Live data from Hacker News

WhatsApp banned on House staffers' devices

axios.com

61–70 of 161 posts

Re: WhatsApp banned on House staffers' devices

#61

Earlier quoted context omitted.

[flagged]

[flagged]

Look at what Trump does. After the Syrian fall, he continues the long standing policies and proposes the MIGA regime change in Iran. Since this is a decades old goal of US foreign policy, I assume he'll go through with it. They are already promoting Reza Pachlavi on Fox News.

Unless you have proof that he made a secret deal with Putin (you get Ukraine, we get Syria and Iran), how is this pro Russian?

Re: WhatsApp banned on House staffers' devices

#63
post #49

> "Messages on WhatsApp are end-to-end encrypted by default, meaning only the recipients and not even WhatsApp can see them." The handling and metadata around encrypted messages is nearly as exploitable as the actual message contents. End-to-end encryption is necessary but not sufficient. The infrastructure has to be designed to minimize risk of other forms of exploitive analysis as well but in the case of WhatsApp t…

If the network controls the endpoints; then E2EE is meaningless.

What implementation of end to end encryption doesn't involve this?

Re: WhatsApp banned on House staffers' devices

#66
post #63
post #49

Earlier quoted context omitted.

If the network controls the endpoints; then E2EE is meaningless.

What implementation of end to end encryption doesn't involve this?

OTR, for IRC/XMPP, PGP for Email and Olm/Megolm provided by Element for Matrix operators.

Essentially the software creating the keys is not controlled by the same entity controlling the transmission method.

In email/matrix you have an additional protection in that you can host your own server; the best protection is the one you never have the possibility of traffic being diverted, and even if it was it would be encrypted so that the server doesn’t leak anyway, security is like an onion after all.

Re: WhatsApp banned on House staffers' devices

#68
post #65
post #62

[flagged]

It doesn't mean that MS Teams is safer, it means that the government has tighter control on MS Teams. Or maybe that Microsoft pays more than Meta.

MS products allow you to store data locally without any egress, so an IT team has access to it.

This is the sticking point, because WhatsApp has now integrated Meta AI into the app, but (obviously) do not provide an on-prem data store. This is why Deepseek AI (the Deepseek app) and ChatGPT (the OpenAI app) are barred as well.

Data Stewardship and Zero Trust has been an internal initiative in the House for a couple years now.

The fact that almost no one on this thead knows these (imo overused) terms and design patterns highlights one of the various major gaps in Software Dev I've been observing for several years now - especially the North American market (given the hours that this was posted). The inability to incorporate or understand some basic security architectures is a major gap.

Edit: Keep pushing the downvotes. The truth hurts, and plays a role in jobs leaving, and funds like my employer funding cybersecurity startups in Israel, India, and Eastern Europe because the ecosystem doesn't exist in the US anymore. A similar trend happened in data layer related work.

We don't need more SKLearn plumbers calling themselves "ML Engineers" or Angular monkeys calling themselves "Fullstack Engineers" - we need people who truly understand fundamentals (or - shudders - first principles), be they mathematical (optimization), systems (virtualization), or algorithms (efficient data structures)

Re: WhatsApp banned on House staffers' devices

#70
post #12

Government: Zuck put a backdoor in WhatsApp or we will put you in a blacksite UFC ring and beat you up. Also Government: WhatsApp has a backdoor. Don't use it.

Also government: installed special version of Signal that includes a backdoor (logs) People: don't use Signal! It has a back door! Instead, use Telegram, it doesn't have encryption by default and is highly suspect of a foreign adversary Also people: "I'll just send copies of all my messages to the government because they have my data anyways"

[deleted]
Post reply on HN