Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Reverse Engineering WhatsApp Web

github.com

Post reply on HN
Print view View original

21–30 of 127 posts

Re: Reverse Engineering WhatsApp Web

#21

Post by salqadri »

scardine wrote: post #14
salqadri wrote: post #8

Wow that's impressive. But I would imagine WhatsApp/Facebook can just change their protocol at any time since it is easy to redeploy a new version of the WhatsApp Web client, thus breaking any 3p clients built on the original protocol. That would require yet another reverse engineering effort that can take a while. And by the time its reverse engineered again, they can yet again change the protocol. So the only relia…

They have a closed beta program for an "Enterprise" version that is supposed to have an API. Seems like a good way to monetize.

On really? In that case they definitely would not want to allow this project to cannibalize their revenue. On the other hand, it makes it harder for them to change their APIs then as it impacts clients not directly under their control.

Re: Reverse Engineering WhatsApp Web

#22

Post by dingo_bat »

gustavmarwin wrote: post #18

I'm very hopeful this reverse engineering effort will enable the creation of a tool to export my conversations (WhatsApp can do email export, which let's be real, doesn't cut it for most cases). A point to those that support migrating to alternatives such as Signal. Signal is good, but far from great for a single reason: you need a phone number. This is very bad in necsec and reliability terms, my case: Reliability:…

Just use telegram. Open source, native clients for every platform. No phone number necessary.

Re: Reverse Engineering WhatsApp Web

#23

Post by kome »

dingo_bat wrote: post #22
gustavmarwin wrote: post #18

I'm very hopeful this reverse engineering effort will enable the creation of a tool to export my conversations (WhatsApp can do email export, which let's be real, doesn't cut it for most cases). A point to those that support migrating to alternatives such as Signal. Signal is good, but far from great for a single reason: you need a phone number. This is very bad in necsec and reliability terms, my case: Reliability:…

Just use telegram. Open source, native clients for every platform. No phone number necessary.

I would like to use Signal, but I am forced to use Telegram for the same reason. (I have also to say that Telegram mac client is pretty awesome).

It makes no sense to create a "secure" chat app, and then to force your users to use cellphones, which is the most unsafe technology I can imagine... Why this cellphone fetish?

Re: Reverse Engineering WhatsApp Web

#25

Post by hazelnut »

salqadri wrote: post #8

Wow that's impressive. But I would imagine WhatsApp/Facebook can just change their protocol at any time since it is easy to redeploy a new version of the WhatsApp Web client, thus breaking any 3p clients built on the original protocol. That would require yet another reverse engineering effort that can take a while. And by the time its reverse engineered again, they can yet again change the protocol. So the only relia…

they still have to support older clients. so it is not that easy to just change the protocol.

Re: Reverse Engineering WhatsApp Web

#26

Post by saurik »

hazelnut wrote: post #25
salqadri wrote: post #8

Wow that's impressive. But I would imagine WhatsApp/Facebook can just change their protocol at any time since it is easy to redeploy a new version of the WhatsApp Web client, thus breaking any 3p clients built on the original protocol. That would require yet another reverse engineering effort that can take a while. And by the time its reverse engineered again, they can yet again change the protocol. So the only relia…

they still have to support older clients. so it is not that easy to just change the protocol.

No, because it is a website.

Re: Reverse Engineering WhatsApp Web

#27

Post by tomcooks »

dingo_bat wrote: post #22
gustavmarwin wrote: post #18

I'm very hopeful this reverse engineering effort will enable the creation of a tool to export my conversations (WhatsApp can do email export, which let's be real, doesn't cut it for most cases). A point to those that support migrating to alternatives such as Signal. Signal is good, but far from great for a single reason: you need a phone number. This is very bad in necsec and reliability terms, my case: Reliability:…

Just use telegram. Open source, native clients for every platform. No phone number necessary.

Open source client, as far as i know the server is still closed source.

I suggest using Riot, preferrably self-hosted.

Re: Reverse Engineering WhatsApp Web

#28

Post by tomcooks »

StavrosK wrote: post #6
ktosobcy wrote: post #4

Wouldn't it be better to simply start convincing your friends to use something more open, where you have choice of the client? It feels like solving the problem from the wrong angle…

Better? Yes. Easier? No. Besides, what's more open, as usable and secure?

[Riot](https://riot.im), native mobile clients for all platforms plus web client.

It's self hostable or you can just login on their Matrix server.

Ah, and no phone number needed.

Re: Reverse Engineering WhatsApp Web

#29

Post by fmntf »

dingo_bat wrote: post #22
gustavmarwin wrote: post #18

I'm very hopeful this reverse engineering effort will enable the creation of a tool to export my conversations (WhatsApp can do email export, which let's be real, doesn't cut it for most cases). A point to those that support migrating to alternatives such as Signal. Signal is good, but far from great for a single reason: you need a phone number. This is very bad in necsec and reliability terms, my case: Reliability:…

Just use telegram. Open source, native clients for every platform. No phone number necessary.

"No phone number necessary" is only true if Google Voice is available in your country. A phone number is necessary to create a Telegram account.

Re: Reverse Engineering WhatsApp Web

#30

Post by l2dy »

dingo_bat wrote: post #22
gustavmarwin wrote: post #18

I'm very hopeful this reverse engineering effort will enable the creation of a tool to export my conversations (WhatsApp can do email export, which let's be real, doesn't cut it for most cases). A point to those that support migrating to alternatives such as Signal. Signal is good, but far from great for a single reason: you need a phone number. This is very bad in necsec and reliability terms, my case: Reliability:…

Just use telegram. Open source, native clients for every platform. No phone number necessary.

> No phone number necessary.

How did you sign in without a phone number? It's not possible on https://web.telegram.org/#/login.

Post reply on HN