Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

“100 spies” will monitor all SMS and email that goes in and out of Norway

translate.google.com

Post reply on HN
Print view View original

21–30 of 50 posts

Re: “100 spies” will monitor all SMS and email that goes in and out of Norway

#21

Post by lieuwex »

_trampeltier wrote: post #19
greiskul wrote: post #18

Earlier quoted context omitted.

You are mistaken about WhatsApp. It does end to end encryption by default. What needs to be explicitly enabled is that theoretically WhatsApp/some bad guy could steal an WhatsApp account, and it would create a new public key, and if you didn't turn on security notifications, you might not be aware that the person you think you are talking to changed. You also should verify that the end to end encryption keys match, b…

I heard a couple of times, after people get a new phone number, after installing WhatsApp, they see the conversation from the old owner of this phone number. How can this happen then?

If you really mean conversations of the original owner, I can't believe that's true after e2e has been enabled.

But it could be that messages sent to the original owner are received, since WhatsApp automatically re-encrypts and sends messages if the message has not been received yet and the key has been changed. So basically that would mean the message would be sent when the previous owner already changed their number. So the people shouldn't have sent the messages at all.

WhatsApp e2e encryption just makes sure that the only person that can read the message is the owner of the number, not necessarily the person you want to send it to.

Re: “100 spies” will monitor all SMS and email that goes in and out of Norway

#23

Post by jpalomaki »

x15 wrote: post #16

I doubt most tech literate criminals won't use something like Telegram or Matrix over a tor relay. Whenever I and my girlfriend talk about anything too personal, I always joke about the government's ability to hear our conversation. WhatsApp and Viber provide cryptographic communication but, if I'm not mistaken, it needs to be explicitly enabled and I've also read there's a bunch of metadata exposed.

Quite many crimes are such that if you were a smart person, you would not be committing them in the first place.

I think this is why even simple things such as wiretapping and checking which cell phones registered near the crime scene still work.

Re: “100 spies” will monitor all SMS and email that goes in and out of Norway

#24

Post by CWSZ »

chrismeller wrote: post #12
rocqua wrote: post #4

Sounds like it's only meta-data of emails, not actual content when TLS is used.

When TLS is used there is no metadata either... server x talked to server y for a while, but what, if anything, happened we know not.

>When TLS is used there is no metadata either... server x talked to server y for a while, but what, if anything, happened we know not.

Quite a bit of metadata really...

Client X: IP address

Server Y: IP address

Client X request: TLS parameters that can be analyzed through TLS fingerprinting

Server Y response: Hostnames supported by SNI

Server Y response: TLS parameters that can be analyzed thorough TLS fingerprinting

Re: “100 spies” will monitor all SMS and email that goes in and out of Norway

#25

Post by ams6110 »

kwhitefoot wrote: post #9

How does that work with encrypted transport? Yahoo, Microsoft, Google and of course many others, all provide IMAP over TLS so sending email to them and receiving from them doesn't go in the clear.

They get the keys from the NSA.

(Sarcasm, but a non-zero fear that it's true.)

Re: “100 spies” will monitor all SMS and email that goes in and out of Norway

#28

Post by StavrosK »

lieuwex wrote: post #21
_trampeltier wrote: post #19

Earlier quoted context omitted.

I heard a couple of times, after people get a new phone number, after installing WhatsApp, they see the conversation from the old owner of this phone number. How can this happen then?

If you really mean conversations of the original owner, I can't believe that's true after e2e has been enabled. But it could be that messages sent to the original owner are received, since WhatsApp automatically re-encrypts and sends messages if the message has not been received yet and the key has been changed. So basically that would mean the message would be sent when the previous owner already changed their numbe…

WhatsApp also does backup.

Re: “100 spies” will monitor all SMS and email that goes in and out of Norway

#29

Post by CGamesPlay »

_trampeltier wrote: post #19
greiskul wrote: post #18

Earlier quoted context omitted.

You are mistaken about WhatsApp. It does end to end encryption by default. What needs to be explicitly enabled is that theoretically WhatsApp/some bad guy could steal an WhatsApp account, and it would create a new public key, and if you didn't turn on security notifications, you might not be aware that the person you think you are talking to changed. You also should verify that the end to end encryption keys match, b…

I heard a couple of times, after people get a new phone number, after installing WhatsApp, they see the conversation from the old owner of this phone number. How can this happen then?

Doubtful that they are seeing the old conversations, but people with the old phone numbers can send new messages to the new account with this phone number, continuing an old conversation.
Post reply on HN