Re:“Why Using WhatsApp Is Dangerous“
by joshuaissac on Friday January 31, 2020 @08:02AM
(#22201268)
Even if they did, it would just mean that Facebook (WhatsApp's parent company) could now see your messages, but that is still no worse than the default Telegram setting, which guarantees that the company will be able to decrypt your messages. And what prevents Telegram from tampering with their own end-to-end encryption for the binary they upload to app stores? Hardly anyone compiles their own apps if they can download it from a convenient app store instead.
[ Parent
| on HN ]
Telegram clients are open source and have reproducible builds. There is so much FUD being spread in the comments here which could probably be resolved by sticking your HN comment directly into your search engine of choice.
Re:“Why Using WhatsApp Is Dangerous“
by joshuaissac on Friday January 31, 2020 @10:28AM
(#22202430)
They started having reproducible builds since the start of this month, when they released v5.13, and I admit that I had not checked to see if it had changed since the last time I looked.
However, this still lets Telegram decrypt people's messages (on the default setting), which makes it less secure than WhatsApp and Signal.
The article itself is riddled with FUD about WhatsApp, and the author has written similar FUD/unfounded claims before.
1. https://www.independent.co.uk/life-style/gadgets-and-tech/ne...
2. https://telegra.ph/Why-WhatsApp-Will-Never-Be-Secure-05-15
Re:“Why Using WhatsApp Is Dangerous“
by dancemethis1 on Friday January 31, 2020 @12:54PM
(#22203758)
FUD "against" proprietary software is pretty much the "reverse racism" of technology.
Again, there is no proof OpenWhisper wasn't tampered with. It'd take WhatsApp becoming Free Software and having independent audits to be reliable as a communications platform. Suspiscion is but a matter of survival, and chances will continue to be usually against the most vulnerable party: the users.
Why would it need to be Free? Surely a license for modifying the code has exactly nothing to do with being able to audit it. They could distribute the source in a different manner if you really really really need to be able to see it in order to audit it (professionals don't).