Live data from Hacker News

Ask HN: Ads triggered by WhatsApp “end to end encrypted” messages?

news.ycombinator.com

351–360 of 473 posts

Re: Ask HN: Ads triggered by WhatsApp “end to end encrypted” messages?

#351

Earlier quoted context omitted.

We did an experiment. We talked about how hard it is to find highlighter yellow nail polish. Nobody in the house is a purchaser of nail polish nor did we do any searches for highlighter or yellow or nail or polish. A day or two later my wife got an Instagram ad for highlighter yellow nail polish. It could have been a coincidence or maybe they were listening. Or maybe some combination of things we did previously led n…

Do you have the setting that turns on end to end encryption? I thought by default it was off (and always off for group chats) ?

Are you thinking of Telegram? There is no such setting in WhatsApp.

Re: Ask HN: Ads triggered by WhatsApp “end to end encrypted” messages?

#352
post #188
post #5

Just because that the messages might be sent end-to-end encrypted from Sue to Joe does not mean Meta cannot read them. Meta has control over the app Sue uses. So they could send them to Meta unencrypted in addition to sending them to Joe in an encrypted fashion. Or they just extract the relevant terms: Sue->Joe: "Hello Joe, I'm so excited! We are going to have a baby! Let's call it Dingbert. You're not the father! Ji…

> Just because that the messages might be sent end-to-end encrypted from Sue to Joe does not mean Meta cannot read them. so what's the point? just inconvenience. better to use telegram at this point.

…and have no encryption at all? (Unless you manually enable it for a given conversation.)

Re: Ask HN: Ads triggered by WhatsApp “end to end encrypted” messages?

#353
post #188

Earlier quoted context omitted.

> Just because that the messages might be sent end-to-end encrypted from Sue to Joe does not mean Meta cannot read them. so what's the point? just inconvenience. better to use telegram at this point.

…and have no encryption at all? (Unless you manually enable it for a given conversation.)

Telegram has encryption (server-client encryption). Whatsapp may have e2e encryption, but then if it sends conversation or part of them to facebook to serve advertising, that's arguably even worse.

Re: Ask HN: Ads triggered by WhatsApp “end to end encrypted” messages?

#354

(wrt some comments in this thread) Is it so hard to believe that Meta is snooping on WhatsApp conversations? Meta, a company of unprecedented size that was built over monetizing your private data? A company who's been caught in plenty of scandals (like Cambridge Analytic) about this exact sort of thing (violating their users' privacy)? Someone from this community, which generally means educated, tech-literate and sen…

The most plausible explanation is that people are just easy to predict. Might be tough to admit, but that’s actually a much simpler explanation than Facebook having a back door into our messages, which are end-to-end encrypted.

As others above me have thoroughly explained, there are numerous ways Facebook could figure out what you’re reading about/listening to/viewing on the internet, which ultimately drives what you are chatting with your friends about. Reading your messages would actually be the most difficult and low fidelity way for them to try to mine this information. They can just see your entire browsing history and extract from there, since the majority of website have a tracking cookie that in some way phones home to Facebook.

Re: Ask HN: Ads triggered by WhatsApp “end to end encrypted” messages?

#355
post #314

Earlier quoted context omitted.

Goal posts? Is this a competition? The phone was sitting between two people having a conversation, one of them "swiped it open" meaning it was off to begin with, then was immediately displayed an ad for that conversation, and upon hearing this the tech-savvy person in the house understood what happened, confirmed it with the mic access to facebook in the settings, and then disabled the behavior.

> Goal posts? Is this a competition? Considering the original claim was "zero indication that the mic is hot" and now it's "zero indication that the mic is hot if the screen is off", I'd say that the goal post has moved considerably. But if you want to know if Facebook is listening to you through the iPhone microphone, you should probably look at the screen for the indicator. iOS apps can't start recording on their o…

Just a few things to note here...

I wrote the original "Wife swipes open the phone" comment, so that's the context you seem to be missing. Sure you can see a little dot on your phone when YOU run some experiment today and look for it, but was that indicator available in the exact situation where the targeted ad was displayed? No.

Also, this incident happened in the past and we know there have been dramatic API changes on both Apple and Facebook products. The limits of the API today don't reflect the capabilities that were available to developers in the past. I doubt Facebook is hacking the App Store process to use hidden APIs. It was probably just available in the past and my wife granted the facebook app complete access to the mic, so they took what they wanted.

