News for hackers. Stuff that matters.
Re:How WhatsApp enables multi-device capability by trabant00 on Wednesday September 22, 2021 @08:02AM (#28615368)
This comment proves that convenience trumps security and explains WhatsApp's success.

I also want to note that you can use them in parallel, no need to switch or convince other people to do so.

Re:How WhatsApp enables multi-device capability by nindalf on Wednesday September 22, 2021 @08:37AM (#28615602)
> convenience trumps security

Your comment implies that security is being traded off in favour of convenience. Could you explain how?

Re:How WhatsApp enables multi-device capability by d1sxeyes on Wednesday September 22, 2021 @01:08PM (#28618872)
Facebook is not transparent about how data collected through WhatsApp is used (https://www.nytimes.com/2021/09/02/business/facebook-whatsap...).

WhatsApp "harvests “data linked to you,” including your device ID, for “developer’s advertising and marketing.” It also collects your contact info, user ID and device ID for ominously vague “other purposes.” (https://www.forbes.com/sites/zakdoffman/2021/03/06/stop-usin...)

It's true Facebook only collect metadata and can't read your actual messages normally, but that's still important. (https://www.eff.org/deeplinks/2013/06/why-metadata-matters)

Re:How WhatsApp enables multi-device capability by tinus_hn on Wednesday September 22, 2021 @07:35PM (#28623425)
Your user ID is your phone number. If Facebook has that there really is no need for nebulous ‘device IDs’.
Re:How WhatsApp enables multi-device capability by d1sxeyes on Friday September 24, 2021 @06:17AM (#28640537)
It depends how you're assessing the need.

As an individual, no, there's no need, you can use your phone number as a user ID (although this comes up as a concern whenever Signal is mentioned as an alternative). There's also a practical factor - using device IDs allows end-to-end encryption to multiple devices without the user needing to manage keys themselves. (ie: WhatsApp can just create a new key pair for each device).

As Facebook however, there is a business need to be able to identify a single user across multiple devices in order to properly track them for marketing reasons.

If Facebook are unable to do this, then the business case for operating a free messaging service falls apart. Each individual needs to make their own decision as to whether they are prepared to pay the price of sharing the data that Facebook collects in exchange for simple, free-of-cost, international messaging. It's not an easy decision.