Re:Facebook, WhatsApp Will Have to Share Messages With U.K.?
by brenden2 on Saturday September 28, 2019 @11:40AM
(#21100944)
Yep, the chat log backup basically renders WhatsApp completely insecure. They also constantly nag you inside the app to enable it. This is how they caught Michael Cohen (and presumably others). Unfortunately Signal does it, too.
Re:Facebook, WhatsApp Will Have to Share Messages With U.K.?
by gsich on Saturday September 28, 2019 @11:44AM
(#21100979)
Signals backups are encrypted.
Re:Facebook, WhatsApp Will Have to Share Messages With U.K.?
by vbezhenar on Saturday September 28, 2019 @02:17PM
(#21101945)
How are they restored? Is it password-encrypted?
Re:Facebook, WhatsApp Will Have to Share Messages With U.K.?
by henryaj on Saturday September 28, 2019 @03:49PM
(#21102464)
Yes, you're given a random password when you enable backups that you need to use when restoring. They don't get uploaded to the cloud. On iOS there's no backup feature at all AFAIK.
Re:Facebook, WhatsApp Will Have to Share Messages With U.K.?
by gsich on Saturday September 28, 2019 @02:32PM
(#21102040)
you copy them to your new phone. yes.
Re:Facebook, WhatsApp Will Have to Share Messages With U.K.?
by uoylj on Saturday September 28, 2019 @12:21PM
(#21101211)
And local.. whatsapp tries to get you to send unencrypted backups to google drive.
Re:Facebook, WhatsApp Will Have to Share Messages With U.K.?
by commandersaki on Sunday September 29, 2019 @05:49AM
(#21106132)
At least on iOS - whatsapp doesn't seem to nag about backups (i don't think i've ever enabled it), but you can do a local backup/restore if you replace handset. Signal encrypts your chats locally (but not binary blobs/video/images) but they cannot be backed up and restored locally.
Re:Facebook, WhatsApp Will Have to Share Messages With U.K.?
by thekyle on Saturday September 28, 2019 @01:30PM
(#21101627)
I don't think that Signal uploads the backups to the cloud though. It seems like they're stored on device and encrypted.
Re:Facebook, WhatsApp Will Have to Share Messages With U.K.?
by sschueller on Saturday September 28, 2019 @11:41AM
(#21100951)
Attack or cooperation with custom soft keyboard makers is much easier. It may only give you one side of the conversation but no ones seems to care if those are secure. As long as they do a good job of spell checking.
Re:Facebook, WhatsApp Will Have to Share Messages With U.K.?
by samsonradu on Saturday September 28, 2019 @07:01PM
(#21103616)
Having a 'secure' conversation definitely implies trust in Google/Apple, regardless of the Whatsapp binary behaving flawlessly (e2e encryption, solid PRNG, no logs etc.)
They could indeed serve you a different binary from the app-store. "Do you think that's Whatsapp you're using?"
Re:Facebook, WhatsApp Will Have to Share Messages With U.K.?
by londons_explore on Sunday September 29, 2019 @05:50AM
(#21106138)
Trust in the OS made by Google/Apple is slightly different from trust in the ability of Google/Apple to keep your data stored on their servers secure against nation states.
I have much more trust in the former than the latter.
The fly in the ointment is the client might have additional functionality to leak the e2e encryption key. That is far harder to find, but if it's use were widespread, it would be found by researchers.
The whole point is moot though - whatsapp is designed to (by default) upload cleartext chat logs to google/apple servers. Since all chats have 2+ recipients, the conversation is only safe from snooping if nobody in the chat has backup enabled, which is unlikely.