dev

joined 1 year ago
[–] [email protected] 8 points 1 year ago (1 children)

It’s been a while since I looked it up, and I don’t use WhatsApp, but I believe it’s E2E encrypted but the mechanism they use allows their servers to also hold the keys to decrypt.

Presumably they hold a master key that all other keys are derived from.

[–] [email protected] 5 points 1 year ago

Oh yeah they definitely aren’t to be seen as the “good guy” and they absolutely could make it impossible to hand over.

They are deciding to favour data/profits over people’s privacy.

BUT the distinction should still be made that they could be made to do it, regardless whether they want to.

Then there’s the whole other conversation around back doors (like the government asked Apple to do in their iPhones).

[–] [email protected] 2 points 1 year ago

Right. They could implement E2E encryption, they just don’t want to - entirely plausible it’s because they don’t want to say no.

More likely it’s because they want the data :)

[–] [email protected] -1 points 1 year ago

You’re straw manning. I didn’t say they act in good faith, but it’s important to make a distinction between them handing over the information and being made to.

For all I known they do hand it over willingly. I don’t know.

[–] [email protected] 4 points 1 year ago (2 children)

If they enabled it they wouldn’t have access to all of that information they can profit off of.

Technologically they could do it, they just don’t want to.

[–] [email protected] 48 points 1 year ago (14 children)

There’s a difference between willingly handing over information and being required to by law, though, right?

I’m no Meta fan, but presumably if they were served a warrant they can’t just say no?

That’s one of the benefits of E2E encryption, where nobody but the users have the keys. The company can say no, because they simply don’t have access to see them.

[–] [email protected] 2 points 1 year ago (2 children)

@[email protected] - purely out of interest, when are you planning on deciding?

[–] [email protected] 5 points 1 year ago (3 children)

Sent you a DM. No issues if it’s not what your looking for.

Thanks for running VLemmy.

[–] [email protected] 10 points 1 year ago (2 children)

!remindMe 60 years.

Oh wait, no, we don’t that that here, do we.

[–] [email protected] 1 points 1 year ago

I don’t have enough desire to check, but I’d assume they are encrypted AND salted so it’s not as easy as the top comment makes out.

If an instance was hacked, the hackers would get a hash and a salt. They’d still have to figure out what plaintext password + salt = hash.

use unique passwords with every account, everywhere.

This is the way.

view more: next ›