this post was submitted on 09 Jul 2023
1133 points (96.8% liked)

Technology

58150 readers
5349 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
 

cross-posted from: https://lemmy.ml/post/1874605

A 17-year-old from Nebraska and her mother are facing criminal charges including performing an illegal abortion and concealing a dead body after police obtained the pair’s private chat history from Facebook, court documents published by Motherboard show.

you are viewing a single comment's thread
view the rest of the comments
[–] Monomate@lemm.ee 31 points 1 year ago* (last edited 1 year ago) (2 children)

To be fair, if the mother/daughter communicated through WhatsApp they'd not be caught, because it's an end-to-end encrypted messaging platform. But as they chose FB Messenger, they got vulnerable to a court order forcing Facebook to hand over data.

[–] preacher37@lemmy.world 13 points 1 year ago (2 children)

Is WhatsApp open source? Even Signal I'm a bit on edge, why would you trust WhatsApp which is owned by Facebook?

[–] Monomate@lemm.ee 23 points 1 year ago* (last edited 1 year ago) (2 children)

WhatsApp was not created by Facebook. It used to be an independent company which major selling point was offering free ~~encrypted~~ messaging to the masses, which was mostly relevant to non-US users as they're charged for SMS usage more directly (it doesn't come free and unlimited on most plans).

It was bought by Facebook in 2014 and by 2016 they implement end-to-end encryption. There's already various cases of courts around the world trying to compel WhatsApp to hand over messages but they didn't because they simply don't store the messages on their servers, and when the messages pass through their servers they're encrypted by design.

[–] noodlejetski@geddit.social 19 points 1 year ago* (last edited 1 year ago) (1 children)

major selling point was offering free encrypted messaging to the masses

no, their major point was offering free messaging in regions where people were being charged per SMS sent. end-to-end encryption has been introduced in 2016 (https://en.wikipedia.org/wiki/WhatsApp#End-to-end_encryption), seven years after it's been founded and two years after Facebook acquisition.

[–] Monomate@lemm.ee 3 points 1 year ago (1 children)

Ops, my bad. I was under the impression the only reason WhatsApp is encrypted today is because they already were by the time FB bought them.

They paid US$ 20B to buy WhatsApp, and encryption is a major deterrent for them scanning all messages to enhance their targeted advertising business.

[–] noodlejetski@geddit.social 4 points 1 year ago (1 children)

they have access to the metadata, which can be as valuable as the content of the messages.

[–] Monomate@lemm.ee 1 points 1 year ago (1 children)

Maybe you're right, but I'd be hesitant to say WhatsApp user's contacts list would be worth US$ 20B.

My theory is they bought WhatsApp just because it was organically growing to be the dominant messaging app, and Facebook didn't want to lose this marked and bought them to squash the competition.

[–] noodlejetski@geddit.social 3 points 1 year ago* (last edited 1 year ago) (1 children)

contact list? not really.

knowing who they talk to, how often, where from, for how long on average, and, in case of the countries where Whatsapp for Business is popular, what businesses do they spend money at? probably quite worth it.

[–] Monomate@lemm.ee 1 points 1 year ago (1 children)

The WhatsApp Business stuff is a more recent development. When FB bought them they had very little to work with.

[–] noodlejetski@geddit.social 1 points 1 year ago* (last edited 1 year ago)

I'd guess Whatsapp for Business stuff has been developed due to how many businesses have already been using Whatsapp. and even without it, when the same number is being listed on the business' Facebook page, it's pretty easy to connect the dots. I admit though, I used some shorthand when writing my previous comment. I meant "where Whatsapp is used to contact businesses".

[–] Pips@lemmy.film 2 points 1 year ago (1 children)

That said, the messages are stored locally on the device or in a cloud backup unless you disable that. If the device is unlocked, the messages are available to whoever has the device.

[–] Monomate@lemm.ee 2 points 1 year ago

At this point we're discussing the mother/daughter screen locking policy. It doesn't matter what messaging app they use, if they rely solely on Face/Touch ID, the police may force then to unlock their phone anyway.

[–] Lukecis@lemmy.world 2 points 1 year ago

Signal should check out as safe and private, considering even after getting multiple warrants from various governments they've given up next to no data on any of said requests- because they dont store it, the only thing they had is 'time of account creation, time of last connected to service'.

[–] PineapplePartisan@lemmy.world -2 points 1 year ago (2 children)

E2E only protects data in transit. Unless the pair also encrypted their data at rest, their messages will still be easily accessed in plain text by their cloud backup.

[–] AProfessional@lemmy.world 8 points 1 year ago

It supports encrypted backups. Plus that adds legal complication of knowing to and getting data from Google/Apple/etc.

[–] noodlejetski@geddit.social 5 points 1 year ago* (last edited 1 year ago) (1 children)

they actually do encrypted backups nowadays.

[–] PineapplePartisan@lemmy.world 2 points 1 year ago (2 children)

By default or is it opt-in? Glad to hear that they have taken steps to remediate the biggest weakness of their service.

[–] theterrasque@infosec.pub 2 points 1 year ago* (last edited 1 year ago)

IIRC it asks if you want to enable backup, and when turning on backup it's an option to encrypt it with a key or password. So by default there's no backup at all.

[–] noodlejetski@geddit.social 2 points 1 year ago

I'm not entirely sure. I think I had to opt in when it came out, but I don't know if they've ever changed it.