Franz messaging app
-
@Dashrender said in Franz messaging app:
I am now made to wonder how good the security on these types of apps are. I never really thought about it in the past, but things have changed.
If they tie to a phone number (WhatsApp, Telegram, etc.) then security isn't at the core of their design.
-
@BRRABill said in Franz messaging app:
@JaredBusch said in Franz messaging app:
@BRRABill said in Franz messaging app:
@JaredBusch said in Franz messaging app:
Someone mentioned this app here a while back and I tried it out.
Did not really like it. I should give it another try.
I liked the concept, but it missing AIM was a deal breaker for me. Still have a lot of friends/contacts on AIM.
eww, wtf.. down vote...
Not my choice. I've converted everyone I can to Telegram. It's really just a few stragglers I need to talk with.
They have SMS, but I'm hate typing long messages/conversations
on my phone.Same here, I've converted most.
-
@coliver said in Franz messaging app:
@Dashrender said in Franz messaging app:
I am now made to wonder how good the security on these types of apps are. I never really thought about it in the past, but things have changed.
What do you mean? Most of them have an API that other apps (like Franz) can make calls to. Really it is no more or less secure then the default application... at least as far as the in-transit data is concerned. At rest that may be different.
its just a wrapper which uses the web views, not really a native software. Franz just uses the web UIs of all these services, basically you get to see everything (whatsapp, Slack etc) from one window. Only thing is few apps connection is not via https
-
@scottalanmiller said in Franz messaging app:
@BRRABill said in Franz messaging app:
@JaredBusch said in Franz messaging app:
@BRRABill said in Franz messaging app:
@JaredBusch said in Franz messaging app:
Someone mentioned this app here a while back and I tried it out.
Did not really like it. I should give it another try.
I liked the concept, but it missing AIM was a deal breaker for me. Still have a lot of friends/contacts on AIM.
eww, wtf.. down vote...
Not my choice. I've converted everyone I can to Telegram. It's really just a few stragglers I need to talk with.
They have SMS, but I'm hate typing long messages/conversations
on my phone.Same here, I've converted most.
I remember reading an article about Telegram security!
http://gizmodo.com/why-you-should-stop-using-telegram-right-now-1782557415
-
@Ambarishrh said in Franz messaging app:
@scottalanmiller said in Franz messaging app:
@BRRABill said in Franz messaging app:
@JaredBusch said in Franz messaging app:
@BRRABill said in Franz messaging app:
@JaredBusch said in Franz messaging app:
Someone mentioned this app here a while back and I tried it out.
Did not really like it. I should give it another try.
I liked the concept, but it missing AIM was a deal breaker for me. Still have a lot of friends/contacts on AIM.
eww, wtf.. down vote...
Not my choice. I've converted everyone I can to Telegram. It's really just a few stragglers I need to talk with.
They have SMS, but I'm hate typing long messages/conversations
on my phone.Same here, I've converted most.
I remember reading an article about Telegram security!
http://gizmodo.com/why-you-should-stop-using-telegram-right-now-1782557415
And looks like signal is currently the most secure chat platform according to various sources. https://whispersystems.org/
These are the guys who provided end-to-end encryption to whatsapp, now recently for FB and Google Alo.
-
@Ambarishrh said in Franz messaging app:
@scottalanmiller said in Franz messaging app:
@BRRABill said in Franz messaging app:
@JaredBusch said in Franz messaging app:
@BRRABill said in Franz messaging app:
@JaredBusch said in Franz messaging app:
Someone mentioned this app here a while back and I tried it out.
Did not really like it. I should give it another try.
I liked the concept, but it missing AIM was a deal breaker for me. Still have a lot of friends/contacts on AIM.
eww, wtf.. down vote...
Not my choice. I've converted everyone I can to Telegram. It's really just a few stragglers I need to talk with.
They have SMS, but I'm hate typing long messages/conversations
on my phone.Same here, I've converted most.
I remember reading an article about Telegram security!
http://gizmodo.com/why-you-should-stop-using-telegram-right-now-1782557415
That article is misleading on a number of points. I recall reading it a couple months ago.
It had some good points on the encryption algorithm and something else. bit some otherpoints were simple user choice settings. and not understanding that pubic chat groups cannot be private because it has to have stuff on a server. duh.
-
@scottalanmiller said in Franz messaging app:
@Dashrender said in Franz messaging app:
I am now made to wonder how good the security on these types of apps are. I never really thought about it in the past, but things have changed.
