News for hackers. Stuff that matters.

A comment on If you care about user privacy, don’t use Facebook JavaScript SDK. Parent comment

Re:If you care about user privacy, don’t use Facebook JavaSc... by iudqnolq on Monday November 25, 2019 @04:16PM (#21632904)
> WhatsApp calls and messages were used by Facebook.

If that's true that would be extremely serious, given that Whatsapp promises end-to-end encryption

> WhatsApp end-to-end encryption ensures only you and the person you're communicating with can read what's sent, and nobody in between, not even WhatsApp. Your messages are secured with locks, and only the recipient and you have the special keys needed to unlock and read your messages. For added protection, every message you send has an unique lock and key. All of this happens automatically: No need to turn on settings or set up special secret chats to secure your messages.

> Important: End-to-end encryption is always activated. There's no way to turn off end-to-end encryption.

https://faq.whatsapp.com/general/28030015/

Source please?

[ Parent | on HN ]
Re:If you care about user privacy, don’t use Facebook JavaSc... by StreamBright on Tuesday November 26, 2019 @05:02AM (#21636920)
https://www.wired.com/story/whatsapp-security-flaws-encrypti...
[ Parent | on HN ]
Re:If you care about user privacy, don’t use Facebook JavaSc... by iudqnolq on Tuesday November 26, 2019 @10:19AM (#21638972)
That's a serious issue I wasn't aware of. Do note however that for this attack to work you have to not notice a user you don't know added to your group chat. Nevertheless, this is much more serious than I knew.
[ Parent | on HN ]