News for hackers. Stuff that matters.

A comment on Crime Shouldn't Pay: Why Big Tech Executives Should Face Jail. Parent comment

Re:Crime Shouldn't Pay: Why Big Tech Executives Should Face ... by Rebelgecko on Sunday December 20, 2020 @01:47PM (#25488539)
As a disclaimer, I work at Google but have no hidden insights here

I haven't used Whatsapp but I would imagine that exporting your data to Drive is an activity that doesn't happen unless the user initiates it. I find manual backups to be a lot less insidious than the implication that Facebook has built a backdoor for Google that breaks Whatsapp's end to end encryption

[ Parent | on HN ]
Re:Crime Shouldn't Pay: Why Big Tech Executives Should Face ... by pmoriarty on Sunday December 20, 2020 @02:32PM (#25488873)
"I find manual backups to be a lot less insidious than the implication that Facebook has built a backdoor for Google that breaks Whatsapp's end to end encryption"

If the backup process makes it crystal clear to the user that by making the backup Google will be able to read the user's messages, then it's fine.

Otherwise the users might mistakenly think their messages are still private.

[ Parent | on HN ]
Re:Crime Shouldn't Pay: Why Big Tech Executives Should Face ... by ac29 on Sunday December 20, 2020 @05:38PM (#25490261)
Backups are automatic, but opt-in. Unfortunately, you cant opt-out from your contacts saving your shared chat history AFAIK, so even if you dont use backups, there may be an unencrypted copy of your messages anyway.
[ Parent | on HN ]
Re:Crime Shouldn't Pay: Why Big Tech Executives Should Face ... by samoa42 on Monday December 21, 2020 @02:31AM (#25492861)
yep, chances are that most whatsapp groups contain at least one person the uses the google drive backup.
[ Parent | on HN ]
Re:Crime Shouldn't Pay: Why Big Tech Executives Should Face ... by africanboy on Sunday December 20, 2020 @02:06PM (#25488683)
True, users have to enable Google Drive backups, but they are tied to the user's phone number and

> WhatsApp backups no longer count against your Google Drive storage quota

So I imagine there is some kind of (paid?) agreement between FB and Google to keep them free.

I don't doubt that the content of the messages stays secret, but there is a lot of metadata that can be inferred by simply tying a phone number and the size of the backup (and deltas) to a user's email.

[ Parent | on HN ]