News for hackers. Stuff that matters.
Re:Facebook crawls links in PDFs you send in Messenger by SlowRobotAhead on Saturday October 26, 2019 @12:36PM (#21364653)
Because the key, nonce, result, and keyshare or Diffie-Hellman exchange are all done inside of messenger... why would anyone believe this is legit?

It might be, IDK, but if it’s all inside their system, how could you audit that?

Re:Facebook crawls links in PDFs you send in Messenger by heynk on Saturday October 26, 2019 @12:55PM (#21364756)
Couldn't you sort of test this by enabling E2E, sending a link that was previously blocked, and seeing if it is still blocked? That would at least show some sign if it's all a sham or not.
Re:Facebook crawls links in PDFs you send in Messenger by jacquesm on Saturday October 26, 2019 @01:07PM (#21364844)
That would guarantee absolutely nothing.
Re:Facebook crawls links in PDFs you send in Messenger by 0xffff2 on Saturday October 26, 2019 @01:11PM (#21364870)
If the link was still blocked it would guarantee that Facebook is still eavesdropping.
Re:Facebook crawls links in PDFs you send in Messenger by SlowRobotAhead on Saturday October 26, 2019 @01:29PM (#21365001)
Other guy was right. Think about this easy scenario

  If (E2E_ENABLED) {

  SkipCrawler();  

  SkipContentChecks();  

}
Re:Facebook crawls links in PDFs you send in Messenger by BubRoss on Saturday October 26, 2019 @02:54PM (#21365492)
Again, it isn't to prove the encryption works, it is only a test that could prove that it doesn't work.
Re:Facebook crawls links in PDFs you send in Messenger by SlowRobotAhead on Saturday October 26, 2019 @03:51PM (#21365804)
Ah, yea, I got the argument backwards. I thought he was saying if content wasn’t blocked that it proved encryption worked. Can’t prove the negative.
Re:Facebook crawls links in PDFs you send in Messenger by heynk on Saturday October 26, 2019 @02:12PM (#21365259)
Yes, totally understood. I am just thinking in line with a different response that this could be an easy way to prove if they’re still snooping - not a guarantee that they aren’t.
Re:Facebook crawls links in PDFs you send in Messenger by cmroanirgo on Saturday October 26, 2019 @03:25PM (#21365650)
Agreed. There is nothing stopping the sender's app from parsing and reporting URLs in any and all content before e2e occurs... Even to FB servers
Re:Facebook crawls links in PDFs you send in Messenger by wskinner on Saturday October 26, 2019 @03:15PM (#21365590)
This argument applies to any messenger app that claims e2e encryption. You could build signal from source. But how much do you trust your compiler?
Re:Facebook crawls links in PDFs you send in Messenger by gbear605 on Saturday October 26, 2019 @03:26PM (#21365661)
I trust my compiler more than Facebook
Re:Facebook crawls links in PDFs you send in Messenger by braythwayt on Saturday October 26, 2019 @09:28PM (#21367372)
For any value of “compiler.”
Re:Facebook crawls links in PDFs you send in Messenger by Avamander on Sunday October 27, 2019 @07:44PM (#21373217)
Can you actually use Signal built from source with official servers? Anyways, we have open-source chat platforms that have been audited by independent third parties, on one side, and closed-source mergacorporations' unaudited chat software on the other. Point being, why would you argue for using the bigger "evil"?