If they tie to a phone number (WhatsApp, Telegram, etc.) then security isn't at the core of their design.
Still don't get what you mean - while it's true they are tied, I see that primarily as a way to make the connection to users.
In 10 years you'll tell us that using an email address shows that security isn't at the core of the design, even though the main and possibly only purpose of the phone number/email address is a way of finding others you know.
Now Telegram does fail in the first place because you can't sign up without having a phone number, but after you get signed up, I'm not sure it's ever needed again.
-
@JaredBusch said in Franz messaging app:
@Ambarishrh said in Franz messaging app:
@scottalanmiller said in Franz messaging app:
@BRRABill said in Franz messaging app:
@JaredBusch said in Franz messaging app:
@BRRABill said in Franz messaging app:
@JaredBusch said in Franz messaging app:
Someone mentioned this app here a while back and I tried it out.
Did not really like it. I should give it another try.
I liked the concept, but it missing AIM was a deal breaker for me. Still have a lot of friends/contacts on AIM.
eww, wtf.. down vote...
Not my choice. I've converted everyone I can to Telegram. It's really just a few stragglers I need to talk with.
They have SMS, but I'm hate typing long messages/conversations
on my phone.Same here, I've converted most.
I remember reading an article about Telegram security!
http://gizmodo.com/why-you-should-stop-using-telegram-right-now-1782557415
That article is misleading on a number of points. I recall reading it a couple months ago.
It had some good points on the encryption algorithm and something else. bit some otherpoints were simple user choice settings. and not understanding that pubic chat groups cannot be private because it has to have stuff on a server. duh.
A full on public chat has to have stuff on a server, sure, but group chat doesn't require that, at least nothing has to be in plain text.
-
@Ambarishrh said in Franz messaging app:
@scottalanmiller said in Franz messaging app:
@BRRABill said in Franz messaging app:
@JaredBusch said in Franz messaging app:
@BRRABill said in Franz messaging app:
@JaredBusch said in Franz messaging app:
Someone mentioned this app here a while back and I tried it out.
Did not really like it. I should give it another try.
I liked the concept, but it missing AIM was a deal breaker for me. Still have a lot of friends/contacts on AIM.
eww, wtf.. down vote...
Not my choice. I've converted everyone I can to Telegram. It's really just a few stragglers I need to talk with.
They have SMS, but I'm hate typing long messages/conversations
on my phone.Same here, I've converted most.
I remember reading an article about Telegram security!
http://gizmodo.com/why-you-should-stop-using-telegram-right-now-1782557415
It's using a telephone number, it's not a secure app, period. Anyone using it as such when it's tied to a phone number is delusional.
-
@Dashrender said in Franz messaging app:
@scottalanmiller said in Franz messaging app:
@Dashrender said in Franz messaging app:
I am now made to wonder how good the security on these types of apps are. I never really thought about it in the past, but things have changed.
If they tie to a phone number (WhatsApp, Telegram, etc.) then security isn't at the core of their design.
Still don't get what you mean - while it's true they are tied, I see that primarily as a way to make the connection to users.
In 10 years you'll tell us that using an email address shows that security isn't at the core of the design, even though the main and possibly only purpose of the phone number/email address is a way of finding others you know.
Now Telegram does fail in the first place because you can't sign up without having a phone number, but after you get signed up, I'm not sure it's ever needed again.
No, there is no sign up for telegram. it is 100% phone based. there is not an "account" for telegram.
-
@Dashrender said in Franz messaging app:
Now Telegram does fail in the first place because you can't sign up without having a phone number, but after you get signed up, I'm not sure it's ever needed again.
You can get control of anyone's Telegram if you control their phone number.
-
@JaredBusch said in Franz messaging app:
@Dashrender said in Franz messaging app:
@scottalanmiller said in Franz messaging app:
@Dashrender said in Franz messaging app:
I am now made to wonder how good the security on these types of apps are. I never really thought about it in the past, but things have changed.
If they tie to a phone number (WhatsApp, Telegram, etc.) then security isn't at the core of their design.
Still don't get what you mean - while it's true they are tied, I see that primarily as a way to make the connection to users.
In 10 years you'll tell us that using an email address shows that security isn't at the core of the design, even though the main and possibly only purpose of the phone number/email address is a way of finding others you know.
Now Telegram does fail in the first place because you can't sign up without having a phone number, but after you get signed up, I'm not sure it's ever needed again.
No, there is no sign up for telegram. it is 100% phone based. there is not an "account" for telegram.
