4 ms·

Yes, they very publicly state that they do not have access and I have yet to see a reason to not believe them in that regard. All big Facebook data leaks and ha

Yes, they very publicly state that they do not have access and I have yet to see a reason to not believe them in that regard. All big Facebook data leaks and hacks have just exploited not very well known APIs or badly set privacy settings. But nothing that was secret.

NoImmatureAdHom 5y ago
They are lying when they say this. I promise you Facebook MITMs WhatsApp communications for oppressive regimes.
- heinrich5991 5y ago
  Source?
- tgragnato 5y ago
  I think someone caught the app dumping private keys to crashlogs.whatsapp.net But a MITM should still be visible More details?
  - NoImmatureAdHom 5y ago
    For example: https://www.aljazeera.com/news/2021/1/26/iran-blocks-signal-messaging-app-after-whatsapp-exodus https://www.aljazeera.com/news/2021/1/26/iran-blocks-signal-... Q: Why would Iran block Signal but not WhatsApp if they actually use the exact same protocol? A: Because Facebook has cut a deal with the regime to give them access to things they could not get access to with Signal I suppose it could be that blocking WhatsApp would cause too much disruption, so the Iranian regime tolerates it for now, but I put much more weight on Facebook just rolling over. There are other instances of WhatsApp being allowed and other allegedly as-secure platforms being banned. It could be chance or network effects, but my guess is that Facebook has built in tools to comply with those regimes' spying demands. Perhaps they even push locale-specific versions of the app.
  - fooker 5y ago
    Law enforcement has access to a list of people who forwarded particular links or media. This indicates that e2e has some bypasses or exceptions. It would be pretty much impossible to unearth the details though.
    - tgragnato 5y ago
      I would be pretty shocked if Facebook was not doing this. It’s probably done on the device, with suspicious links and media sent to the servers for further inspection. We are also sure some of their engineers worked on methods to detect bypasses on the checks. It’s a leak of data and metadata, a privacy invasion for sure, but not comparable to a MITM.
gentleman11 5y ago
Facebook has publicly stated a lot of privacy related things that turned out to be outright lies in the past, including to congress
ekianjo 5y ago
> Yes, they very publicly state that they do not have access Why do you believe them?

NoImmatureAdHom 5y ago

They are lying when they say this. I promise you Facebook MITMs WhatsApp communications for oppressive regimes.

heinrich5991 5y ago
Source?
tgragnato 5y ago
I think someone caught the app dumping private keys to crashlogs.whatsapp.net But a MITM should still be visible More details?
- NoImmatureAdHom 5y ago
  For example: https://www.aljazeera.com/news/2021/1/26/iran-blocks-signal-messaging-app-after-whatsapp-exodus https://www.aljazeera.com/news/2021/1/26/iran-blocks-signal-... Q: Why would Iran block Signal but not WhatsApp if they actually use the exact same protocol? A: Because Facebook has cut a deal with the regime to give them access to things they could not get access to with Signal I suppose it could be that blocking WhatsApp would cause too much disruption, so the Iranian regime tolerates it for now, but I put much more weight on Facebook just rolling over. There are other instances of WhatsApp being allowed and other allegedly as-secure platforms being banned. It could be chance or network effects, but my guess is that Facebook has built in tools to comply with those regimes' spying demands. Perhaps they even push locale-specific versions of the app.
- fooker 5y ago
  Law enforcement has access to a list of people who forwarded particular links or media. This indicates that e2e has some bypasses or exceptions. It would be pretty much impossible to unearth the details though.
  - tgragnato 5y ago
    I would be pretty shocked if Facebook was not doing this. It’s probably done on the device, with suspicious links and media sent to the servers for further inspection. We are also sure some of their engineers worked on methods to detect bypasses on the checks. It’s a leak of data and metadata, a privacy invasion for sure, but not comparable to a MITM.

gentleman11 5y ago

Facebook has publicly stated a lot of privacy related things that turned out to be outright lies in the past, including to congress

ekianjo 5y ago

> Yes, they very publicly state that they do not have access Why do you believe them?