WhatsApp adds end-to-end encryption - Polidicks

[url]http://www.bbc.com/news/technology-35969739[/url] [url]https://www.whatsapp.com/security/[/url] [img]http://ichef-1.bbci.co.uk/news/624/cpsprodpb/11BDD/production/_89096627_whattaapp.jpg[/img] [quote] [B]Instant messaging service Whatsapp has announced it will encrypt all its users' communications from Tuesday.[/B] It renders messages unreadable if they are intercepted, for example by criminals or law enforcement. Whatsapp, which has a billion users worldwide, said file transfers and voice calls would be encrypted too. The Facebook-owned company said protecting private communication was one of its "core beliefs".[/quote] [quote]Other messaging apps with end-to-end encryption include Telegram, which is known to be used by the so-called Islamic State to share information.[/quote] BBM all over again?

They are a company owned by facebook, but I'll be optimistic. Good on them.

[quote] Telegram, which is known to be used by the so-called Islamic State to share information. [/quote] When the medias are all up in everyones shit like this, it's why we can't have nice things.

[QUOTE=mastersrp;50078971]When the medias are all up in everyones shit like this, it's why we can't have nice things.[/QUOTE] The funny thing is that Telegram uses their own homemade encryption algorithm, which is pretty much the #1 thing not to do when encrypting something. It's been demonstrated that their algorithm is flawed and insecure: [url]http://unhandledexpression.com/2013/12/17/telegram-stand-back-we-know-maths/[/url] On the other hand, [URL="https://www.whatsapp.com/security/WhatsApp-Security-Whitepaper.pdf"]WhatsApp's specification[/URL] seems pretty standard as far as the used algorithms go. The implementation could still be (deliberately) flawed for all we know, especially since you can't just download the source code and check it for yourself.

[QUOTE=news] used by the [B]so-called Islamic State[/B][/QUOTE] why do they say this [I]all the time[/I]. back in the day they never said "hitler was part of the [I]so called nazi party[/I].

[QUOTE=AK'z;50079165]why do they say this [I]all the time[/I]. back in the day they never said "hitler was part of the [I]so called nazi party[/I].[/QUOTE] They say it because it's not recognized as a state from said country.

Great to hear. It looks like the FBI's plan backfired. Seemingly [URL="http://www.wired.com/2016/04/forget-apple-vs-fbi-whatsapp-just-switched-encryption-billion-people/?mbid=social_fb"]in response[/URL] to the encryption debacle, WhatsApp decides to join the encryption club. From reading the indicator from my WhatsApp on my phone, it says WhatsApp does not store the messages on their server once they are delivered to the recipient's phone. So it is not that the delivered messages are on the WhatsApp servers "but encrypted" — they simply do not exist on their servers at all. It will be a great day when this becomes standard among even the most basic IM applications. It should be a standard among IM applications. A world without it makes no sense. No one should be able to read your private communications other than you or the recipient. [editline]6th April 2016[/editline] Only good things have come out of FBI's invasive request to break encryption. 1. Universal-education for encryption and need for it 2. Companies deciding to follow Apple's suit.

Its nonfree software, good luck auditing it.

[QUOTE=mastersrp;50078971]When the medias are all up in everyones shit like this, it's why we can't have nice things.[/QUOTE] did u know hitler drank water? i fucking hate this train of 'logic' they're pushing.

[QUOTE=Trebgarta;50079577]If you read the privacy policy, you will see that they store metadata (, timestamps, phone numbers), unencrypted, in their own servers still, as required by their obligation for information collection, or something similar. [Media]https://twitter.com/micahflee/status/717433872560992256 [/media][/QUOTE] Encrypted Email allows fo collection of this data too. No counterargument, just additional info.

[QUOTE=Trebgarta;50079577]If you read the privacy policy, you will see that they store metadata (, timestamps, phone numbers), unencrypted, in their own servers still, as required by their obligation for information collection, or something similar. [Media]https://twitter.com/micahflee/status/717433872560992256 [/media][/QUOTE] "As well as any other information which WhatsApp is legally compelled to collect." That's a bit woolly. They could well be encrypting the messages between clients as they've said, but if they're able to decrypt messages on their servers and store them, the whole thing is a waste.

[QUOTE=AK'z;50079165]why do they say this [I]all the time[/I]. back in the day they never said "hitler was part of the [I]so called nazi party[/I].[/QUOTE] because passive aggressiveness is a proven method to stop insane beheading extremists

[QUOTE=UberMensch;50079842]"As well as any other information which WhatsApp is legally compelled to collect." That's a bit woolly. They could well be encrypting the messages between clients as they've said, but if they're able to decrypt messages on their servers and store them, the whole thing is a waste.[/QUOTE] I do hope that they have thought of this, it's pretty useless if the FBI, and then other governments too, can send in orders to effectively nullify this protection. If anyone wants a much more guaranteed solution, take a look into signal, telegram, or my favourite, XMPP with OTR, which is great at being cross-platform with clients on every OS, and it's very easy to make your own server for it to host your own account.

[QUOTE=AK'z;50079165]why do they say this [I]all the time[/I]. back in the day they never said "hitler was part of the [I]so called nazi party[/I].[/QUOTE] Well probably because they will never be recognised as a real state and they don't exactly reflect Islamic values.

[QUOTE=Qaus;50079588]did u know hitler drank water? i fucking hate this train of 'logic' they're pushing.[/QUOTE] I drink milk and tea, because fuck supporting Nazis.

dont you still put water in it?

2015-2016 The year people actually read the TOS and Privacy Policy of things and only get outraged when its too late

[QUOTE=Sam Za Nemesis;50079591]It's sad that they're almost as trigger happy with C&Ds against research & FOSS projects as snapchat even though it doesn't harm the platform but actually makes it stronger making it available for unsupported devices Get telegram[/QUOTE] As a user of Telegram, their encryption methods are waiting to be destroyed. [url]http://www.cryptofails.com/post/70546720222/telegrams-cryptanalysis-contest[/url]

Encryption doesn't mean that facebook doesn't have their own key.

[QUOTE=wauterboi;50084649]As a user of Telegram, their encryption methods are waiting to be destroyed. [url]http://www.cryptofails.com/post/70546720222/telegrams-cryptanalysis-contest[/url][/QUOTE] And their servers keep plaintext message history. I still don't understand why they couldn't have partial end-to-end and leave them encrypted on the server.

[QUOTE=chrishind10;50079332]Its nonfree software, good luck auditing it.[/QUOTE] It uses the [URL="https://whispersystems.org/blog/whatsapp-complete/"]Signal Protocol[/URL] and [URL="http://www.thoughtcrime.org/"]Moxie Marlinspike[/URL] worked with them on the integration. I'm fairly sure it's about as secure as currently technically possible, or he wouldn't promote this as much as he does.