News for hackers. Stuff that matters.

A comment on Google have declared Droidscript is malware. Parent comment

Re:Google have declared Droidscript is malware by arp242 on Tuesday April 27, 2021 @01:44PM (#26959097)
"Not being on the web" doesn't seem like a huge footgun. There are probably more people with a mobile phone and no traditional computer than the other way around, especially if you go outside of the US and Europe.

Revolut, Grab, Gojek, Tinder, WhatsApp, and many more are all successful that offer a mobile-first solution, with either no web/desktop client or just as a an additional client (usually with fewer features, and/or still requiring access to a smartphone).

> Also "any chance of any form of adoption" is a bit overstatment. I still use a dumbphone

Of course it's possible; but depending on what your interests in life are you will pay a price, and in practice for the vast majority of people the price is too large to use a non-Android/iOS compatible device.

> many apps have web alternatives here, or alternative GPLed clients for Linux (that includes whatsapp, apparently), that can be made native on pinephone.

Unless they somehow hacked the encryption, you're still going to need a connection to the phone's WhatsApp client.

[ Parent | on HN ]
Re:Google have declared Droidscript is malware by necovek on Tuesday April 27, 2021 @03:25PM (#26960309)
> Unless they somehow hacked the encryption, you're still going to need a connection to the phone's WhatsApp client.

Apologies if I sound a bit naive, but what would be there to "hack"?

WhatsApp clients are available for many platforms, whatever encryption they might be using can easily be figured out by decompiling the code, and if they are using a key on the client side to do any encryption, that key is available for extraction from the distributed client too.

Basically, my question is what can a closed source downloadable client do to protect the encryption it uses to connect to a public network?

[ Parent | on HN ]
Re:Google have declared Droidscript is malware by arp242 on Tuesday April 27, 2021 @04:24PM (#26961037)
Yes, technically I'm sure there are ways around it if you try hard enough. No one does that though AFAIK.
[ Parent | on HN ]
Re:Google have declared Droidscript is malware by Vrondi on Tuesday April 27, 2021 @02:24PM (#26959554)
If you're using Whatsapp, you've got zero interest in privacy anyhow, and so you're never going to consider these issues in the first place.
[ Parent | on HN ]
Re:Google have declared Droidscript is malware by mdoms on Tuesday April 27, 2021 @02:51PM (#26959912)
Well first of all that's just total BS, but secondly this thread isn't even about privacy. None of this is. In fact your comment is the very first mention of that word in this thread.
[ Parent | on HN ]