I'd make sure to disable that permission today too, just in case.

One last thing is I just opened my iPhone again and hit record. I honestly didn't see the tiny orange pixel at the top of my phone until you pointed it out. I was basically looking for the green video indicator light to show. So I'm technically wrong about NO indication, you're welcome.

Re: Ask HN: Ads triggered by WhatsApp “end to end encrypted” messages?

#356
post #216

I think you partly may just be biased by happening to notice ads more if they fit the topic you sent to your wife or being lenient in deciding if ads meet the categorization. And if you dwell on an ad because it seems to match, you may get more similar ads. Here is how I think you could design a more robust (but less fun) experiment: - Come up with a bunch of topics, write them down on slips of paper, put the paper i…

A simpler protocol to realize that the Baader-Meinhof phenomenon is probably what's happening: - pick said topic, something you never cared about before, talk about it but don't write any messages containing it; - for 1 month record every ad you see about it; - send a message about the topic; - for another month, record every ad you see about it Comparing the number of occurrences will tell you what is happening.

It also has to be a topic that advertisers would pay to target you with. You can't talk about something super obscure that advertisers don't care about - like steam engines.

Re: Ask HN: Ads triggered by WhatsApp “end to end encrypted” messages?

#357
post #5

Just because that the messages might be sent end-to-end encrypted from Sue to Joe does not mean Meta cannot read them. Meta has control over the app Sue uses. So they could send them to Meta unencrypted in addition to sending them to Joe in an encrypted fashion. Or they just extract the relevant terms: Sue->Joe: "Hello Joe, I'm so excited! We are going to have a baby! Let's call it Dingbert. You're not the father! Ji…

> Just because that the messages might be sent end-to-end encrypted from Sue to Joe does not mean Meta cannot read them. No, that's precisely what End-to-End encryption means.

End-to-End is about the networking, not the end points.

https://en.wikipedia.org/wiki/End-to-end_encryption#Endpoint...

Re: Ask HN: Ads triggered by WhatsApp “end to end encrypted” messages?

#358
post #227

I think you partly may just be biased by happening to notice ads more if they fit the topic you sent to your wife or being lenient in deciding if ads meet the categorization. And if you dwell on an ad because it seems to match, you may get more similar ads. Here is how I think you could design a more robust (but less fun) experiment: - Come up with a bunch of topics, write them down on slips of paper, put the paper i…

I don't think it can be observed because it's likely a bug. It freaks users out. People uninstall the app and start threads like this. It's sort of like getting mugged once and then setting up a camera in a bunch of alleys to prove that muggers exist. You can even set up a camera of yourself running into dark alleys every night, but the odds of reproducing a mugging is still extremely low. There's a certain kind of p…

> the odds of reproducing a mugging is still extremely low

I did that and I got a mugging on camera. The attacker was convicted.

Re: Ask HN: Ads triggered by WhatsApp “end to end encrypted” messages?

#359
post #330

Earlier quoted context omitted.

The thing is if it's a 3rd-party Android keyboard or similar that logs your messages then there's nothing Meta can do about this.

That's still Facebook's problem, no excuses. Facebook absolutely has the power and resources to lobby google and congress. Security teams at both companies will unequivocally agree that keylogging presents an extremely grave security risk that consumers are unlikely to understand the consequences of and therefore need to be protected from. Imagine a hapless military professional/politician downloading one. The proble…

That 3rd-party keyboard would also be able to log your Signal messages, so I don't get your point.

Re: Ask HN: Ads triggered by WhatsApp “end to end encrypted” messages?

#360
For a few years, WhatsApp "e2ee" messages were stored in plain text on your Google drive backup (that's how it worked on Android. Don't know about apple). This was even stated in their FAQ.

This was as part of a FB/GOOG deal where the storage for WhatsApp backups did not count for your Google drive quota.

Recently the backups did finally become encrypted as well. With a key known to the WhatsApp app. (On Android, stored in a file called "key" in the apps local storage)

However, when you restore the backup, where does the key come from? From the WhatsApp servers, obviously.

So still, FB and GOOG together still have full access to your daily backed up messages.

And the free storage deal is still there, of course.

Please do correct me if I'm wrong and you know better.

Post reply on HN