68
submitted 3 days ago by misk@sopuli.xyz to c/technology@lemmy.world
you are viewing a single comment's thread
view the rest of the comments
[-] markstos@lemmy.world 1 points 3 days ago
[-] hsdkfr734r@feddit.nl 5 points 3 days ago* (last edited 3 days ago)

I don't think so. Metadata is unencrypted (i.e. your contacts, who sends messages to whom and how often and when).
Messages itself are encrypted.

Am I wrong?

[-] markstos@lemmy.world 10 points 3 days ago

That is what the article is explaining. The contact names and details are encrypted.

https://engineering.fb.com/2024/10/22/security/ipls-privacy-preserving-storage-for-your-whatsapp-contacts/

Perhaps the call times are exposed but it seems it would be difficult or impossible for them to connect this with a human identity.

Use Signal if you have concerns about WhatsApp.

[-] hsdkfr734r@feddit.nl 1 points 3 days ago* (last edited 3 days ago)

Thanks.

That is what the article is explaining.

The planned improvements are a good thing. I thought we talked about the status right/ until now.

Also: What does it mean then Meta (the company) isn't eager to collect this data (anymore)? This doesn't fit my world view of this company.

[-] markstos@lemmy.world 2 points 3 days ago

Meta acquired WhatsApp and somehow hasn’t messed it up yet. WhatsApp has always been fairly good with privacy and doesn’t share much with other Meta apps as far as I’m aware.

[-] sunzu2@thebrainbin.org 1 points 3 days ago

They don' want to moderate contents of your convos, it got expensive.

They are still mining the meta data to create cohort groups.

[-] markstos@lemmy.world 2 points 3 days ago

Where is the evidence of Meta mining WhatsApp metadata?

[-] sunzu2@thebrainbin.org 1 points 3 days ago

If it is happening, meta has it

[-] markstos@lemmy.world 2 points 2 days ago
[-] sunzu2@thebrainbin.org 1 points 2 days ago
[-] markstos@lemmy.world 2 points 2 days ago

WhatsApp is a Meta business unit, yes.

And it has its own rules and policies for what is shared with other Meta business units.

Google has spell out the same. Just because you provide data like location to one Google service doesn’t automatically mean every other Google service can access it.

And they can’t just change their internal data policies however they like as some of this is governed by legal regulations.

Here’s a a story about how Google is not allowed to share data across business units without user consent, at least in the EU.

https://www.theverge.com/2024/1/12/24036312/google-digital-markets-act-services-user-data-opt-out

[-] sunzu2@thebrainbin.org -1 points 2 days ago

And tiktok promised to not send data back to china... It did.

And meta got caught sharing whatsapp data too

So did google

And then you come here with this clown 🤡 analysis?

How naive is u? Wtf

Do you reallt trust what a company says?

[-] sunzu2@thebrainbin.org -3 points 3 days ago

It uses signal Protocol so it has the same design defect for leaking meta data.

Both know who and when you are talking too. And thats really all the data the security apparatus cares about.

[-] Lojcs@lemm.ee 2 points 3 days ago

Is that really how it works? I thought signal protocol was about just how the encryption worked, not what is encrypted?

[-] sunzu2@thebrainbin.org 2 points 3 days ago

I am not following this.

Content of msg is encrypted and everything within but signal server knows when you talk to your girl becuase the server has to route it.

So anytime you initiate a chat, they know that yall doing something.

This meta data is what the game is all about tho.

[-] Lojcs@lemm.ee 1 points 1 day ago

The server doesn't need to know or keep track of who's sending a message to deliver it. If you don't trust signal to not lie to the court about not collecting such metadata, I can't convince you otherwise. But there's a merit in designing your system so that such collection is as hard as possible.

[-] sunzu2@thebrainbin.org 1 points 1 day ago

Bad analysis

Server knows each time you engage a person and who you are enaging. This is the meta data thats need for creatijg cohort groups

Also, you dont seemt to under how FISA order would work vis-a-vis regular court proceedings.

[-] Lojcs@lemm.ee 1 points 1 day ago

Are you're familiar with how singal's servers work? Even I can think of a system where all messages are collected in a common pool before being distributed, the actual security researchers that made signal surely thought of something better.

How does FISA make it legal for singal to lie to a court about what information they have? Please enlighten me

[-] noodlejetski@lemm.ee 2 points 3 days ago

and yet the only thing they provide upon a court request is the last time you were online and the date you created your account https://signal.org/bigbrother/

[-] sunzu2@thebrainbin.org 1 points 3 days ago

That's for a generic court. FISA court order would never see a light of day and they would not waste that being exposed to the public.

They have technical capability to collect this meta data, that's a fact.

We know that that for purpose of this court case they either did not or are under order to not disclose.

If security apparatus want this information, they can get it. Do you really think singal will say know and violate US law?

[-] hsdkfr734r@feddit.nl 1 points 3 days ago

I guess that's right. Although I'm (most likely) not a person of interest for any secret service. But the data could be interesting for marketing and insurance companies.

[-] sunzu2@thebrainbin.org 0 points 3 days ago

So meta doesnt know who and when you are talking to?

[-] markstos@lemmy.world 1 points 3 days ago

They cannot see phone numbers of contacts, no.

[-] geography082@lemm.ee 1 points 3 days ago
[-] markstos@lemmy.world 3 points 3 days ago

No. The Signal app offers similar functionality to WhatsApp core features and is open.

[-] sunzu2@thebrainbin.org 0 points 2 days ago

Signal leaks meta data lol

[-] lemmeBe@sh.itjust.works 3 points 3 days ago

Of course not. And the often repeated "they use Signal protocol" means diddly squat because the code is closed source. They took Signal protocol at some point, forked it and did good knows what with it since experts cannot review it. 🙄

this post was submitted on 22 Oct 2024
68 points (94.7% liked)

Technology

58872 readers
4046 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS