this post was submitted on 04 Dec 2024
192 points (95.7% liked)

Privacy

32173 readers
202 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 203 points 1 week ago (13 children)
[–] commander 48 points 1 week ago (12 children)

The loophole in WhatsApp's end-to-end encryption is simple: The recipient of any WhatsApp message can flag it. Once flagged, the message is copied on the recipient's device and sent as a separate message to Facebook for review.

That practically applies to every form of digital communication. Sender/recipient has it on their end unencrypted and passes/leaks it on elsewhere

[–] [email protected] 3 points 1 week ago* (last edited 1 week ago) (4 children)

Pretty sure the more user / privacy friendly options prevent screenshots or copying from an encrypted chat, and also allow the participants to delete their messages after they were read or even a set time.

[–] Zak 20 points 1 week ago (1 children)

prevent screenshots or copying from an encrypted chat

Aside from the obvious analog hole, that's only possible if the user's device cooperates, which is never guaranteed.

There is no way to send messages to someone's device and guarantee they won't provide them to a third party. Technology can't force an untrustworthy person to keep your secrets.

Signal does not attempt to stop me from taking screenshots, and all chats on Signal are encrypted.

[–] Anonymouse 3 points 1 week ago

You have some good points. I'm curious about the scenario where you need encrypted communications with an untrusted party.

I guess if you are leaking insider information to the press and need to be anonymous, but then use an anonymous account. Why would you need to send information to someone but not trust them to use the information responsibly?

load more comments (2 replies)
load more comments (9 replies)
load more comments (9 replies)