3 ms·
Absence of evidence is not evidence of absence. The app can bundle the message telemetry with the rest of the encrypted app telemetry when it phones home and e
by bduerst 7y ago
Absence of evidence is not evidence of absence.
The app can bundle the message telemetry with the rest of the encrypted app telemetry when it phones home and even the best security researchers would not detect it. It can also process it locally for profiling and other advertising means.
- schoen 7y ago> even the best security researchers would not detect it By examining only the network traffic, sure, but what about by examining the code?
- bduerst 7y agoIs the facebook app open source?
- schoen 7y agoNope! That hasn't necessarily stopped people from learning something about how it works, though.
- chopin 7y agotrue, but does someone do it? I remember that auditing Truecrypt was already a substantial deliberate undertaking. And that' not even taking into account that it might be possible to push something different to each user.