Live data from Hacker News

Tell HN: WhatsApp Is Down

news.ycombinator.com

131–132 of 132 posts

Re: Tell HN: WhatsApp Is Down

#131
post #122

Earlier quoted context omitted.

That article doesn't support what you're saying. It says that WhatsApp has access to metadata, which it hands over to law enforcement. This does not necessarily mean that they can read your messages. It does say that 'WhatsApp can read some of your messages if the recipient reports them'. That 'if' is doing a lot of work in this sentence. It means that the recipient has to decrypt your message. Although there are for…

> The fact that it's closed source just means that we can't verify that for ourselves. That's really the whole point. As far as we know, it could be that it is not e2ee at all. Also from the moderation article, it's not clear to me what that means: if I report you, does that mean that the moderators will get access to all your recent conversations? Could be, right? But then the FBI could report you for no reason, and…

I agree, closed source means we can't do anything apart from decide whether we believe Meta or not.

But my understanding is that the 'report' is from a user's WhatsApp client—if someone sends you a message that you think is reportable, you can report them to Meta. As part of the report, your WhatsApp client will forward some information to Meta.

Assuming Meta are not actively lying, this would not mean that it's not E2EE.

Re: Tell HN: WhatsApp Is Down

#132
post #128

Earlier quoted context omitted.

How do you know the source code you’re looking at is for the same program you downloaded from the App Store? Does apple publish a checksum of software you’re installing?

Honestly, if it really mattered a lot to me (i.e. to my own security), I would compile Signal from source and install it on my device. Which I could not do with WhatsApp.

True
Post reply on HN