101–110 of 173 posts
There have been several unofficial reports of Facebook unifying the backend messaging among Instagram, WhatsApp and FB Messenger. If and when that happens, E2EE on WhatsApp will finally be completely gone. Anyone knows how far along (or canceled) that plan is?
Earlier quoted context omitted.
I imagine that the API-based uploads of the recent decrypts from the user being reported can also be faked, so I'm not sure that this is a very important distinction.
> I imagine that the API-based uploads of the recent decrypts from the user being reported can also be faked, so I'm not sure that this is a very important distinction. That assumes that the decrypted messages aren't signed (e.g. via HMAC), no?
Earlier quoted context omitted.
Please suggest a better title. I'll try to improve. Many users have complained. There is a 80 character limit. Btw I meant it as a warning. Your messages may be uploaded when you report a user
(Edit, for context: the original submission title was “WhatsApp can now read your recent messages when you report a user”) By selecting a specific part of the article to highlight in the title, you introduce your own bias before people even begin reading. Stick to the Submissions Guidelines [1], and use the original title. “WhatsApp beta for Android 2.20.206.3” [1] https://news.ycombinator.com/newsguidelines.html > P…
Sorry but there is zero information in that title. I'm not going to use that. The intention of my post is to make more people aware of this new 'feature'.
If some other user had posted this article with that title, I wouldn't have clicked it and I wouldn't have know of this new change.
Earlier quoted context omitted.
What is misleading about it? I included ' can read when you report'.
You send them the messages, by opt-in, your version seems to suggest something else. Simplest thing is to just stick to the guidelines and use the original title, then add the thing you want to highlight in a comment. The other way ends up taking a non-clickbait title and making it clickbait.
The reporting is opt in. The sending of messages tied to the reporting is not
Earlier quoted context omitted.
Please suggest a better title. I'll try to improve. Many users have complained. There is a 80 character limit. Btw I meant it as a warning. Your messages may be uploaded when you report a user
(Edit, for context: the original submission title was “WhatsApp can now read your recent messages when you report a user”) By selecting a specific part of the article to highlight in the title, you introduce your own bias before people even begin reading. Stick to the Submissions Guidelines [1], and use the original title. “WhatsApp beta for Android 2.20.206.3” [1] https://news.ycombinator.com/newsguidelines.html > P…
> “Users may send recent chat history when reporting”
because that is false. According to the article, you have no choice as to whether you send that chat history. It is a _must_ if you want to report.
Your new suggestion is just as bad because it throws out all context about why anyone would care about just another beta. This isn’t a software release track announcement board.
Earlier quoted context omitted.
E2EE is a lie, Facebook hold the private encryption keys server-side so they're able to decrypt messages at any time.
> E2EE is a lie, Facebook hold the private encryption keys server-side so they're able to decrypt messages at any time. This is a pretty bold claim. Do you have a citation for this?
They're just doing a Zoom. A bold faced lie.
Earlier quoted context omitted.
I imagine that the API-based uploads of the recent decrypts from the user being reported can also be faked, so I'm not sure that this is a very important distinction.
> I imagine that the API-based uploads of the recent decrypts from the user being reported can also be faked, so I'm not sure that this is a very important distinction. That assumes that the decrypted messages aren't signed (e.g. via HMAC), no?
But there are plenty of other ways to implement this. Digital signatures. Or if facebook stores the ciphertext, the recipient could simply reveal the decryption key for the message. Or facebook could compute a MAC over the ciphertext with a key neither participant knows, then the recipient could reveal the ciphertext and decryption key, and facebook could verify the outer MAC to verify authenticity.
There have been several unofficial reports of Facebook unifying the backend messaging among Instagram, WhatsApp and FB Messenger. If and when that happens, E2EE on WhatsApp will finally be completely gone. Anyone knows how far along (or canceled) that plan is?
Zuckerberg said instead of removing Whatsapp's e2ee, he would add e2ee to Instagram and Messenger and then 'unify the backend',
We both know how likely that is, and how long that will take to be implemented (if implemented at all)
Earlier quoted context omitted.
Can you help come up with a better title? This was the best I could come up with. I included 'can', and I clearly mentioned 'when you report'
How about: "WhatsApp gives option to include recent messages when reporting bad behavior"
'Most recent messages will be forwarded to Whatsapp'