News for hackers. Stuff that matters.
Re:Annoyed at crypto, Brazilian judge orders mobile carriers... by ucy on Tuesday July 19, 2016 @04:51PM (#12124796)
Brazilian here http://jota.uol.com.br/justica-rj-determina-novo-bloqueio-wh... "Em verdade, o Juízo requer, apenas, a desabilitação da chave de criptografia, com a interceptação do fluxo de dados, com o desvio em tempo real em uma das formas sugeridas pelo MP, além do encaminhamento das mensagens já recebidas pelo usuário e ainda não criptografadas, ou seja, as mensagens trocadas deverão ser desviadas em tempo real (na forma que se dá com a interceptação de conversações telefônicas), antes de implementada a criptografia."

So, a judge required Whatsapp to put a backdoor to realtime wiretap some users before the payload is encrypted. I personally dont think Whatsapp should comply.

Whatsapp isnt secure, anyway, the default config is to store all the messages and the key on icloud or google. Also, the server knows your contact list, (and bans you if you dont sync), and someone could tap your wifi to get your contact list.

The judges here are annoyed that the lawyers requested info that is under a gag order, and that they answered in English, and that Facebook, who has a local office plays dumb and insists that "Whatsapp is out of my jurisdiction" when Brazil has the 2nd bigger userbase of the app. They are hitting them where it hurts - blocking 7 billion usd of their assets. http://link.estadao.com.br/noticias/empresas,justica-brasile...

Re:Annoyed at crypto, Brazilian judge orders mobile carriers... by eggie on Tuesday July 19, 2016 @05:35PM (#12125113)
> Also, the server knows your contact list, (and bans you if you dont sync), and someone could tap your wifi to get your contact list.

Wouldn't they also have a contact log for each user?

That plus the contact list is a pretty nice chunk of data for use by their parent company.

And also, it would surely be useful for law enforcement. Has it been shared with the courts?