Live data from Hacker News

Ask HN: Ads triggered by WhatsApp “end to end encrypted” messages?

news.ycombinator.com

381–390 of 473 posts

Re: Ask HN: Ads triggered by WhatsApp “end to end encrypted” messages?

#381

I’m convinced WhatsApp’s e2e is BS. Because multiple times I’ve mentioned something I’ve never even googled and then had Facebook ads for those things show up minutes later. The most notable one being renting an apartment. I viewed an apartment then sent a message to the agent requesting window grills or latches and then had adverts for that stuff straight away. When ever I mention this on HN I get downvoted with lam…

I had a private family Slack instance, and we observed similar things. A question about buying a particular brand of soap would be spoken in the channel and ads for that exact soap would show up minutes later on Facebook. No searches or other activity, just a text query to a person through Slack. I prefer to think that some of this is chance, or Facebook just guessing really, creepily well. But after the 3rd or 4th t…

> I prefer to think that some of this is chance

Don't. People are way too tolerant of serial liars, psychopaths and rapacious corporations.

Re: Ask HN: Ads triggered by WhatsApp “end to end encrypted” messages?

#382
post #152

The scarier thing to me is when ads match _conversations_ I have with my wife. I told her about this story this morning, and she reminded me about a conversation about stem cell research we had yesterday. I said something along the lines of 'I hope there is a breakthrough soon on regenerating the Isle of Langerhans in the pancreas to treat diabetes.' Sure enough, she noticed an article in her Google News feed later t…

As creepy as this is whenever it happens, I remain convinced it’s observation bias. Because of how often it doesn’t happen. Quoth Richard Feynman: > “You know, the most amazing thing happened to me tonight... I saw a car with the license plate ARW 357. Can you imagine? Of all the millions of license plates in the state, what was the chance that I would see that particular one tonight? Amazing!” You were gonna see ads…

> Because of how often it doesn’t happen.

So sweet boxes from Kazakhstan suddenly appearing in your ads is due to observation bias...

Re: Ask HN: Ads triggered by WhatsApp “end to end encrypted” messages?

#383
post #360

For a few years, WhatsApp "e2ee" messages were stored in plain text on your Google drive backup (that's how it worked on Android. Don't know about apple). This was even stated in their FAQ. This was as part of a FB/GOOG deal where the storage for WhatsApp backups did not count for your Google drive quota. Recently the backups did finally become encrypted as well. With a key known to the WhatsApp app. (On Android, sto…

I understand your point. Their track record regarding handling users data is bad, so egregious that in Europe laws are being crafted to force them to keep users' interests at heart.

Let me tell you about another third party that is not mentioned here. The telecom operator. Once, in 2019, I was reinstalling WhatsApp on my smartphone. I checked the Internet traffic records (outbound) with curiosity. This led me to finding out that my phone was reaching out to *whatsapp.com (Meta's servers) and Belgacom (Belgium's telephony provider). So, my phone's data was being routed through the parent company's devices and some other third party services like a national telecom company. I don't if it's still the case nowadays, but since that day, I have more worries about their encryption and data relay practices.

Re: Ask HN: Ads triggered by WhatsApp “end to end encrypted” messages?

#385
post #216

Earlier quoted context omitted.

A simpler protocol to realize that the Baader-Meinhof phenomenon is probably what's happening: - pick said topic, something you never cared about before, talk about it but don't write any messages containing it; - for 1 month record every ad you see about it; - send a message about the topic; - for another month, record every ad you see about it Comparing the number of occurrences will tell you what is happening.

You're saying to record ads you see about it on TV or something? (Just to eliminate the "My computer is secretly recording me" angle)

I'm talking about every occurrence that might be pushed, so it's the TV ads, webradio ads, search suggestions, ...

Re: Ask HN: Ads triggered by WhatsApp “end to end encrypted” messages?

#386

I’m convinced WhatsApp’s e2e is BS. Because multiple times I’ve mentioned something I’ve never even googled and then had Facebook ads for those things show up minutes later. The most notable one being renting an apartment. I viewed an apartment then sent a message to the agent requesting window grills or latches and then had adverts for that stuff straight away. When ever I mention this on HN I get downvoted with lam…

I mean the WhatsApp founders literally quit with millions left on the table over "disagreements with facebook senior leadership" and then promptly made a huge donation to Signal. If that wasn't them saying "HEY THEY ARE REMOVING E2E" without violating NDA I don't know what it was.

Whether or not this is a canary for negative impact to the integrity of WhatsApp e2e, this move was enough to move my primary communication to Signal.

Jan Koum not only had unvested shares, he was on the BOARD of Facebook and decided to quit. Along with the donation to Signal, I don't think the magnitude of this action was widely appreciated at the time.

Re: Ask HN: Ads triggered by WhatsApp “end to end encrypted” messages?

