Sure, but someone would still find out. We can be 100% sure of that, so it’s still better than SMS period.
Instantly", yeah, sure… WhatsApp isn’t really used for secure communication (I wonder why), but by normies who don’t know any better. I doubt most users would care if something like this came to light
You have no idea how many businesses use WhatsApp and have their trade secrets on there even. And it is used for secure communication in the real world, in a lot of cases.
Sealed sender has nothing to do with this, as it applies to messages. You can still build a profile of users based on which users submit which hashes for contact discovery, without the need for them to send any message to those contacts at all.
That assumes the server can see which hashes belong to which account. Signal’s contact discovery is designed to match contacts inside a protected enclave, so the server doesn’t get a readable list of them. It may see that a lookup happened, but that alone doesn’t show it can build a contact profile
Not necessarily true, and also not really relevant to the analogy. If a hardware component would spy on basically everything, I’d find it weird to just say “Hey Intel, you already have all my data any way, so I’m just going to freely give it to Meta as well.”
Well, have you ever heard of Prism? But I do agree that the less companies you give your data, the better. But still… I don’t really think in this scenario it would make any difference.
You’re putting too much blind trust in reverse engineering. And since you seem to be insistent on naively trusting Meta and proprietary applications, I won’t try to convince you otherwise. Have fun, I guess.
No, I’m not. You’re putting way too much trust into open source software, since I’m sure you don’t read all the lines of code that there are. You’re basically doing the same thing as me.
Sure, but someone would still find out. We can be 100% sure of that, so it’s still better than SMS period.
You have no idea how many businesses use WhatsApp and have their trade secrets on there even. And it is used for secure communication in the real world, in a lot of cases.
That assumes the server can see which hashes belong to which account. Signal’s contact discovery is designed to match contacts inside a protected enclave, so the server doesn’t get a readable list of them. It may see that a lookup happened, but that alone doesn’t show it can build a contact profile
Well, have you ever heard of Prism? But I do agree that the less companies you give your data, the better. But still… I don’t really think in this scenario it would make any difference.
No, I’m not. You’re putting way too much trust into open source software, since I’m sure you don’t read all the lines of code that there are. You’re basically doing the same thing as me.