5 ms·
"Prior to notifying victims, WhatsApp checked the target list against existing law enforcement requests for information relating to criminal investigations, suc
by _trampeltier 7y ago
"Prior to notifying victims, WhatsApp checked the target list against existing law enforcement requests for information relating to criminal investigations, such as terrorism or child exploitation cases. But the company found no overlap, said a person familiar with the matter. Governments can submit such requests for information to WhatsApp through an online portal the company maintains."
There is already an official backdoor, or how should I understand that?
- sandworm101 7y agoYou have it correct. Nearly every major US provider maintains some sort of online interface for law enforcement to submit requests. The level of information provided via these means varies, but they are obligated to respond to legitimate requests with wharever data they have on hand. Dont like it? Go with a security-minded service like signal. Or, better yet, something totally severless and open source.
- _trampeltier 7y agoI don't use WhatsApp. But if they have an official backdoor, then it's not really e2e encrypted. Until now I thought, at least the official statement was, WhatsApp is truly e2e encrypted. Just that.
- sandworm101 7y agoMaybe they are. But they would still have non-content timing, location and connection data. That is just as useful as message content.
- secfirstmd 7y agoIsn't the fear more about a man-in-the-room attack rather than weaknesses in the e2e?
- y4mi 7y agoIt can be end to end and Encrypted and still have a backdoor. I.e keeping a continuous web client active which the user isn't notified about
- codedokode 7y agoEven with encryption, WhatsApp could provide users' contact lists, message send time and volume, IP addresses, phone numbers. Having a phone number is almost same as having person's location and identity. That's why really secure messengers won't require a phone number.
- guenthert 7y agoThe end-to-end refers there to the hand-held device, not the peers' brains. The backdoor will then simply be in the hand-held device, intercepting the data meant to be displayed by the WhatsApp application.
- paulcarroty 7y ago> security-minded service like signal. There's no security-minded service which use Google services.
- ryanlol 7y agoI don't think it's fair to call this a "backdoor". Because of E2EE the law enforcement access is limited to looking up IP addresses associated with whatsapp users and such.
- _trampeltier 7y agoThat was my question. What information does WhatsApp share with the law enforcement. Just, as you said IP and so, or also the messages?
- dicknuckle 7y agoif it's truly end to end encrypted, they would only have metadata. which is what the NSA collects en masse from Telecom providers.
- ryanlol 7y ago>which is what the NSA collects en masse from Telecom providers What does that even mean? There are so many different kinds of metadata I'm not sure why it's useful to compare Telecom metadata collection to Whatsapp.
- tarcisiocjr 7y agoHere in Brazil, if I understand corrected from some leaks, after the judicial request WhatsApp stop (or something related) the encryption between Bob and Alice. After that all conversations is in plain text and accessible to federal police.
- ryanlol 7y agoDo they disable it or do they noisily mitm it?