#387

(wrt some comments in this thread) Is it so hard to believe that Meta is snooping on WhatsApp conversations? Meta, a company of unprecedented size that was built over monetizing your private data? A company who's been caught in plenty of scandals (like Cambridge Analytic) about this exact sort of thing (violating their users' privacy)? Someone from this community, which generally means educated, tech-literate and sen…

> Is it so hard to believe that Meta is snooping on WhatsApp conversations?

for a lot of people, no

> Meta, a company of unprecedented size that was built over monetizing your private data?

one of many companies, however "meta" does have the advantage that you can opt out of them, mostly.

> A company who's been caught in plenty of scandals (like Cambridge Analytic) about this exact sort of thing (violating their users' privacy)?

CA is interesting as it started out as an academic study, which was consented fully. CA then went on to scrape people's public profiles, which often included likes, friends, etc. This combined with other opensource information allowed them to claim to have good profiles of lots of people, the PR was strong. Should FB have had such an open graph? probably not. Should they have taken the rap for everything evil on the internet since 2016? no. There are other actors who are much more predatory who we should really be questioning.

> Are you Meta employees?

I think you place far to much faith into a company that is clearly floundering. Its not like it has a master plan to invade your entire life. Its reached it's peak and has not managed to find a new product, and is slowly fading.

However, as we all think we are engineers, we should really design a test! but first we need to be mindful of how people are tracked:

1) phone ID. If you are on android, your phone is riddled with markers. Apple, supposedly they are hidden, but I don't believe that they don't leak

2) account, and account is your UUID that tracks what you like.

3) your IP. if you have IPv6, perhaps you are quite easy to track. even on V4 your home IP changes irregularly and can be combined with any of the above to work out that you are the same household.

4) your browser fingerprint. (be that cookies, or some other method)

5) your social graph

method:

1) buy two new phones.

2) do not register them with wifi

3) create all new accounts for tiktock, gmail, instgram etc.

4) never log into anything you've created previously, or the fresh accounts on old devices.

5) message each other about something. However you need to source your ideas from something offline, like a book from a thrift store or the like. maybe an old magazine. open a page, pick the first thing your finger lands on. this will eliminate the "I heard about x" or "i'm in the mood for y"

report back.

Re: Ask HN: Ads triggered by WhatsApp “end to end encrypted” messages?

#388

Earlier quoted context omitted.

More so, my wife sent me a picture of my daughter working on a puzzle. Less than 24 hours later, her Instagram was showing ads for a store that was selling the same type of puzzle as the one my daughter was playing with. So it's not just terms but images too.

How did she buy the puzzle to begin with.

No post body was provided.

Re: Ask HN: Ads triggered by WhatsApp “end to end encrypted” messages?

#389
post #330

Earlier quoted context omitted.

The thing is if it's a 3rd-party Android keyboard or similar that logs your messages then there's nothing Meta can do about this.

That's still Facebook's problem, no excuses. Facebook absolutely has the power and resources to lobby google and congress. Security teams at both companies will unequivocally agree that keylogging presents an extremely grave security risk that consumers are unlikely to understand the consequences of and therefore need to be protected from. Imagine a hapless military professional/politician downloading one. The proble…

I don’t agree that it is Facebook’s problem but I do think this is probably where a lot of data gets leaked that people don’t realize or think about.

In a perfect world sure Facebook has the power and money to do a lot of things. So do the other megacorps. They don’t do them, and you’re correct it is the misalignment of incentives to due so.

But Facebook doesn’t control what keyboard you use on your phone and if the keyboard is sending every message you type somewhere, they can’t do anything about that and they aren’t lying that they can’t read your messages.

Whether or not you believe that they do in fact harvest the message data is up to you. But certainly people using keyboards that harvest data is very plausible to me as a vector for this stuff.

Re: Ask HN: Ads triggered by WhatsApp “end to end encrypted” messages?

#390
post #216

I think you partly may just be biased by happening to notice ads more if they fit the topic you sent to your wife or being lenient in deciding if ads meet the categorization. And if you dwell on an ad because it seems to match, you may get more similar ads. Here is how I think you could design a more robust (but less fun) experiment: - Come up with a bunch of topics, write them down on slips of paper, put the paper i…

A simpler protocol to realize that the Baader-Meinhof phenomenon is probably what's happening: - pick said topic, something you never cared about before, talk about it but don't write any messages containing it; - for 1 month record every ad you see about it; - send a message about the topic; - for another month, record every ad you see about it Comparing the number of occurrences will tell you what is happening.

If anyone wants to try this, a friend sent me one link to a device called Levo which does “herb oil infusion” aka it lets you make weed brownies easily. I clicked the one link my friend sent and now I get ads for Levo constantly in my YouTube adroll. Though I should say this is obviously on Google’s ad network specifically and I have no idea if this applies to other networks.
Post reply on HN