Vratislav Holub Apple often boasts about the security of its operating systems and individual applications. One of them is, of course, native Messages, i.e. the entire iMessage communication platform. It builds on end-to-end encryption and is favored by many for this reason. It combines classic text messages, the secure iMessage platform and other benefits into one application. It is therefore no wonder that it is so popular among apple growers. But is it really the safest?
A partial answer to this question is now provided by the National Office for Cyber and Information Security (NÚKIB), which in its analysis of communication applications focused on services with so-called end-to-end encryption. Thus, applications such as Threema, Signal, Telegram, WhatsApp, Messenger, Google messages and Apple iMessages were included in the analysis. So let's look at the results of the entire analysis and tell ourselves which communication platform is really the most secure. It doesn't have to be so clear-cut.
Analysis of communication applications
Native apps from Apple and Google
Let's start first with our popular iMessage platform, which we also use for communication within our Jablíčkáře editorial office. As mentioned above, its core is the native Messages application and is therefore already pre-installed on every Apple device, while also offering the option of secure communication with so-called end-to-end encryption. In short, it can be said that it is a relatively comfortable platform with considerable popularity. However, there is a minor problem. Individual messages are encrypted, but if the Apple user has iCloud backup enabled, all his messages are saved in an unencrypted form. Likewise, the platform has been compromised by Pegasus spyware in the past.
It could be interest you
In terms of security, competition in the form of Google messages is relatively similar. In addition, the fact that Google is behind it is even worse. One important thing is known about it - it builds its business model on the sale of users' personal data. On the other hand, the service did not meet Pegasus.
Meta: WhatsApp and Messenger
Anyway, if we look at the communication platforms that fall under the Meta (formerly Facebook) company, we won't be much happier. The popular reputation is maintained by the WhatsApp application, currently the most used communication application worldwide, which is equipped with several security features. All forms of communication are end-to-end encrypted. Unfortunately, in order to use the platform, it is necessary to register with a phone number (thereby connecting with a real person), and the reputation of the aforementioned Meta company is also a considerable obstacle. Its history is made up of a series of scandals about data leaks, privacy violations and the like. In addition, WhatsApp is modifying the terms so that Meta has more access to messages. Although these are unreadable (thanks to end-to-end encryption), the company still has access to the so-called metadata. The company's funding is also unclear, and so has the Pegasus spyware.
Two-factor authentication in WhatsApp
By far the worst service from this list is the second communication platform from Meta. Of course, we are referring to the famous Messenger, which is connected to the social network Facebook. In order to create a profile, a phone number or email is again necessary - if you also have an account on the network itself, the operator has a lot of data about you (what you watch, what you like, etc.). At first glance, it is clear that this application does not even focus on secure communication. End-to-end encryption does exist here, but it is only functional in so-called secret conversations. Again, there are a number of problems due to the operator of the app, which we pointed out above. In general, this platform is not recommended for sensitive conversations.
Telegram
The Telegram application presents itself as one of the safer alternatives for communication. Unfortunately, a number of question marks hang over it, which slightly undermines the security itself. In general, it should be an even more secure alternative to WhatsApp, which ultimately encrypts a special type of conversation between two users, or the so-called Secret Chat. Unfortunately, this no longer applies to group conversations - they are only encrypted on the server, which creates less risk. Even so, it can be said that it is a solid tool, as it has encryption. Not at all. As the only application, it relies on its own MTProto encryption protocol. This is not as secure as the traditional AES format, which is widely used worldwide due to its security. To create a profile, it is again necessary to provide a phone number.
Telegram
What may be the biggest obstacle for some, however, are Telegram's ties to Russia, which are rather strange and unclear. The Russian regulator first banned this application in 2018, but this was reversed two years later with an interesting statement - namely that Telegram will cooperate with the authorities of the Russian Federation on the so-called investigation of extremism. Unfortunately, what such a thing looks like, what it is based on and what role Russia actually plays in it is no longer clear.
Signal
Signal is now considered one of the more secure applications, which places great emphasis on end-to-end encryption of all forms of communication within the program. Among the greatest benefits of this solution is the overall simplicity and diversity of the application. It also handles group conversations or video calls, supports sending so-called disappearing messages (they are automatically deleted after a certain time), changing the appearance of the app, sending animated GIF images and the like.
It could be interest you
Pavel Jelic Unfortunately, once again, the user account is linked to the user's phone number, which naturally reduces efforts at anonymity. Despite this, as already mentioned, security is at a high level. The operator, the non-profit organization Signal Foundation, has a relatively good reputation and is financed by donations from users and investors, and has not (yet) encountered any scandal.
Threema
Many people consider Threema to be the most secure communication application in the current situation. It places maximum emphasis on privacy, security and anonymity. When creating an account, there is no connection with a phone number or e-mail. Instead, the user receives his own QR code, which he can then share with those he wants to communicate with - the app therefore has no idea who is hiding behind the given code. End-to-end encryption of all forms of communication is also a matter of course. To make matters worse, individual conversations can also be locked using unique passwords.
On the other hand, there are also a number of shortcomings. The user experience is a bit worse and the app doesn't offer as many options. According to some, it is also less intuitive, especially compared to the mentioned competitors. This communication platform is also paid for and will cost you 99 crowns (App Store).
Even Threema did not help Marián Kočner and Alena Szuzová :-D
Except the police had access passwords to the phone and the apps themselves. So yes, they helped. But if someone is an ox and entrusts his passwords, then nothing will help him...
Exactly as you write. The communicator itself is supposed to be "uncrackable" (must be taken with a grain of salt), but in this particular case the authorities gained access to the phone itself.
That's how Maroš grabs Trnka by the balls:-D
I miss the wicker me app here
Wicker me of course (doesn't need a phone number or email!) and of course support Viber, the author somehow neglected...
Here it is beautiful to see how Apple oj3bal people and basically when it comes to security, it is the worst on the market :(