Comment by strogonoff | Hacker News Reader

Comment by strogonoff | Hacker News Reader

Parent Full thread

It’s a bit disingenuous (sensationalist?) to go from:

> “No one outside of this chat, not even WhatsApp, can read or listen to them.” Those assurances are not true.

to (buried in the middle):

> Because WhatsApp’s content is encrypted <…> WhatsApp reviewers gain access to private content when users hit the “report” button on the app, identifying a message as allegedly violating the platform’s terms of service. This forwards five messages <…> to WhatsApp in unscrambled form

Unless I’m missing something, the article so far confirms that in WhatsApp:

(1) Signal-based E2E chat encryption still works as expected,

(2) reports actually get reviewed (I used that feature a few times), and

(3) FB mines down to bedrock everything else apart from actual chat contents. Nothing new here.

Since, as far as my personal experience goes, almost no one uses Signal and almost everyone uses Telegram in non-E2EE mode, the choice appears obvious.

That all said, the horribleness of content moderation jobs deserves more awareness.

Signal has since changed their encryption methods so that it's harder to know who's sending messages to who, and what groups exist. On WhatsApp, these changes have obviously not been implemented, so it's not true that WhatsApp uses Signal encryption.

Based on a shallow scan of Signal protocol’s Wikipedia page, I can’t see any notable changes after 2016, which is when WhatsApp had it integrated. Perhaps the measures you mentioned exist in Signal the client, as opposed to Signal the protocol?

But yes, if using WhatsApp one must keep in mind that FB and third parties know (and probably data-mine) whom (also when, etc.) one’s talking to; this is most likely less of a concern with Signal client.

I have a lot of respect for Signal Foundation, although I question their recent idea of integrating cryptocurrency support into a messaging app.

One such improvement is the Sealed Sender feature: https://signal.org/blog/sealed-sender/

It's unclear to me is these are part of the "protocol" or just the Signal client.

i think GP is referring to the signal protocol [0] as the underlying transport of the contents, which should be still true in WhatsApp. Feature parity with Signal app itself in terms of what is encrypted seems to have not been a focus of WhatsApp.

[0]: https://en.wikipedia.org/wiki/Signal_Protocol

Reply on news.ycombinator.com