Live data from Hacker News

WhatsApp Blocking Encrypted Calls to All Saudi Numbers

gist.github.com

21–30 of 86 posts

Re: WhatsApp Blocking Encrypted Calls to All Saudi Numbers

#21

Thank you, WhatsApp! Oppressive governments, especially ones that have lots of resources to torment their citizens, should not get to play with our toys.

And yet Zuckerberg is practically begging for Beijing to allow his apps in.

In the PRC, censorship is an inextricable part of the deal.

Re: WhatsApp Blocking Encrypted Calls to All Saudi Numbers

#22

WhatApp does the same for UAE numbers. If I initiate a call to my sister who lives in UAE I get an error saying that "Whatsapp calling is unavailable in the UAE" or something along those lines. We worked around it by installing Signal, but she needs a VPN to be able to access it since it's completely blocked in the UAE (as well as Oman). We get around this by texting each other before hand on whatsapp with the keywor…

Do you have screenshots of this error? If so, do you mind emailing me? lorenzo@motherboard.tv (I'm a reporter at VICE Motherboard, btw)

Re: WhatsApp Blocking Encrypted Calls to All Saudi Numbers

#23
post #14

They're simply providing a better user experience. The Saudis blocked encrypted calls, and users would have wait staring at frustrating repeated timeouts and long 'connecting' hangs. Therefore Whatsapp simply said OK, let's just improve the users experience by giving them an immediate error informing them.

The gist explicitly claims that's not possible. Specifically, it claims that there's no way for the Saudi teleco to distinguish encrypted phone calls from encrypted messages, and since you can send encrypted messages to Saudi users, there's no technical reason why you can't also call them. The implication is that if WhatsApp did allow the calls, the Saudi telecos might block both calls and messages (since they can't…

You can definitely distinguish with near 100% reliability if someone is messaging or calling, even if there is encryption involved.

All you need to do is profile for relatively constant data transfer rates over the course of many minutes that exceed a very low minimum.

If Whatsapp uses a media proxy for calls then you could just trigger on connections made to these servers where these data transfers in question occur.

But even if they don't use a media proxy they'll the clients will connect to specific IP's for call signalling and that's when you'll also know that a call was attempted.

I'm neither defending Saudi Arabia nor Whatsapp, just wanted to let you know that there are very simple ways to detect calls. I'm sure that there are even better, much more advanced techniques that are currently in use by both oppressive (and likely our) governments.

Re: WhatsApp Blocking Encrypted Calls to All Saudi Numbers

#24

They're simply providing a better user experience. The Saudis blocked encrypted calls, and users would have wait staring at frustrating repeated timeouts and long 'connecting' hangs. Therefore Whatsapp simply said OK, let's just improve the users experience by giving them an immediate error informing them.

Couldn't someone with WhatsApp/Facebook's resources find a way around the blockage?

Write a bunch of different protocols and switch randomly - or use steganography - use machine learning to evade the block - buy a bunch of existing apps and hide the data in their protocols - put up a fake weak encryption, detect "dissident" talk, and in that case generate a long nonsense recording for the censors from the voices of the speakers, hiding the true message steganographically :-) - or basically anything they can come up with.

Or - Saudi Arabia is not such a big market - make a complete theatric fuss about it and complain about human rights and so on, close all FB and WhatsApp connections and burn all bridges, and milk it for publicity.

(Only being half serious here :-) but I would be really tempted to do something mischievous in their case rather than comply.)

Re: WhatsApp Blocking Encrypted Calls to All Saudi Numbers

#25
Maybe they know it's going to be blocked anyway, and they are avoiding getting into the cat and mouse game of trying constantly new ways to get around it and are just telling the user they're not even going to try. It's not ratting anybody out, it's not being complicit with anybody, it's simply saying it's not even going to try to encrypt. It sucks, but you know who to blame? The Saudi government.

Re: WhatsApp Blocking Encrypted Calls to All Saudi Numbers

#26

WhatApp does the same for UAE numbers. If I initiate a call to my sister who lives in UAE I get an error saying that "Whatsapp calling is unavailable in the UAE" or something along those lines. We worked around it by installing Signal, but she needs a VPN to be able to access it since it's completely blocked in the UAE (as well as Oman). We get around this by texting each other before hand on whatsapp with the keywor…

Do you have screenshots of this error? If so, do you mind emailing me? lorenzo@motherboard.tv (I'm a reporter at VICE Motherboard, btw)

The OP included a screenshot [0].

[0]: http://i.imgur.com/rQu9Ocf.jpg

Re: WhatsApp Blocking Encrypted Calls to All Saudi Numbers

#27
post #20

Earlier quoted context omitted.

WhatsApp calls are made to a different port; I worked at a teleco in Oman and that's how they blocked the calling feature while keeping messaging alive.

To localize this behavior to the US as an example, Verizon wireless is known to block SIP traffic coming and going out of port 5060; it's entirely possible the Saudis are engaging this very similarly and have effectively blocked traffic, encrypted or not coming and going to a specific protocol port. So I don't think saying "there's no way to tell" is entirely accurate

I believe you would be correct in your assumption. I asked one of the engineers how they did it and that's what they told me to much chagrin.

Re: WhatsApp Blocking Encrypted Calls to All Saudi Numbers

#28
post #15
post #14

Earlier quoted context omitted.

The gist explicitly claims that's not possible. Specifically, it claims that there's no way for the Saudi teleco to distinguish encrypted phone calls from encrypted messages, and since you can send encrypted messages to Saudi users, there's no technical reason why you can't also call them. The implication is that if WhatsApp did allow the calls, the Saudi telecos might block both calls and messages (since they can't…

Bandwidth is going to be a major tell even if you have zero clue about content.

Bandwidth won't be apparent during the handshake. And voice data isn't really that large anyway, though it would be plausible to detect that some kind of stream is going on as opposed to discrete messages. Still, that would have to come mid-call rather than when the call is attempted.

Re: WhatsApp Blocking Encrypted Calls to All Saudi Numbers

#29
post #14

Earlier quoted context omitted.

The gist explicitly claims that's not possible. Specifically, it claims that there's no way for the Saudi teleco to distinguish encrypted phone calls from encrypted messages, and since you can send encrypted messages to Saudi users, there's no technical reason why you can't also call them. The implication is that if WhatsApp did allow the calls, the Saudi telecos might block both calls and messages (since they can't…

WhatsApp calls are made to a different port; I worked at a teleco in Oman and that's how they blocked the calling feature while keeping messaging alive.

That would be a good explanation for this behavior, then.
Post reply on HN