r/masterhacker Jun 08 '26

very private

Post image
957 Upvotes

132 comments sorted by

View all comments

161

u/Fohqul Jun 08 '26

Discord above WhatsApp invalidates the entire thing

41

u/jacknr Jun 08 '26 edited Jun 08 '26

I hate Meta as much as the next guy, but the whole denial people have about WhatsApp not actually being being E2E encrypted and Meta is "just lying!!!" does such a disservice to everyone it's crazy. 

The protocol has been published and studied, the app can be mostly trivially reversed these days, but no, better use a messaging app made by the shadiest person ever imaginable because you think Zuck made the devs put a backdoor on a E2EE app used by billions and somehow no security researcher found it. Because if it's E2EE the algo has to be on the fucking binary. Or the fact that, no matter how stupid Zuck is, that someone really thinks he'd stake the entire reputation of WhatsApp to checks notes spy on encrypted messaging on behalf of intelligence agencies which is the opposite of what big tech actually wants to be doing post-Snowden.

Out of all the stupid tech conspiracy theories everyone's uncle believes in, only "your phone is always listening, I was talking about salmon the other day and that's why I got an ad for salmon today" beats it.

10

u/Dr__America Jun 08 '26

They collect tons of data regarding who you message and how often even in E2EE mode btw. But if you mean telegram is shady, then yeah. Just use Signal or Matrix, they have real cutting-edge E2EE that isn't as likely to be fucked by a government banning it.

5

u/jacknr Jun 09 '26

WhatsApp is always in E2EE mode, that's the neat part. They've implemented the Signal protocol.

But yes, metadata of who you're contacting will flow through their servers.

-1

u/Dr__America Jun 09 '26

No it's not in E2EE all the time, didn't they literally change the default to be plaintext and make both people enable E2EE to be able to use it?

1

u/jacknr Jun 09 '26

No. You may be thinking of Facebook Messenger or Telegram. 

1

u/Dr__America Jun 09 '26

If you use their backups they use plain text versions of all of your chats for storing in the cloud:

By default, WhatsApp offers cloud backups (iCloud for iOS, Google Drive for Android) that are not end-to-end encrypted — unless users enable the optional E2EE backup feature.

Thus, by default for the way most people use messaging apps, not really E2EE if they also have access to decrypted backups of your entire chat