Live data from Hacker News

Tracking friends and strangers using WhatsApp

robertheaton.com

91–100 of 159 posts

Re: Tracking friends and strangers using WhatsApp

#91
post #60

Maybe I'm in the minority, but I haven't ever used WhatsApp. Is there a huge benefit to using it over SMS, or something similar?

I find services like WeChat or Line to be superior based entirely on the fact that you can have an actual username. I'm still not sure why whatsapp forces you to use and exchange long sets of numbers to get someone's contact.

Obviously WeChat is not secure in any way, though ;)

Re: Tracking friends and strangers using WhatsApp

#92
post #79
post #76

Earlier quoted context omitted.

This isn’t just necessarily a problem with WhatsApp. The same applies to IRC, if you set away states. Even if you don’t set away states, one can simply monitor every channel you’re in, every message you send, and then quickly determine what timezone you’re in, when you sleep, when you’re on vacation, etc. Here’s an example graph of a user, every dot is a message: https://i.imgur.com/DrgVvVw.png and here one from a us…

In chat applications, those features were the first to get disabled. As I recall, one of the MSN Messenger features required you to sign in before you disabled it. Anyhow, I'd disable showing online status, typing status, or automatically changing status based on activity. This was a decade and a half ago, probably longer. The principle remains the same. No, no I don't want you to know when I'm in front of my compute…

Those graphs are determined purely from messages - no away states, nothing

There's no way to disable that.

Re: Tracking friends and strangers using WhatsApp

#93
post #76

Earlier quoted context omitted.

This isn’t just necessarily a problem with WhatsApp. The same applies to IRC, if you set away states. Even if you don’t set away states, one can simply monitor every channel you’re in, every message you send, and then quickly determine what timezone you’re in, when you sleep, when you’re on vacation, etc. Here’s an example graph of a user, every dot is a message: https://i.imgur.com/DrgVvVw.png and here one from a us…

Yikes, that second person is almost robotic in their sleep patterns.

Actually, most normal working people are similar to the second person.

Only few people have sleep patterns like me (first, erratic graph), and I have them because I spend often my nights working on projects, trying to build new products, and once I've started one, it's hard to stop.

Re: Tracking friends and strangers using WhatsApp

#94
post #92
post #79

Earlier quoted context omitted.

In chat applications, those features were the first to get disabled. As I recall, one of the MSN Messenger features required you to sign in before you disabled it. Anyhow, I'd disable showing online status, typing status, or automatically changing status based on activity. This was a decade and a half ago, probably longer. The principle remains the same. No, no I don't want you to know when I'm in front of my compute…

Those graphs are determined purely from messages - no away states, nothing There's no way to disable that.

Reason #32* to avoid the application.

* Entirely made up number.

Re: Tracking friends and strangers using WhatsApp

#95
post #50

Nevermind the clever writing but the issue has been known for years—and beautifully exploited with the selfhostable ready-made solution WhatsSpy Public since Feb 2015: https://gitlab.maikel.pro/maikeldus/WhatsSpy-Public/ It's not actively maintained anymore but Maikel deserves some credit for it.

Do you happen to know if it’s still working without heavy modifications?

Re: Tracking friends and strangers using WhatsApp

#96
post #94
post #92

Earlier quoted context omitted.

Those graphs are determined purely from messages - no away states, nothing There's no way to disable that.

Reason #32* to avoid the application. * Entirely made up number.

If you're in a group chat, anyone that is in the same chats can see all your messages in there.

That's the one and simple trick.

Re: Tracking friends and strangers using WhatsApp

#97
post #96
post #94

Earlier quoted context omitted.

Reason #32* to avoid the application. * Entirely made up number.

If you're in a group chat, anyone that is in the same chats can see all your messages in there. That's the one and simple trick.

Correct, but this doesn't appear to be group chat. This appears to be individual chat and the timing attacks based on their online presence. Group chat, by default, is going to seriously hinder one's ability to remain private.

Re: Tracking friends and strangers using WhatsApp

#98
post #90

Earlier quoted context omitted.

Now it shows you the live current location of all your friends, no one I know has it turned off. Wth people?

This setting doesn't seem to be enabled by default, at least on Android. I just scrolled into settings > Who can... See My Location > Found it to be on "ghost mode (only me)." I never touched this setting before.

Only log me, but don't let my friends know: You know your privacy is respected jack shit when the least intrusive setting is letting the service know and log you, but not letting your friends know.

The real question isn't that what it sets by default, the question is why that chat app needs to know and log your location in the first place? Why does it not only get it and send it when you choose to share? What kind of enhancement does it give to your fucking """experience""" when it logs your location like that?

Re: Tracking friends and strangers using WhatsApp

#99
post #98
post #90

Earlier quoted context omitted.

This setting doesn't seem to be enabled by default, at least on Android. I just scrolled into settings > Who can... See My Location > Found it to be on "ghost mode (only me)." I never touched this setting before.

Only log me, but don't let my friends know: You know your privacy is respected jack shit when the least intrusive setting is letting the service know and log you, but not letting your friends know. The real question isn't that what it sets by default, the question is why that chat app needs to know and log your location in the first place? Why does it not only get it and send it when you choose to share? What kind of…

In Snapchat your location is used for the geofilters, I guess that's why they have to get your location. I do think they should have an option to turn off geofilters and not use your location at all though.

Re: Tracking friends and strangers using WhatsApp

#100
> Facebook sends data to your browser using straightforward HTTP requests that you can easily write a program to mimic.

Shameless plug, I wrote a plugin for Chrome [1] and Firefox [2] to do just that.

(Facebook is the opposite of WhatsApp – you can disable your online/offline status, but not your idle time.)

[1] https://chrome.google.com/webstore/detail/social-network-cha...

[2] https://addons.mozilla.org/en-US/firefox/addon/social-networ...

Post reply on HN