291–300 of 321 posts
Apple have single handedly done the internet a gross disservice by not making it easy for users to set up webhooks for push notifications. If it weren’t for that chat would have a chance at being sane.
Earlier quoted context omitted.
You have it correct. Nearly every major US provider maintains some sort of online interface for law enforcement to submit requests. The level of information provided via these means varies, but they are obligated to respond to legitimate requests with wharever data they have on hand. Dont like it? Go with a security-minded service like signal. Or, better yet, something totally severless and open source.
I don't use WhatsApp. But if they have an official backdoor, then it's not really e2e encrypted. Until now I thought, at least the official statement was, WhatsApp is truly e2e encrypted. Just that.
I.e keeping a continuous web client active which the user isn't notified about
What are Israel doing to get so good at this and chip design and weapons making and everything else they seem to be really good at? There’s only about 8 million people in the whole country. There are plenty of cities with more people than that. How come they punch so far above their weight?
There is no reason why other well educated countries could being doing the same thing, but with the Israeli's, nothing is off the table. If a company in Israeli learns how to hack WhatsApp, that is seen as an advantage for the Israeli government. If an American company learns how to hack WhatsApp, they bound by ethics to let WhatsApp know and make sure the issue is fixed. Israeli culture thinks that is crazy to do th…
"Prior to notifying victims, WhatsApp checked the target list against existing law enforcement requests for information relating to criminal investigations, such as terrorism or child exploitation cases. But the company found no overlap, said a person familiar with the matter. Governments can submit such requests for information to WhatsApp through an online portal the company maintains." There is already an official…
I don't think it's fair to call this a "backdoor". Because of E2EE the law enforcement access is limited to looking up IP addresses associated with whatsapp users and such.
The article claims that "a flaw in WhatsApp-owned servers" was used to "take over users’ phones". This seems to imply that the hackers were able to escape from the WhatsApp mobile app to perform other actions on the phones. How would this be possible? Or is this just likely careless journalism, and the exploit was that the server breach allowed the attackers to exfiltrate WhatsApp data only?
The article says: "The Facebook-owned software giant alleges that NSO Group built and sold a hacking platform that exploited a flaw in WhatsApp-owned servers to help clients hack into the cellphones of at least 1,400 users." The actual complaint reads: "Between in and around April 2019 and May 2019, Defendants used WhatsApp servers, located in the United States and elsewhere, to send malware to approximately 1,400 mo…
Earlier quoted context omitted.
The Signal client is open source. The back end not so much. A lot of Signal is basically "trust Moxie".
> A lot of Signal is basically "trust Moxie". Let me come out and defend Signal (I usually defend Telegram, but I don't think we should be unfair to anyone): As far as I am aware no one who knows what they are talking about has come out with anything that says Signals end-to-end encryption is broken. If I have understood it correctly an as long as that is true, NSA, FSB and the Chinese might be running the message ha…
It's too bad bitmessage can't scale :/
Earlier quoted context omitted.
Fun fact, a few of my friends and even family work for NSO and until recently they used WhatsApp for their own internal communication. They literally moved off it a few days ago when shit hit the fan into more secure software because Facebook is targeting NSO employees.
Specifically what more secure software? Im looking for a secure messenger now.
Earlier quoted context omitted.
You have it correct. Nearly every major US provider maintains some sort of online interface for law enforcement to submit requests. The level of information provided via these means varies, but they are obligated to respond to legitimate requests with wharever data they have on hand. Dont like it? Go with a security-minded service like signal. Or, better yet, something totally severless and open source.
I don't use WhatsApp. But if they have an official backdoor, then it's not really e2e encrypted. Until now I thought, at least the official statement was, WhatsApp is truly e2e encrypted. Just that.
Having a phone number is almost same as having person's location and identity. That's why really secure messengers won't require a phone number.
Earlier quoted context omitted.
You have it correct. Nearly every major US provider maintains some sort of online interface for law enforcement to submit requests. The level of information provided via these means varies, but they are obligated to respond to legitimate requests with wharever data they have on hand. Dont like it? Go with a security-minded service like signal. Or, better yet, something totally severless and open source.
I don't use WhatsApp. But if they have an official backdoor, then it's not really e2e encrypted. Until now I thought, at least the official statement was, WhatsApp is truly e2e encrypted. Just that.