Exactly. Hijack their phone number or their phone or their phone carrier (the last one is a lot harder) and you own their Telegram. It's not secure "to the person" it's semi-secure "to the number." A telephone number is not an identifier of a person, or even a device. It's an alias to a device, and can be controlled very separately from the device. You can't have security and phone numbers tied together - they are fundamentally incompatible.
-
@scottalanmiller said in Franz messaging app:
@Dashrender said in Franz messaging app:
Now Telegram does fail in the first place because you can't sign up without having a phone number, but after you get signed up, I'm not sure it's ever needed again.
You can get control of anyone's Telegram if you control their phone number.
of course you can. and you can get control of anyone's account for anything if you have the thing used for credentials. typically just a username and password.
Your argument has no merit with only that criteria. it is trivial to get control of many forms of authentication.
-
Examples of ways to get Telegram control when you secure the phone device....
- Man in the middle cell phone intercept. This is far easier than you think and I know places that do it (and they do it to companies like Xerox and GE, so YOU are not immune and it does not require government clearance or anything.)
- Pull a SIM card out of a secured phone. It only takes a minute to control a Telegram account. YOu can get access before the person can shut off the phone number. And shutting it off is the only real answer - causing them to lose it forever, too.
-
@JaredBusch said in Franz messaging app:
@scottalanmiller said in Franz messaging app:
@Dashrender said in Franz messaging app:
Now Telegram does fail in the first place because you can't sign up without having a phone number, but after you get signed up, I'm not sure it's ever needed again.
You can get control of anyone's Telegram if you control their phone number.
of course you can. and you can get control of anyone's account for anything if you have the thing used for credentials. typically just a username and password.
Your argument has no merit with only that criteria. it is trivial to get control of many forms of authentication.
A telephone number is not authentication really, though. It's only an identifier. It's like getting control of someone's domain credentials when all you need is the username, not the password. The telephone number is not private or secret, it's public. So there is no authentication at all, in reality. It's not like a weak password situation.
-
@scottalanmiller said in Franz messaging app:
@BRRABill said in Franz messaging app:
@JaredBusch said in Franz messaging app:
@BRRABill said in Franz messaging app:
@JaredBusch said in Franz messaging app:
Someone mentioned this app here a while back and I tried it out.
Did not really like it. I should give it another try.
I liked the concept, but it missing AIM was a deal breaker for me. Still have a lot of friends/contacts on AIM.
eww, wtf.. down vote...
Not my choice. I've converted everyone I can to Telegram. It's really just a few stragglers I need to talk with.
They have SMS, but I'm hate typing long messages/conversations
on my phone.Same here, I've converted most.
Bit confused, the discussion is now how Telegram and such are not secure and yet i can see that you've converted all to Telegram! Am i understanding this right?
-
But a lot of that implies physical access.
That's like saying you can overcome 2FA if you can just get access to the person's phone or 2FA authenticator.
-
@Ambarishrh said in Franz messaging app:
Bit confused, the discussion is now how Telegram and such are not secure and yet i can see that you've converted all to Telegram! Am i understanding this right?
You are making a big assumption... that we are doing it for security reasons. That's the mistake.
-
@JaredBusch said in Franz messaging app:
@Dashrender said in Franz messaging app:
@scottalanmiller said in Franz messaging app:
@Dashrender said in Franz messaging app:
I am now made to wonder how good the security on these types of apps are. I never really thought about it in the past, but things have changed.
If they tie to a phone number (WhatsApp, Telegram, etc.) then security isn't at the core of their design.
Still don't get what you mean - while it's true they are tied, I see that primarily as a way to make the connection to users.
In 10 years you'll tell us that using an email address shows that security isn't at the core of the design, even though the main and possibly only purpose of the phone number/email address is a way of finding others you know.
Now Telegram does fail in the first place because you can't sign up without having a phone number, but after you get signed up, I'm not sure it's ever needed again.
No, there is no sign up for telegram. it is 100% phone based. there is not an "account" for telegram.
If it was 100% phone based, how would I have it on my PC. After signing up with my phone (which I DID mention) I could install it on my desktop, then remove it from my phone and never put it back on my phone again, and then install it on future Windows installs all I want.
-
@scottalanmiller said in Franz messaging app:
@Ambarishrh said in Franz messaging app:
Bit confused, the discussion is now how Telegram and such are not secure and yet i can see that you've converted all to Telegram! Am i understanding this right?
You are making a big assumption... that we are doing it for security reasons. That's the mistake.
So what was the reason for the switch from Whatsapp to Telegram?
