Lawsuit claims Meta can see WhatsApp chats in breach of privacy

Comments

• tyler@programming.dev ⁨3⁩ ⁨weeks⁩ ago

  I thought this was well known. That’s why I don’t understand people using whatsapp at all. On android and ios products from the same company can access data between different apps, breaking through the sandbox. So if you have WA and FB installed, FB can see the data in WA and then send it in plain text back to meta’s servers (or encrypting with a key they have access to).

  This does not mean that WA isn’t e2e encrypted. That’s why this spokesman can say:

  “Any claim that people’s WhatsApp messages are not encrypted is categorically false and absurd,” spokesman Andy Stone said in an email. “WhatsApp has been end-to-end encrypted using the Signal protocol for a decade. This lawsuit is a frivolous work of fiction.”

  And be completely truthful, and yet the lawsuit also be completely truthful. If you can visually see it on your screen then Meta can have access to it if they wanted. You have to actually trust the company behind the software as well and it needs to be open source and auditable and that still isn’t necessarily enough. WA already doesn’t meet two of these requirements so why in the world would you trust it at all?

  Here’s an article talking about this on iOS. iosbrain.com/…/beyond-the-sandbox-using-app-group…

  source

  • scrubbles@poptalk.scrubbles.tech ⁨3⁩ ⁨weeks⁩ ago

    Yeah people fundamentally misunderstand what e2e encryption is.

    No one can decrypt it between you and them. However, yours or their device has an unencrypted view of it, so if your app happily transmits all of your data, that doesn’t break the e2e encryption.

    How do people think WhatsApp makes money?

    source
• immobile7801@piefed.social ⁨3⁩ ⁨weeks⁩ ago

  Image

  source

  • JoMiran@lemmy.ml ⁨3⁩ ⁨weeks⁩ ago

    Image

    source
• Powderhorn@beehaw.org ⁨3⁩ ⁨weeks⁩ ago

  I used WhatsApp to stay in touch with family overseas until Facebook announced the acquisition. I’d already been off Facebook for years, never used Instagram and had zero interest being Zucked back into that orbit.

  Since WhatsApp claims to use the Signal protocol in the first place, why not just use Signal and skip the data collection?

  source
• beyond@linkage.ds8.zone ⁨2⁩ ⁨weeks⁩ ago

  Being proprietary is enough of a reason to refuse it. On top of that, being owned by Facebook is another good reason.

  With proprietary software the developer is in control, and in this case the developer is known evil.

  source
• Kissaki@beehaw.org ⁨3⁩ ⁨weeks⁩ ago

  The complaint cites “whistleblowers” as having helped bring this information to light, though it doesn’t explain who they are.

  No substance yet.

  source