200
submitted 2 weeks ago by florencia to c/privacy@lemmy.ml
top 50 comments
sorted by: hot top controversial new old
[-] masterofn001@lemmy.ca 202 points 2 weeks ago
[-] commander@lemmy.world 49 points 2 weeks ago

The loophole in WhatsApp's end-to-end encryption is simple: The recipient of any WhatsApp message can flag it. Once flagged, the message is copied on the recipient's device and sent as a separate message to Facebook for review.

That practically applies to every form of digital communication. Sender/recipient has it on their end unencrypted and passes/leaks it on elsewhere

[-] masterofn001@lemmy.ca 35 points 2 weeks ago

Once a review ticket arrives in WhatsApp's system, it is fed automatically into a "reactive" queue for human contract workers to assess. AI algorithms also feed the ticket into "proactive" queues that process unencrypted metadata—including names and profile images of the user's groups, phone number, device fingerprinting, related Facebook and Instagram accounts, and more.

Does this also happen?

[-] Benjaben@lemmy.world 6 points 1 week ago
[-] masterofn001@lemmy.ca 4 points 1 week ago
[-] Benjaben@lemmy.world 8 points 1 week ago

Just indicating that the steps taken that you mentioned are far beyond what most people would imagine as expected behavior for encrypted messaging software. Assuming your quote was published somewhere, as being about WhatsApp. I might've misunderstood.

load more comments (3 replies)

The same FBI that keeps telling Congress end to end encryption needs to have legally mandated back doors in it?

[-] adarza@lemmy.ca 67 points 2 weeks ago* (last edited 2 weeks ago)

"our backdoors, not theirs"

(of course, they always fail to acknowledge the simple fact that "ours" becomes "everybody's")

[-] qprimed@lemmy.ml 8 points 1 week ago

holy shit! the FBI is communist?! cool, cool.

[-] florencia 18 points 2 weeks ago

The very same

[-] Fubarberry@sopuli.xyz 18 points 2 weeks ago

They want access, they just don't want china to have access. Of course, when you add a backdoor it's best to assume everyone will use it sooner or later.

[-] davel@lemmy.ml 25 points 2 weeks ago* (last edited 1 week ago)

☝️
If China’s access to your data were actually a high priority to the US security state, then they wouldn’t be installing these back doors. They’re much more interested in 1) accessing your data and 2) convincing you that China is your enemy.

The US security state isn’t interested your security, they’re interested in what the capitalists are interested in: imperialism and screwing over the working class.

[-] RvTV95XBeo@sh.itjust.works 14 points 1 week ago

Of course, when you add a backdoor it's best to assume everyone will use it sooner or later.

Its true!! I saw several really interesting documentaries about this phenomenon on PornHub

[-] QuazarOmega@lemy.lol 3 points 1 week ago

Wow, I didn't know the Git host is providing documentaries too now, sweet 😋

[-] brrt@sh.itjust.works 25 points 2 weeks ago

And then there is the kinds of people who cry about Signal dropping support for SMS.

[-] RubberElectrons@lemmy.world 29 points 2 weeks ago

Yeah, I'm one of em. I'm well aware it's not secure, but as a frontend, signal certainly was more customizable and pleasant to use even for just the few people I had to sms till I could convince to use signal.

[-] warm@kbin.earth 21 points 1 week ago

It was so much easier to convince people to use Signal when it had SMS support. I think while Signal needed to drop it, it wasn't the time yet.

[-] RubberElectrons@lemmy.world 15 points 1 week ago

I'm not convinced it ever should've. Make it obvious sms mode is in use, etc etc. But it was great to have everything in one place. One blocklist, great photo editing etc

[-] warm@kbin.earth 4 points 1 week ago

Maybe. For me the worst change they made was removing custom colours for my contacts.

[-] Broken@lemmy.ml 3 points 1 week ago

I agree that it helped with adoption. In a way I wish they still had it so I could get my text messaging family to use a messaging app instead.

The flip side was, if somebody tried signal and didn't like it and uninstalled it, then any SMS message to them from signal went to their signal account that they no longer had installed so they didn't get it. You had no way of knowing so it really sucked.

load more comments (1 replies)
[-] SkyNTP@lemmy.ml 8 points 1 week ago

I am one of those. I ditched Signal and went back to the stock sms app and adopted matrix. Haven't looked back since. The reality is that Signal dropping support for sms wasn't going to stop me from using SMS. For that, other people need to be convinced to stop using it at the same time. Signal didn't have nearly the market size needed to make that happen. And now that card is played, and nothing has changed. Signal is just another messaging app among hundreds. At least matrix offers a real paradigm shift.

load more comments (8 replies)
[-] UltraGiGaGigantic@lemmy.ml 7 points 1 week ago* (last edited 1 week ago)

How are you going to grow the user base without including the normies?

[-] capital@lemmy.world 6 points 1 week ago

That’s kind of like if iMessage dropped SMS support. Yeah, I know if it’s a green bubble it’s not encrypted. But I wouldn’t want them to just not allow it.

[-] Charger8232@lemmy.ml 22 points 1 week ago

So... they only warn people about how insecure texting is after someone else exploits it...

Abusive parents: "Only I get to beat my children!"

[-] Hirom@beehaw.org 15 points 1 week ago* (last edited 1 week ago)

The mobile standard setter, GSMA, and Google have said encryption will be coming to RCS, but there’s no firm date yet.

GSMA, please don't come up with yet another poorly designed encryption standard.

The IETF is already working on Messaging Layer Security (MLS), please work with IETF and adopt MLS. IETF have more experience and do a good job at designing secure protocols. And multiple organisations and services are already working on adapting MLS (Mozilla, Google, Matrix, Wire, ...)

[-] ReakDuck@lemmy.ml 2 points 1 week ago

Who said the Encryption is allowed to be secure?

[-] LovableSidekick@lemmy.world 14 points 1 week ago* (last edited 1 week ago)

If cyberterrorists really want to know who's gonna be late to my D&D game and what food we're having, I guess there's no way we're gonna stop 'em. I blame Kamala's weak campaign.

[-] lattrommi@lemmy.ml 13 points 1 week ago

Well, I'm stuck on a Verizon plan, so my SMS don't send anyways.

[-] unknown1234_5@kbin.earth 9 points 1 week ago

so, have you guys heard of matrix?

load more comments (10 replies)
[-] AnneVolin@lemmy.ml 7 points 1 week ago* (last edited 1 week ago)

US 2010: "We've created and incentivised this gigantic drag net of information based on insecure protocols, private partnership deals, FISA court orders, and outright black budget illegality"

US 2024: "Pweeze use encrypted communication (that we have vendor relations with or that we have backdoors in or that we built as a honey pot) because China can see what's happening in the drag net and they can leverage that information to compromise our idiot elites."

[-] Zerush@lemmy.ml 6 points 1 week ago* (last edited 1 week ago)

OK. then photos of steganographed kittens

load more comments (1 replies)
[-] dyathinkhesaurus@lemmy.world 5 points 1 week ago

I wonder what they would be saying if they'd been allowed to weaken encryption and back-door the fuck out of everything before the Salt Typhoon folks got involved.

[-] Zerush@lemmy.ml 4 points 1 week ago

Going back to the roots with the Finger Protocol.

load more comments
view more: next ›
this post was submitted on 04 Dec 2024
200 points (100.0% liked)

Privacy

32386 readers
129 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS