Live data from Hacker News

Reporting a user to WhatsApp forwards a copy of recent messages from that chat

wabetainfo.com

11–20 of 173 posts

Re: Reporting a user to WhatsApp forwards a copy of recent messages from that chat

#11
As if they couldn't read everything anyway.

Obviously, I have no evidence for making such a claim. What I know is

1. Facebook's reputation with regards to privacy.

2. The fact that they paid 20 billion dollars to buy a product without a monetization model. (Which is 20 times more than they paid for Instagram by the way.)

3. Whatsapp's founder left the company after the acquisition due to privacy concerns.

It's enough to be more than suspicious.

Re: Reporting a user to WhatsApp forwards a copy of recent messages from that chat

#12

E2E encryption in closed source automatically updated programs doesn't provide any real assurance: whoever makes the program can subvert your privacy at any time. Do you trust the author of the program? Then E2E doesn't add much. Do you not trust the author of the program? E2E doesn't help. Either way, what's the point? Sure, I guess E2E provides some kind of additional privacy at the margin or something, but you can…

It's a sales gimmick. Just like Apple claiming they care about your privacy but at the same time collect everything you open on your Mac.

Re: Reporting a user to WhatsApp forwards a copy of recent messages from that chat

#13
post #4

> WhatsApp can now read your recent messages when you report a user This feature is just an extension of manually making a screenshot and attaching it to the messages. As much as I like E2EE, I don't see where the problem lies? It's you who opts in into getting a third party involved. E2EE doesn't mean that no third party is ever going to see the content, it only means that nobody sees it by default .

Does it mean messages can be read without agreement? Let's imagine "a glitch" where operator sees that user has opt in, but they didn't - can they see messages?

Re: Reporting a user to WhatsApp forwards a copy of recent messages from that chat

#15

E2E encryption in closed source automatically updated programs doesn't provide any real assurance: whoever makes the program can subvert your privacy at any time. Do you trust the author of the program? Then E2E doesn't add much. Do you not trust the author of the program? E2E doesn't help. Either way, what's the point? Sure, I guess E2E provides some kind of additional privacy at the margin or something, but you can…

According to the article, recent messages will be sent to whatsapp on reporting contacts or groups just like we sent messages to other users. There is no mention of E2E encryption implemented by whatsapp and its loopholes.

Re: Reporting a user to WhatsApp forwards a copy of recent messages from that chat

#17
People think end to end encryption is a magic cure for OpSec. It’s not.

All end to end encryption does is protect you from eve spying on conversations between Alice and bob. Nothing prevents Bob from doxing/publishing all of Alice’s messages.

Edit: it’s true that the signal protocol provides deniability for messages but if Bob publishes Alice’s messages and whatsapp can prove that bob sent and Alice received messages that match those time stamps...

This is why signal deleting logs matters.

Re: Reporting a user to WhatsApp forwards a copy of recent messages from that chat

#18
post #4

> WhatsApp can now read your recent messages when you report a user This feature is just an extension of manually making a screenshot and attaching it to the messages. As much as I like E2EE, I don't see where the problem lies? It's you who opts in into getting a third party involved. E2EE doesn't mean that no third party is ever going to see the content, it only means that nobody sees it by default .

Does it mean messages can be read without agreement? Let's imagine "a glitch" where operator sees that user has opt in, but they didn't - can they see messages?

If you are asking whether a back door can allow them to read your messages, the answer is “obviously, that’s why it’s a back door”

Re: Reporting a user to WhatsApp forwards a copy of recent messages from that chat

#19
post #4

> WhatsApp can now read your recent messages when you report a user This feature is just an extension of manually making a screenshot and attaching it to the messages. As much as I like E2EE, I don't see where the problem lies? It's you who opts in into getting a third party involved. E2EE doesn't mean that no third party is ever going to see the content, it only means that nobody sees it by default .

Does it mean messages can be read without agreement? Let's imagine "a glitch" where operator sees that user has opt in, but they didn't - can they see messages?

I don't know the implementation on the client, but in theory it can be implemented locally on the client only, and I made the above statements under the assumption that it's how it's implemented. The user issues the report command in the UI and the client takes its local copy and uploads it to the server as part of the report. So it's mainly a convenience feature.

The only case where the current E2EE security model is changed is when the protocol gains a feature to enable the client to attach a cryptographic proof about the message's content. That would violate the non-repudiation properties of the Signal protocol, but it would make reports more believable as you can't fake them any more with a modified client. As I've said I don't know the implementation, but it's entirely possible that they didn't include any cryptographic proof and keep it equivalent to screenshotting.

Post reply on HN