5 ms·
What does the USA do about WhatsApp? Do they really tolerate end to end encryption they cant subpoena the company for...or does the NSA have a big fat pipe into
by smegel 10y ago
What does the USA do about WhatsApp? Do they really tolerate end to end encryption they cant subpoena the company for...or does the NSA have a big fat pipe into the WhatsApp data-center?
- Aelinsaar 10y agoI think that one way or another, WhatsApp isn't foiling the NSA if the NSA doesn't feel like being foiled. Then again, they may realize what most of us do, which is that WhatsApp is not exactly a terrorist hotbed.
- walrus01 10y agoNSA will simply pwn the endpoint devices of whoever they're really interested in.
- Aelinsaar 10y agoI want to believe that. I want to believe that the NSA, while having no respect for the law, does at least care about results. It would make a lot more sense to tap devices of interesting people, than this idea of bulk collection (which leads to just a lot more noise).
- aw3c2 10y agoAnd that would be fine. If they have reasonable proof that someone is bad enough to allow this, by all means pwn the targeted hell out of their devices.
- lazaroclapp 10y agoIt is not foiling targeted attacks, of course. But it might be making a dent on cheap/effortless mass surveillance, which is the main point.
- caf 10y agoIf the end-to-end encryption is working as designed then "a big fat pipe into the WhatsApp data-center" would be of no help. For high enough value targets the NSA is probably happy to compromise the endpoints.
- smegel 10y agoTrue, I don't know what I was thinking when I wrote that. I guess the recent case with the FBI and the iPhone shows what will happen if they want messages badly enough.
- saganus 10y agoCan't it be e2e encryption with WhatsApp keeping a copy of the private keys? or does e2e enc implicitly means the private keys are never exchanged?
- deleted_soon 10y agoWhatsApp wouldn't keep the private keys. That being said, this system could still be hacked - when the clients exchange public keys, you insert yourself in the middle, provide your own public keys to each client, and mediate between the two clients, which gives you access to the unencrypted messages.
- nickik 10y agoThat only works in transport if the connection is not pinned. I don't know if they do pin, but they should. If they pin then the NSA would have to actually have access to the data center and doing that much without getting noticed is quite hard.
- deleted_soon 10y agoTrue, but I bet that the NSA could force WhatsApp to issue certificates for fake keys. Obviously can't do that without being noticed, but they could still use it to spy on specific users if they wanted.