sure, but someone would find out if WhatsApp didn’t e2ee their messages, which is the most important thing
Not necessarily. Code can be obfuscated.
Well you literally can be, because if it was not someone would find out instantly, it’d be a huge thing and meta would suffer greatly if they lied about e2ee
“Instantly”, yeah, sure… WhatsApp isn’t really used for secure communication (I wonder why), but by normies who don’t know any better. I doubt most users would care if something like this came to light.
Sealed sender…, also signal is private, not anonymous, if you want both, simplex is ur friend
Sealed sender has nothing to do with this, as it applies to messages. You can still build a profile of users based on which users submit which hashes for contact discovery, without the need for them to send any message to those contacts at all.
well that’s not the same situation the robber wouldn’t see everything, the hw component would… also other doors have the function of keeping heat inside, not keeping robbers aw
Not necessarily true, and also not really relevant to the analogy. If a hardware component would spy on basically everything, I’d find it weird to just say “Hey Intel, you already have all my data any way, so I’m just going to freely give it to Meta as well.”
Well again if it did something like that, we would know thanks ro reverse engineering
You’re putting too much blind trust in reverse engineering. And since you seem to be insistent on naively trusting Meta and proprietary applications, I won’t try to convince you otherwise. Have fun, I guess.
Sure, but someone would still find out. We can be 100% sure of that, so it’s still better than SMS period.
Instantly", yeah, sure… WhatsApp isn’t really used for secure communication (I wonder why), but by normies who don’t know any better. I doubt most users would care if something like this came to light
You have no idea how many businesses use WhatsApp and have their trade secrets on there even. And it is used for secure communication in the real world, in a lot of cases.
Sealed sender has nothing to do with this, as it applies to messages. You can still build a profile of users based on which users submit which hashes for contact discovery, without the need for them to send any message to those contacts at all.
That assumes the server can see which hashes belong to which account. Signal’s contact discovery is designed to match contacts inside a protected enclave, so the server doesn’t get a readable list of them. It may see that a lookup happened, but that alone doesn’t show it can build a contact profile
Not necessarily true, and also not really relevant to the analogy. If a hardware component would spy on basically everything, I’d find it weird to just say “Hey Intel, you already have all my data any way, so I’m just going to freely give it to Meta as well.”
Well, have you ever heard of Prism? But I do agree that the less companies you give your data, the better. But still… I don’t really think in this scenario it would make any difference.
You’re putting too much blind trust in reverse engineering. And since you seem to be insistent on naively trusting Meta and proprietary applications, I won’t try to convince you otherwise. Have fun, I guess.
No, I’m not. You’re putting way too much trust into open source software, since I’m sure you don’t read all the lines of code that there are. You’re basically doing the same thing as me.
Not necessarily. Code can be obfuscated.
“Instantly”, yeah, sure… WhatsApp isn’t really used for secure communication (I wonder why), but by normies who don’t know any better. I doubt most users would care if something like this came to light.
Sealed sender has nothing to do with this, as it applies to messages. You can still build a profile of users based on which users submit which hashes for contact discovery, without the need for them to send any message to those contacts at all.
Not necessarily true, and also not really relevant to the analogy. If a hardware component would spy on basically everything, I’d find it weird to just say “Hey Intel, you already have all my data any way, so I’m just going to freely give it to Meta as well.”
You’re putting too much blind trust in reverse engineering. And since you seem to be insistent on naively trusting Meta and proprietary applications, I won’t try to convince you otherwise. Have fun, I guess.
Sure, but someone would still find out. We can be 100% sure of that, so it’s still better than SMS period.
You have no idea how many businesses use WhatsApp and have their trade secrets on there even. And it is used for secure communication in the real world, in a lot of cases.
That assumes the server can see which hashes belong to which account. Signal’s contact discovery is designed to match contacts inside a protected enclave, so the server doesn’t get a readable list of them. It may see that a lookup happened, but that alone doesn’t show it can build a contact profile
Well, have you ever heard of Prism? But I do agree that the less companies you give your data, the better. But still… I don’t really think in this scenario it would make any difference.
No, I’m not. You’re putting way too much trust into open source software, since I’m sure you don’t read all the lines of code that there are. You’re basically doing the same thing as me.