Re:NSO hacked WhatsApp to spy on top government officials at...
by _trampeltier on Friday November 01, 2019 @05:56AM
(#21417331)
I don't use WhatsApp. But if they have an official backdoor, then it's not really e2e encrypted. Until now I thought, at least the official statement was, WhatsApp is truly e2e encrypted. Just that.
Re:NSO hacked WhatsApp to spy on top government officials at...
by sandworm101 on Friday November 01, 2019 @06:01AM
(#21417353)
Maybe they are. But they would still have non-content timing, location and connection data. That is just as useful as message content.
Re:NSO hacked WhatsApp to spy on top government officials at...
by y4mi on Friday November 01, 2019 @08:59AM
(#21418204)
It can be end to end and
Encrypted and still have a backdoor.
I.e keeping a continuous web client active which the user isn't notified about
Re:NSO hacked WhatsApp to spy on top government officials at...
by codedokode on Friday November 01, 2019 @12:06PM
(#21420284)
Even with encryption, WhatsApp could provide users' contact lists, message send time and volume, IP addresses, phone numbers.
Having a phone number is almost same as having person's location and identity. That's why really secure messengers won't require a phone number.
Re:NSO hacked WhatsApp to spy on top government officials at...
by secfirstmd on Friday November 01, 2019 @07:29AM
(#21417713)
Isn't the fear more about a man-in-the-room attack rather than weaknesses in the e2e?
Re:NSO hacked WhatsApp to spy on top government officials at...
by guenthert on Friday November 01, 2019 @12:32PM
(#21420663)
The end-to-end refers there to the hand-held device, not the peers' brains. The backdoor will then simply be in the hand-held device, intercepting the data meant to be displayed by the WhatsApp application.
Re:NSO hacked WhatsApp to spy on top government officials at...
by paulcarroty on Friday November 01, 2019 @07:50AM
(#21417796)
> security-minded service like signal.
There's no security-minded service which use Google services.
Dont like it? Go with a security-minded service like signal. Or, better yet, something totally severless and open source.