News for hackers. Stuff that matters.
Re:Building end-to-end security for Messenger – Engineering ... by holmesworcester on Thursday December 07, 2023 @07:09AM (#38555489)
Maybe they're doing it because it's the right thing to do, and because they'd like people to trust them.

Also: https://techcrunch.com/2023/07/11/teen-and-mom-plead-guilty-...

They must be able to do good targeted advertising without message contents, with public likes and other data on scrolling behavior, especially as AI tools improve. Maybe having this data is more trouble than it's worth. Data is a liability as well as an asset.

Re:Building end-to-end security for Messenger – Engineering ... by gmadsen on Thursday December 07, 2023 @08:19AM (#38555979)
its the "right" thing to do only by a small population of tech workers. Most people do not care, and ad customers would be very upset if this degrades targeting.
Re:Building end-to-end security for Messenger – Engineering ... by pnt12 on Thursday December 07, 2023 @08:36AM (#38556105)
I contest both opinions:

1. More and more people care about this, eg journalists, politicians, etc. Apple has been talking about this a lot, although some being propaganda for messages, but their customers are already somewhat aware of private messenging.

2. It may not degrade ad targeting that much. I imagine doomscrolling does it way more: you engaged with this post, you ignored that one, and so on.

Re:Building end-to-end security for Messenger – Engineering ... by gmadsen on Thursday December 07, 2023 @03:46PM (#38561590)
for 2, I will say anecdotally I have never in my life bought something directly from an ad until the last 2 years on instagram. It actually found things directly useful to me that I did not know about beforehand (I did still go through an hour of research or so, but was amazed at the algorithm discovery capability)
Re:Building end-to-end security for Messenger – Engineering ... by cqqxo4zV46cp on Thursday December 07, 2023 @08:16AM (#38555960)
OP’s question rejects the premise of your justification. Facebook doesn’t have much of a track record of “doing the right thing” for its users.
Re:Building end-to-end security for Messenger – Engineering ... by assbuttbuttass on Thursday December 07, 2023 @08:28AM (#38556037)
Ha, good one
Re:Building end-to-end security for Messenger – Engineering ... by bear141 on Thursday December 07, 2023 @08:30AM (#38556063)
What a refreshing perspective. I also trust them to act altruistically.
Re:Building end-to-end security for Messenger – Engineering ... by TimTheTinker on Thursday December 07, 2023 @12:35PM (#38559267)
Some trust is indeed refreshing. But don't be naive.

With Zuckerberg's and FB's track record, their business decisions ought not to be trusted.

Re:Building end-to-end security for Messenger – Engineering ... by bear141 on Friday December 08, 2023 @12:13PM (#38571386)
I guess the /s was needed.
Re:Building end-to-end security for Messenger – Engineering ... by HumblyTossed on Thursday December 07, 2023 @08:44AM (#38556172)
> Maybe they're doing it because it's the right thing to do, and because they'd like people to trust them.

If that is true, good. But it'll take a very many doing "the right thing"s before I would trust anything Zuck owned.

Re:Building end-to-end security for Messenger – Engineering ... by et-al on Thursday December 07, 2023 @11:01AM (#38557871)
“People just submitted it. I don’t know why. They ‘trust me.’ Dumb fucks.”
Re:Building end-to-end security for Messenger – Engineering ... by stevage on Thursday December 07, 2023 @08:59AM (#38556350)
> Maybe they're doing it because it's the right thing to do, and because they'd like people to trust them.

I worked for FB briefly. It was enough to convince me that the "it's the right thing to do" is definitely not relevant to this question.

Re:Building end-to-end security for Messenger – Engineering ... by kaliqt on Thursday December 07, 2023 @10:57AM (#38557800)
Yeah I wasn't under the impression that respect the rights of customers was in their top 10 priorities.
Re:Building end-to-end security for Messenger – Engineering ... by eulgro on Friday December 08, 2023 @02:12PM (#38572891)
Customers are the ones paying for ads. Users are just a resource.
Re:Building end-to-end security for Messenger – Engineering ... by mario970v on Thursday December 07, 2023 @09:44AM (#38556885)
Seconded
Re:Building end-to-end security for Messenger – Engineering ... by raccoonDivider on Thursday December 07, 2023 @01:05PM (#38559617)
The few guys in charge of security engineering don't have to share the values of the whole company.
Re:Building end-to-end security for Messenger – Engineering ... by x0x0 on Thursday December 07, 2023 @01:24PM (#38559852)
Nonsense -- they do as long as Mark, and his chosen exec team, control whether they work there or not. Anything else is a pretty lie people tell themselves because they like the paycheck.
Re:Building end-to-end security for Messenger – Engineering ... by stevage on Saturday December 09, 2023 @07:29AM (#38581416)
That's kind of what I thought before I saw inside.

What actually happens is the reverse. 99% of engineers can have amazing values that you share, but they do not ultimately make the decisions. The board, Zuck, and the $ do.

Re:Building end-to-end security for Messenger – Engineering ... by browningstreet on Thursday December 07, 2023 @01:08PM (#38559649)
There were two parts to what you responded to. In terms of brand risk into the future, the second part could reasonably stand, no?
Re:Building end-to-end security for Messenger – Engineering ... by gloryjulio on Thursday December 07, 2023 @01:49PM (#38560158)
They sell ads. E2E encryption doesn't hurt that and it also appeals to the trust. So why not?
Re:Building end-to-end security for Messenger – Engineering ... by ses1984 on Thursday December 07, 2023 @02:23PM (#38560636)
It does hurt because you can’t deliver targeted ads based on message content.
Re:Building end-to-end security for Messenger – Engineering ... by pkulak on Thursday December 07, 2023 @04:37PM (#38562142)
All you do is have the end devices build the ad profiles and send them back to FB every once in a while.
Re:Building end-to-end security for Messenger – Engineering ... by gloryjulio on Thursday December 07, 2023 @02:38PM (#38560798)
I don't think they need the exact content to sell ads.

1. sell ads base on the message itself, get crushed in the media; 2. encrypt message but sell ads based on profile and meta data, get good publicity. I think they are doing option 2

Messaging is just part of the platform. My guess is that they want to forgo this part and concentrate on others

Re:Building end-to-end security for Messenger – Engineering ... by contrarian1234 on Thursday December 07, 2023 @09:00AM (#38556381)
- It's hard to imagine a project getting signed off for just being "nice" - especially when it hurts their own business interests.

- I don't really see it making sense as a PR move to build trust. I think outside of the tech sector they are doing fine on that front. The vast majority of people use their Bytedance, Meta, Tencent, etc. apps and aren't considering their encryptedness.

- I don't think this announcement will get any substantial press coverage

- It could be preemptive so that they don't get bad PR when they end up being "complicit" in getting people sent to jail for abortions (in the US) or being gay (in some African countries) or whatever

Re:Building end-to-end security for Messenger – Engineering ... by bryan_w on Thursday December 07, 2023 @10:36PM (#38565141)
> It could be preemptive so that they don't get bad PR when they end up being "complicit" in getting people sent to jail for abortions (in the US) or being gay (in some African countries) or whatever

Exactly this. With the recent laws passed they see how their altruistic "save the children" partnerships with law enforcement could be twisted for causes that aren't as popular everywhere.

Also it cost money to serve all those warrants.

Re:Building end-to-end security for Messenger – Engineering ... by giancarlostoro on Thursday December 07, 2023 @11:21AM (#38558183)
I think end to end encryption should be the minimum requirement for any private / direct messaging in any chat application. Group chats and larger I don't think it's as necessary since the guarantee that the conversations will be leaked is much higher, just reasonable encryption for those is fine. I do think its entirely possible to have a conversation that sounds incriminating out of context, and in fact is not even remotely relevant. If my shitposting conversations from my teens were taken out of context and shown in a court room I'd be facing several life sentences in an asylum.
Re:Building end-to-end security for Messenger – Engineering ... by ghostbrainalpha on Thursday December 07, 2023 @12:14PM (#38558999)
Zuck: I have over 4,000 emails, pictures, addresses, SNS

[Redacted Friend's Name]: What? How'd you manage that one?

Zuck: People just submitted it.

Zuck: I don't know why.

Zuck: They "trust me"

Zuck: Dumb fucks.

https://www.esquire.com/uk/latest-news/a19490586/mark-zucker...

Re:Building end-to-end security for Messenger – Engineering ... by basch on Thursday December 07, 2023 @02:00PM (#38560321)
I maintain that that was an intelligent commentary on human nature, and that it has been misconstrued.

He was saying “I could be anyone” not “I can’t be trusted.”

Re:Building end-to-end security for Messenger – Engineering ... by Suffocate5100 on Thursday December 07, 2023 @01:59PM (#38560307)
I think you're right insofar as they are trying to reposition themselves as more trustworthy. I think they see the writing on the walls.

But at the end of the day, their ultimate end is to make more money. If they do the right thing it isn't out of some altruistic motive. It's because they think that by doing so will make them more money.

Re:Building end-to-end security for Messenger – Engineering ... by devaiops9001 on Thursday December 07, 2023 @02:52PM (#38560987)
> Maybe [Facebook is] doing it because it's the right thing to do

This is the most autistic thing I have read on the internet this year, second to a personal friend sperging out thinking he was going to wife up the first girl he met at a party.