31–40 of 41 posts
Earlier quoted context omitted.
Same here. I think so too. It was validated by OpenWhisper systems.
I can’t tell if you are being sarcastic, but I sure hope that you are.
Earlier quoted context omitted.
If someone other than sender or recipient can read messages -- it's not E2E.
By your logic signal is not e2e because I can copy a message from a friend and post it here.
so you can report a message thread to fb for abuse and then contractors check the messages to verify for said abuse. how is this news? it's the equivalent of taking a screenshot of a whatsapp thread and reporting that, doesn't affect e2e encrpytion in any way.
But why are we desensitized to move on with life and letting a company lie about what their product offers? Isn’t there a law somewhere about fake claims? I’m sure it’s somewhere in the policies but if a bread company said they were gluten free and they weren’t, they would be in deep shit no?
Are people really unaware that encryption doesn't limit the information they send to only ever be viewed by the intended recipient? That's not how and never has been how encryption works, it's not a mission impossible letter that self destructs.
The point of E2E encryption is that you trust a recipient and don't trust the medium data is sent through to the recipient. Once the recipient has the information, how well you assessed your trust in the recipient is what matters regarding the security of the information you sent. Nothing has ever prevented the recipient from breaking that trust and sharing information sent to them.
There are of course ways of reducing access to the recipient of the information through a specific technology (view once, time expirations, "self destruction", highly controlled viewing areas, etc), making it more difficult for the recipient to "proove" you sent the information and show the information relying more on the recipients word, but even that has never been that secure (Snapchat is a simple example of such).
> A Facebook representative told Insider that it allows users to report abuse, and those reports are then reviewed by contractors. When a user reports abuse, WhatsApp moderators are sent "the most recent messages sent to you by the reported user or group, according to WhatsApp's FAQ.
> WhatsApp is founded on so-called "end-to-end" encryption, which means that messages are scrambled before being sent and only unscrambled when they're received by the intended user. But when a user reports abuse, unencrypted versions of the message are sent to WhatsApp's moderation contractors, ProPublica reports.
Earlier quoted context omitted.
If someone other than sender or recipient can read messages -- it's not E2E.
By your logic signal is not e2e because I can copy a message from a friend and post it here.
My question is whether that functionality can be triggered remotely (rather than a user creating an unencrypted message digest and sending it to Facebook)
I thought WhatsApp is end to end encrypted, no?! The article is written confusingly. It looked as if Facebook has private keys, and WhatsApp is not end to end encrypted. But considering this: >> Those contractors, which Facebook acknowledges, reportedly spend their days sifting through content that WhatsApp users and the service's own algorithms flag. Does Facebook use automated tools and perform “Client-side Scannin…
Same here. I think so too. It was validated by OpenWhisper systems.
Earlier quoted context omitted.
I can’t tell if you are being sarcastic, but I sure hope that you are.
https://signal.org/blog/whatsapp/ they had a business relationship for at least two years.
Earlier quoted context omitted.
If someone other than sender or recipient can read messages -- it's not E2E.
I think you're grasping the wrong end of the stick. If someone reports you, they (the people receiving the report) will be able to read the messages. This is the same if you use iMessage, Signal or any other system. (ie you take your phone to the police and show them the messages, they will see your messages, obviously.) The key difference is that facebook has a button to report the message to them.
Facebook is not a recipient and therefore should not be able to read e2e messages (that are not directed to them)
Edit: I just read that the reporting process includes sending unencrypted messages to WA as part of the report. So indeed the whole story is moot.