Live data from Hacker News

Reverse Engineering WhatsApp Web

github.com

51–60 of 127 posts

Re: Reverse Engineering WhatsApp Web

#51
post #4

Wouldn't it be better to simply start convincing your friends to use something more open, where you have choice of the client? It feels like solving the problem from the wrong angle…

Have you tried that?

Ends up with some friends throwing you a bone and downloading / registering for a new service. Some of them remember to keep it open. Some use it. The rest of their friends don't. But a few of them love you enough to use a special app just for you because you seem to care. <3

Re: Reverse Engineering WhatsApp Web

#52

Earlier quoted context omitted.

Just use telegram. Open source, native clients for every platform. No phone number necessary.

Open source client, as far as i know the server is still closed source. I suggest using Riot, preferrably self-hosted.

Not even that. They only dump the source code over the fence once in a while. Try to find the source code for the latest release of any one of the Telegram mobile clients. Good luck!

Re: Reverse Engineering WhatsApp Web

#53

I'm very hopeful this reverse engineering effort will enable the creation of a tool to export my conversations (WhatsApp can do email export, which let's be real, doesn't cut it for most cases). A point to those that support migrating to alternatives such as Signal. Signal is good, but far from great for a single reason: you need a phone number. This is very bad in necsec and reliability terms, my case: Reliability:…

This may sound like an advert, but it's not - I used "Backuptrans Android WhatsApp to iPhone Transfer for Mac" last year when I moved from Android to iPhone, and surprisingly it actually worked!

I could export all my Android (Nougat) messages and media, and restore it onto my iPhone (iOS 11).

It was a bit dodgy though - it asked me to install an old (custom?) APK first to export my messages, and the iPhone restore process looked like an actual iOS system restore..

Re: Reverse Engineering WhatsApp Web

#54
post #6
post #4

Wouldn't it be better to simply start convincing your friends to use something more open, where you have choice of the client? It feels like solving the problem from the wrong angle…

Better? Yes. Easier? No. Besides, what's more open, as usable and secure?

After playing around with federated XMPP (on my own server): XMPP with OMEMO is brilliant. No battery drain (Conversations and Astrachat tested on android), multi-client e2e encryption, even voice/video is possible. And, being federated, I finally own my identity.

Re: Reverse Engineering WhatsApp Web

#56
post #23

Earlier quoted context omitted.

I would like to use Signal, but I am forced to use Telegram for the same reason. (I have also to say that Telegram mac client is pretty awesome). It makes no sense to create a "secure" chat app, and then to force your users to use cellphones, which is the most unsafe technology I can imagine... Why this cellphone fetish?

Cellphones are far more safe than your computer - especially iPhones. All apps are run in a sandboxed environment and are vetted before being released. Further, the secure enclave is far better at protecting secrets than anything on a typical laptop/desktop machine.

Nonsense. Some adroid virus, like Triada, is a nightmare compared to nearly anything even on Windows.

Re: Reverse Engineering WhatsApp Web

#58
post #7
post #6

Earlier quoted context omitted.

Better? Yes. Easier? No. Besides, what's more open, as usable and secure?

Signal. It is at least as secure as Whats App by design, has pratically the same interface and also a Chrome-based desktop app that works untethered from the phone app.

Signal relies on GCM, and needs a smartphone app. I'm failing to see the win.

Re: Reverse Engineering WhatsApp Web

#60
Curious to know why they chose to require python in addition to node, wouldn't node with npmjs/yarn be sufficient and require less setup? Does python/pip provide any benefits here?
Post reply on HN