Live data from Hacker News

Collecting huge amounts of data with WhatsApp

lorankloeze.nl

51–60 of 65 posts

Re: Collecting huge amounts of data with WhatsApp

#51

It clearly says so in the WhatsApp settings what people can and cannot see. This is the modern day equivalent of cold calling a range of home numbers and see who answers. If you don't want that information to be public, disable it. Simple as that. This functionality is pretty much what made WhatsApp so easily accessible for anyone in the first place.

If you get cold-called, you will catch on that somebody is checking your status (home/not home) or tries to elicit information from you – because you are directly involved. With this API, you'll never notice that somebody tracks you. Most non-tech people will never check the settings tab and even fewer will check the privacy settings. They are not aware they are sharing their info publicly.

You are directly involved by installing the Whatsapp application and agreeing to the ToS, which clearly states:

>We collect information about your online and status message changes on our Services, such as whether you are online (your “online status”), when you last used our Services (your “last seen status”), and when you last updated your status message.

And

>Your phone number, profile name and photo, online status and status message, last seen status, and receipts may be available to anyone who uses our Services, although you can configure your Services settings to manage certain information available to other users.

"B-but people don't read those!" - well then maybe that's something to worry about instead of complaining about an API which is the nature of the product.

Re: Collecting huge amounts of data with WhatsApp

#54

I don't get why people make such a big problem about this. First of all, the privacy issues from WhatsApp have been discussed many times before. Yes, the default option "public" is bad, and just like making your profile picture on facebook "public" means anyone can scrape it. The fact that its a mobile app doesn't make it different from a website. Secondly; people in the comments talk about the fact that you cannot c…

10 bucks for every few hundred thousand or even every few hundred is totally feasible. This information is very valuable.

Re: Collecting huge amounts of data with WhatsApp

#55

I don't get why people make such a big problem about this. First of all, the privacy issues from WhatsApp have been discussed many times before. Yes, the default option "public" is bad, and just like making your profile picture on facebook "public" means anyone can scrape it. The fact that its a mobile app doesn't make it different from a website. Secondly; people in the comments talk about the fact that you cannot c…

what is your findings for limitations?

Re: Collecting huge amounts of data with WhatsApp

#56

I don't get why people make such a big problem about this. First of all, the privacy issues from WhatsApp have been discussed many times before. Yes, the default option "public" is bad, and just like making your profile picture on facebook "public" means anyone can scrape it. The fact that its a mobile app doesn't make it different from a website. Secondly; people in the comments talk about the fact that you cannot c…

Do you have contact info somewhere? I'd like to chat. (Or you can reach me at at gmail.)

Re: Collecting huge amounts of data with WhatsApp

#57
post #26

Earlier quoted context omitted.

Whatsapp has no setting to disable the "online" flag when i have opened the app, and a bunch of things mentioned can be built on top of just this. I think this shows how some seemingly trivial data points on an individual level can allow one to build something way more than the sum of parts at a mass surveillance level.

I believe you're looking for Settings > Account > Privacy > Status > Only Share with... And select no contacts on that screen. This is on the Android app, I'm not familiar with the web version.

I don't think that disables the "online" flag. As far as I'm aware, it's not currently possible to disable that one.

Re: Collecting huge amounts of data with WhatsApp

#58

Earlier quoted context omitted.

You are affected: There's no way to disable the "online" status display when the app is opened in WhatsApp.

Oh, that's a very misleading by Facebook. I have "Status privacy" and "Last seen" set to no one, I assumed that included "If I am online right now".

This has been discussed many times before on HN. Posts range back from 2+ years ago.

Re: Collecting huge amounts of data with WhatsApp

#59
post #56

I don't get why people make such a big problem about this. First of all, the privacy issues from WhatsApp have been discussed many times before. Yes, the default option "public" is bad, and just like making your profile picture on facebook "public" means anyone can scrape it. The fact that its a mobile app doesn't make it different from a website. Secondly; people in the comments talk about the fact that you cannot c…

Do you have contact info somewhere? I'd like to chat. (Or you can reach me at at gmail.)

[deleted]

Re: Collecting huge amounts of data with WhatsApp

#60
post #33
post #22

If you think there is no problem, you are wrong. The blog post does not show all the information leaks that this implies. Example: I can modify the script to monitor all the numbers I've in my phone, so that based on the online/offline status in a few weeks I can be able to guess who is having conversations together, discovering cheatings, work affairs, ... EDIT: Practical example. After collecting enough data about…

Well, maybe. I don't want to discount this concept entirely because some info is being "leaked" if that is the right word, but... Let's say one of your contacts chats a lot because it's a chatty person. They're online far more than another person. What if that other person only chats on the bus on the way to and from work at roughly the same time every day to tell their wife they're on the way home. This activity wil…

I would think having a week or a month's worth of data is enough to get rid of such people who are "background noise", and get an accurate enough "who's talking to who" mapping. (Something like, "A and B's presence are within a minute of each other for 80% of the time, even during 'off-peak' times, for example early in the morning.").

We are worried about the NSA collecting metadata, but you dismiss this as an end user problem. Famously this is why Facebook has its settings to be opt-out instead of opt-in, because a high percentage of users never changes the default.

Post reply on HN