Live data from Hacker News

E2E encrypted messaging on Instagram will no longer be supported after 8 May

help.instagram.com

211–220 of 220 posts

Re: E2E encrypted messaging on Instagram will no longer be supported after 8 May

#211

Isn't this actually improving safety by openly admitting how things always were in practice? Any e2e encryption provided by the same entity who fully controls both the blackbox clients, and the server in between, is just a security theatre that they can selectively bypass anytime with very little risk of detection. Not really much better than simple client to server encryption. Truly safe e2e requires open source cli…

I don't disagree, but I think there is a distinction between "everything is e2ee, but specific conversations may be MiTM without detection" and "nothing is e2ee and can be retrospectively inspected at will" that goes a little beyond security theatre - makes it more analogous to old fashioned wiretaps in my mind. Obviously it involves trust that it isn't actually "we say it's e2ee but actually we also MiTM every conve…

Even with closed source clients, MitMing every conversation would likely be detected by some academic soon enough - various people take memory dumps of clients etc and someone would flag it up soon enough.

Re: E2E encrypted messaging on Instagram will no longer be supported after 8 May

#212

Isn't this actually improving safety by openly admitting how things always were in practice? Any e2e encryption provided by the same entity who fully controls both the blackbox clients, and the server in between, is just a security theatre that they can selectively bypass anytime with very little risk of detection. Not really much better than simple client to server encryption. Truly safe e2e requires open source cli…

One of the scary things is that not even this really works. Ignoring supply chain attacks, most people treat any client as effectively black box. When was the last time you read through the code of a messaging app? How do you know its safe? Maybe _you_ read through it, but 99% of people don't.

And even if you did read through every line of code, it is super easy to hide a deliberate bug which entirely breaks encryption.

Eg. The Debian random number generator bug.

Re: E2E encrypted messaging on Instagram will no longer be supported after 8 May

#213
post #126

The only reason I can think of for this change is governmental pressure. I don’t see how it benefits the platform itself (nor its users).

I can think of some. Less code complexity to support a feature that didn't work properly and nobody was using? More ability to detect spam?

Wasn't it automatically used when it was implemented?

Re: E2E encrypted messaging on Instagram will no longer be supported after 8 May

#214

Isn't this actually improving safety by openly admitting how things always were in practice? Any e2e encryption provided by the same entity who fully controls both the blackbox clients, and the server in between, is just a security theatre that they can selectively bypass anytime with very little risk of detection. Not really much better than simple client to server encryption. Truly safe e2e requires open source cli…

>Any e2e encryption provided by the same entity who fully controls both the blackbox clients, and the server in between, is just a security theatre that they can selectively bypass anytime with very little risk of detection. Not really much better than simple client to server encryption.

You are no more capable of spotting a deliberately concealed backdoor in a binary than in source code, there's simply no meaningful difference.

Re: E2E encrypted messaging on Instagram will no longer be supported after 8 May

#215
post #152
post #102

Earlier quoted context omitted.

How do they know your ideology? Are they scraping your social media or running sentiment analysis on your customer service chats?

It’s likely some customer segmentation label generated through PCA or some other clustering approach. The qualifying criteria is probably just having picked an offer for renewable-sourced energy in the past, indicating that it has some importance to you. So you will be given more green energy offers in future. Every company segments its customer base this way for marketing. Sometimes it’s even useful.

I see... so maybe I should use PCA to give them the most uncorrelated response to all of their clusters as possible just to mess with them.

Re: E2E encrypted messaging on Instagram will no longer be supported after 8 May

#216
post #133

Earlier quoted context omitted.

I can think of a few reasons why a company built on profiling (and advertising to) user interests might be interested in the private conversations of their users

In that case, why introduce the feature in the first place?

[dead]

Re: E2E encrypted messaging on Instagram will no longer be supported after 8 May

#217
post #209

Earlier quoted context omitted.

Kindly read point number 2 slowly. There are two definitions: a) Personal Data and b) Emergency Situations What is an emergency situation and how can a car determine it is one? These are "smart" cars which aren't nowadays smart enough to process all your data locally, so that data is sent to servers elsewhere which process if either points a) or b) apply. It is your choice to believe that voice data is ever deleted o…

Emergency situations are defined by two situations: severe accidents and manual press of the button. Article 6 covers the data being sent, Article 5 covers the manufacturer's obligations. Your audio during the accident and your last three locations may leak, but the eCall system is not designed for a permanent phone-home system. If I remember correctly, you can't even use the eCall SIM for tracking as that'd encourag…

That is assuming the eCall system is used at all.

I stated that the microphone and network access installed on modern car for emergency situations can and will be used 24/7 when deemed "necessary" for your "security".

Different things, same hardware.

Re: E2E encrypted messaging on Instagram will no longer be supported after 8 May

#218
post #13

just waiting on whatsapp to rug pull as well & then bye bye privacy & meta from my life

Wouldn't bye bye meta be hello privacy into your life?

To be online is gonna just become pointless. Only literal need is for news or payments.

NSFW stuff doesn’t need the internet anymore. Critique of regimes aren’t safe either so being online is just a crutch and thats so sad.

Re: E2E encrypted messaging on Instagram will no longer be supported after 8 May

#219

It could be a move to have parity with TikTok, where they claim it’s for safety reasons. I’ve been seeing advertisements for Instagram touting their child/teen protection features. Seems like they’re really trying to beat the allegations that Instagram is bad for children’s health. https://news.ycombinator.com/item?id=47241817

How these protections are working when I get served literal porn every couple of shorts on Instagram?

Hard to say other than usually the feed is tailored to the user's interests, or so they say ;)

Re: E2E encrypted messaging on Instagram will no longer be supported after 8 May

#220
post #33
post #26

Earlier quoted context omitted.

They never did this for user privacy, and yes I think you're spot on. This was just to remove liability. Now it just costs them the data and development cost to maintain. Any remaining problems they'll throw some crappy AI moderator at to fix.

Not hard to be right about this when you worked there at the time ;)

[dead]
Post reply on HN