continue buisness since many years without any problem.

I don't say it's good way to go, but as said /u/Zunero, seller can be protected on his own, if buyer don't know how to protect themself, this is not the problem of seller.

Telegram is easy to use and enough for run buisness, you can use secret chat, tor proxy and create private group for community. if you want to use PGP, you can also. Add a VPN on top of this, tell me where is the security issue ?

/u/psychonut

Metadata, chats aren't encrypted.

/u/MilkViscosity

I don't say it's good way to go, but as said /u/Zunero, seller can be protected on his own, if buyer don't know how to protect themself, this is not the problem of seller.

Any good vendor will also care about the OpSec of his customers. Not only because this increases the vendors reputation but also because you want to keep your customers happy. You can easily just not use this obvious honeypot and keep your customer base both happy and safe. This isn't some fight between the vendor and the customer.

/u/hoodedmonster

Yeah, getting an Android VM is still a PITA after all these years. Something like Waydroid will be great, but the last time I tried it it was still very unstable and just barely usable.

/u/trippymane

Have not heard of too many TG busts or exist scams..

keep enjoying bohemia lol.. you fucking idiots are mostly just repeating dogma and shooting from the hip.

Back to Home


Thank you for your support.. Bitcoin wallet donation address : bc1q7n77cw730neegkazf6f2uztrw54vwh269k6lqg