WhatsApp backdoor allows snooping on encrypted messages
theguardian.com
WhatsApp backdoor allows snooping on encrypted messages
1–10 of 334 posts
Re: WhatsApp backdoor allows snooping on encrypted messages
#2> WhatsApp has the ability to force the generation of new encryption keys for offline users, unbeknown to the sender and recipient of the messages, and to make the sender re-encrypt messages with new keys and send them again for any messages that have not been marked as delivered.
It's worth noting as the article says, that this is built on top of the Signal protocol. In Signal, a similar situation with a user changing key offline will result in failure of delivery. Within WhatsApp under Settings>Account>Security there is an option to Show Security Notifications which will notify you if a users key has changed.
Re: WhatsApp backdoor allows snooping on encrypted messages
#3[1] https://tobi.rocks/2016/04/whats-app-retransmission-vulnerab...
Re: WhatsApp backdoor allows snooping on encrypted messages
#4This is why people should try and use Signal instead of WhatsApp. You can't trust Facebook to care about your privacy.
Re: WhatsApp backdoor allows snooping on encrypted messages
#5meh.
Re: WhatsApp backdoor allows snooping on encrypted messages
#6Re: WhatsApp backdoor allows snooping on encrypted messages
#7Re: WhatsApp backdoor allows snooping on encrypted messages
#8"Asked to comment specifically on whether Facebook/WhatApp had accessed users’ messages and whether it had done so at the request of government agencies or other third parties, it directed the Guardian to its site that details aggregate data on government requests by country." This is why people should try and use Signal instead of WhatsApp. You can't trust Facebook to care about your privacy.
If you think Google is more trustworthy than Facebook, sure go ahead and just use Hangouts or whatever.
We cant have nice good encryption and safe communication when geeks push this Signal onto unsuspecting users, when the real option is to keep improving Tox.Chat and bitmessage.
Re: WhatsApp backdoor allows snooping on encrypted messages
#9But if whatsapp owns the code, they don't need a backdoor. They can simply push an update that sends a copy of the msg to whatever server they may like.
Re: WhatsApp backdoor allows snooping on encrypted messages
#10I still use it. Lock in effect. But I never would have trusted their encryption nearly enough to send anything sensitive.