Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Warn from the danger of using telegram location sharing feature due to safety concerns. Or: replace feature with safe alternative. #21982

Open
yeus opened this issue Feb 27, 2025 · 0 comments

Comments

@yeus
Copy link

yeus commented Feb 27, 2025

Description

Coming from this here: #21641.

Due to the safety concerns, I consider this a bug.

Location data in telegram can not be considered safe. Especially as location data is very sensitive data. Telegram has been shown to be very unsafe:

  • Forbes – “Apple iPhone, Google Pixel and Samsung Galaxy Telegram App Warning” (Feb 2, 2024)
    This article warns that using Telegram on popular smartphones can expose sensitive data such as real-time location, because Telegram does not enable full end-to-end encryption for all data by default.
    Read here: https://www.forbes.com/sites/zakdoffman/2024/02/02/apple-iphone-google-pixel-and-samsung-galaxy-telegram-app-warning/

  • Forbes – “Telegram Issues WhatsApp and Signal Warning for iPhone and Android” (May 10, 2024)
    This piece discusses how Telegram’s warnings emphasize risks from its optional encryption—requiring manual activation—which leaves sensitive data, including location information, vulnerable on both iPhone and Android devices.
    Read here: https://www.forbes.com/sites/zakdoffman/2024/05/10/telegram-issues-whatsapp-and-signal-warning-for-iphone-and-android/

  • Le Monde – “Telegram, an app like no other that has largely eluded regulators” (Aug 26, 2024)
    This article explores how Telegram’s lax moderation and security practices—including the lack of default end-to-end encryption for group chats and location sharing—can expose users to tracking and data breaches.
    Read here: https://www.lemonde.fr/en/pixels/article/2024/08/26/telegram-an-app-like-no-other-that-has-largely-eluded-regulators_6721871_13.html

  • Wired – “Fleeing WhatsApp for Better Privacy? Don't Turn to Telegram”
    This article explains that Telegram’s default chats aren’t end‐to‐end encrypted, making them vulnerable compared to services like Signal or WhatsApp.
    Read here

  • Reuters – “Hack Brief: Hackers Breach the Ultra-Secure Messaging App Telegram in Iran”
    This report details how attackers exploited vulnerabilities (including SMS-based weaknesses) to compromise Telegram accounts in Iran.
    Read here

  • NordVPN – “Is Telegram Safe?”
    This article examines Telegram’s security shortcomings, such as its lack of default end-to-end encryption in regular chats, which leaves user communications vulnerable.
    Read here

  • c’t (German Computer Magazine) – “Warum man Telegram für persönliche Kommunikation nicht benutzen sollte”
    This piece criticizes Telegram’s encryption practices and overall data protection, describing its security as problematic for personal communication.
    Read here

I would even argue that this is in fact a very dangerous feature of osmand! I love osmand and would like to see this handled with a higher priority! For poeple using osmand in politically "sensitive" areas (which is more than 2/3 of the world these days!) this could have very severe consequences if their location data doesn't stay private. I would at least recommend to add a strong warning somewhere in the plugin/app.

Steps to reproduce

install app and plugin: https://osmand.net/docs/user/plugins/osmand-tracker/

Actual result

doesn't give any warning

Expected result

should give a strong warning somewhere, that location sharing with osmand can not be considered safe.

Your Environment (required)

WARNING Crash-Logs MAY contain information you deem sensitive.
Review this CAREFULLY before posting your issue!

OsmAnd Version:
Android version:
Device model:
Crash-Logs: ?
@yeus yeus changed the title A warning needs to be put into the osmand app to warn from the danger of using telegram location sharing feature due to safety concerns. Better: replace the feature with an alternative. Warn from the danger of using telegram location sharing feature due to safety concerns. Or: replace feature with safe alternative. Feb 27, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant