How much worse is it privacy wise for me to give them access to my contacts?

you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 2 weeks ago (1 child)

sure, but someone would find out if WhatsApp didn't e2ee their messages, which is the most important thing

Not necessarily. Code can be obfuscated.

Well you literally can be, because if it was not someone would find out instantly, it'd be a huge thing and meta would suffer greatly if they lied about e2ee

"Instantly", yeah, sure... WhatsApp isn't really used for secure communication (I wonder why), but by normies who don't know any better. I doubt most users would care if something like this came to light.

Sealed sender...., also signal is private, not anonymous, if you want both, simplex is ur friend

Sealed sender has nothing to do with this, as it applies to messages. You can still build a profile of users based on which users submit which hashes for contact discovery, without the need for them to send any message to those contacts at all.

well that's not the same situation the robber wouldn't see everything, the hw component would.... also other doors have the function of keeping heat inside, not keeping robbers aw

Not necessarily true, and also not really relevant to the analogy. If a hardware component would spy on basically everything, I'd find it weird to just say "Hey Intel, you already have all my data any way, so I'm just going to freely give it to Meta as well."

Well again if it did something like that, we would know thanks ro reverse engineering

You're putting too much blind trust in reverse engineering. And since you seem to be insistent on naively trusting Meta and proprietary applications, I won't try to convince you otherwise. Have fun, I guess.

  • source
  • parent
  • hideshow 1 child comment
  • [–] [S] 1 point 2 weeks ago

    Not necessarily. