News for hackers. Stuff that matters.

A comment on TikTok will not introduce end-to-end encryption, saying it makes users less safe. Parent comment

Re:TikTok will not introduce end-to-end encryption, saying i... by szmarczak on Wednesday March 04, 2026 @03:20AM (#47244635)
> if the server operator was malicious, they could just push different client-side JavaScript

Same as with OS updates, browser updates, dependencies used by the OS, dependencies used by the browser. Also you can run malicious software such as keyloggers and you're compromised.

That argument doesn't mean E2E (even web based) is snake oil. Browsers just give you more points of failure.

[ Parent | on HN ]
Re:TikTok will not introduce end-to-end encryption, saying i... by mr_mitm on Wednesday March 04, 2026 @06:40AM (#47246093)
The difference is: in web based cryptography, you get the cipher text and the code to decrypt it from the same source. Hijacking OS updates is arguably much harder than hijacking one particular web server, and there is pretty much no effective defense against malicious OS updates.
[ Parent | on HN ]
Re:TikTok will not introduce end-to-end encryption, saying i... by szmarczak on Wednesday March 04, 2026 @06:50AM (#47246160)
I know the difference. It doesn't make E2E useless.
[ Parent | on HN ]