4 ms·
WhatsApp is still closed-source though, and I'm unsure as to the veracity of the claim of end-to-end encryption, I sure hope that's the case. In the Panorama do
by unfunco 11y ago
WhatsApp is still closed-source though, and I'm unsure as to the veracity of the claim of end-to-end encryption, I sure hope that's the case. In the Panorama documentary about Edward Snowden on the BBC, when discussing the death of Lee Rigby, a representative of Facebook says they're capable of decrypting messages (whether that applies to WhatsApp or just Facebook messenger is not clarified.)
https://www.youtube.com/watch?v=SjVxqlncS2I&t=46m15s https://www.youtube.com/watch?v=SjVxqlncS2I&t=46m15s (also see 49:00+)
- envy2 11y agoYou might be interested in this set of videos[1] of public testimony by WhatsApp's Deputy General Counsel at a hearing on cybercrime in Brazil in December 2015, where he explains in some detail the type of information they have and don't have. He explicitly notes that they are incapable of accessing message content for end-to-end encrypted messages, and also explains that they don't retain copies of any communications once they've been delivered to recipients. [1] http://www2.camara.leg.br/atividade-legislativa/comissoes/comissoes-temporarias/parlamentar-de-inquerito/55a-legislatura/cpi-crimes-ciberneticos/videoArquivo?codSessao=55221&codReuniao=42467#videoTitulo http://www2.camara.leg.br/atividade-legislativa/comissoes/co...
- davorb 11y agoI think that only messages sent between two android devices are encrypted using E2E. If you send a message to your mom (who uses a blackberry), the message won't be encrypted with that protocol.
- dingo_bat 11y agoWhat about ios? And how does your device know whether to encrypt or not? It's useless talking about encryption if the code is hidden. What if tomorrow they turn off the encryption silently?
- dc3k 11y agoThey can turn off the encryption silently whether or not the code is hidden.
- dingo_bat 11y agoHow so? You can compile yourself if you like.
- Ded7xSEoPKYNsDd 11y agoMore importantly, you could change the client to show encryption status before a message is sent and add client-side key management.
- dc3k 11y agoSorry, I meant for the pre-compiled versions on Google Play and the App Store. The vast, vast majority of Whatsapp users aren't going to want to or don't know how to compile the app for their phone.
- crdoconnor 11y agoIt's easier to say "no" to Brazil.
- chc 11y agoIf they're partnered with Open Whisper Systems, it sounds like they're serious about end-to-end encryption.
- dijit 11y agoThey still keep a copy of all client encryption keys. :\
- mike_hearn 11y agoThey have to. A phone number is not a key, so there's no way to avoid that. However I've seen leaked screenshots that suggest at least the Android client is getting the ability to see what the keys are and pin them. Hence, TOFU encryption. It's about the best you can do in a consumer product.