Live data from Hacker News

Meta Shuts Down End-to-End Encryption for Instagram Messaging

pcmag.com

151–160 of 235 posts

Re: Meta Shuts Down End-to-End Encryption for Instagram Messaging

#151

> 'Very few people were opting in to end-to-end encrypted messaging in DMs,' Meta says. Then why didn't you make the opt-in default like Signal and WhatsApp? :-)

Instagram wasn't set up this way. If you install it on a new phone or open it in-browser, you aren't expected to give it a recovery key to get your DMs back. They did add e2ee for FB Messenger, and it was very clunky besides not being secure at all (6-digit numeric pin).

Re: Meta Shuts Down End-to-End Encryption for Instagram Messaging

#152

> 'Very few people were opting in to end-to-end encrypted messaging in DMs,' Meta says. Then why didn't you make the opt-in default like Signal and WhatsApp? :-)

i never even knew they had e2e available, so they cannot have been too serious about people opting in.

a shame that they now have to shut it off because people didn't use something they didn't know existed /s

Re: Meta Shuts Down End-to-End Encryption for Instagram Messaging

#153

I'm not sure if this meets the bar for substantive and thoughtful discussion, but this kind of corporate cowardice, enforced by unelected bureaucrats standing at the bully pulpit is only going to get worse as the noose tightens on the open web. The combination of hardware attestation and walled garden "app stores" is the end goal of most policymakers in this area, and it happens to suit the monopolists in Google and…

Do people expect that Instagram can't read their Instagram private messages? I don't think people expect that. And E2EE is not nearly as cheap as the HN crowd likes to pretend—how do those devices get those keys if not through a central service? Especially if one of them is a web browser?

Exactly. E2EE comes with UX consequences that you can't just bolt on later. There might be something to be outraged about, but this alone isn't it.

Re: Meta Shuts Down End-to-End Encryption for Instagram Messaging

#154

People here like it, but end-to-end encryption is an objectively worse user experience for people that don't care about that feature

How is it a worse experience? It's ridiculously simple: The app sends a public key to the person you're talking to. The end user doesn't even need to notice it. What am I missing here?

[deleted]

Re: Meta Shuts Down End-to-End Encryption for Instagram Messaging

#156

I'm not sure the value of end to end encryption for proprietary application chats. For emails and SMS messages, your messages are being sent between different multiple servers on the open internet and it opens you up to spying, but end to end encryption on instagram is only protecting your chats from Meta. I find the end to end encryption on Facebook to be detrimental to ease of use, because you always have to use a…

FB Messenger was nice and simple before they added the clunky e2ee feature, and it's not even secure cause it's just 6 digits of entropy.

WhatsApp e2ee is solid. It's painful if you have multiple devices, but it was designed for people to use on just one phone in the first place, not necessarily caring about chat history.

Re: Meta Shuts Down End-to-End Encryption for Instagram Messaging

#157
post #142

Earlier quoted context omitted.

It doesn't have to be, but that's not really an argument for claiming it isn't. Considering how deeply embedded privacy violation is in Meta's corporate DNA, is there any reason other than hilariously naïve and inexplicably charitable, hypothetical speculation to believe this is not motivated by more privacy violation for profit, just like literally every single thing Meta has done in the entire history of the compan…

were you in that room where Adam was making that call? No? didn't think so... Just give people some benefit of doubt. There're much simpler ways to explain certain things that suspecting some universal evil in every move...

not if it is one of the companies famous for going the extra mile of being "evil" / a corporate shit hole stealing every thought you ever have to better sell you stuff you don't need

Re: Meta Shuts Down End-to-End Encryption for Instagram Messaging

#158

Earlier quoted context omitted.

Your links say that Apple complies with the laws of major countries. Which companies don’t do that?

Signal is one example. Their values are simply not compatible with what the Chinese government wants (local data storage, key access, etc.). Instead of complying and putting their users' privacy at risk, they accepted the ban. Google, out of all companies, also decided to partially walk away from the Chinese market in 2010 over censorship concerns [1]. Nobody is forcing Apple to do business in China, or the UK. They…

Google also chooses to be a US company even thought the US is supporting a genocide and is doing an illegal war against a foreign country (again)

You could argue Signal is the most "moral" here, but even then they don't really allow self-hosted backends and refuse to open-source their setup

Re: Meta Shuts Down End-to-End Encryption for Instagram Messaging

#159
post #48

I worked at Instagram during this (not at the EeE, but saw enough of it, to see that it was a mess). I think the reason for dropping it, is more of a technical issue and user experience, rather than a 'desire' issue or company will. From my understanding, Zuck wanted this. The implementation was a mess, and folks have different expectations about messages to appear at every platform. Having messages disappear between…

I don't know all the details because I'm not a cryptologist, but Wire messenger seemed to have solved this in a way that wasn't annoying. I haven't used it since they pivoted, so can't speak much to its implementation, but I remember it working seamlessly across devices.

[deleted]

Re: Meta Shuts Down End-to-End Encryption for Instagram Messaging

#160
post #48

I worked at Instagram during this (not at the EeE, but saw enough of it, to see that it was a mess). I think the reason for dropping it, is more of a technical issue and user experience, rather than a 'desire' issue or company will. From my understanding, Zuck wanted this. The implementation was a mess, and folks have different expectations about messages to appear at every platform. Having messages disappear between…

This is exactly what I expected, and it's good to hear from someone with experience.
Post reply on HN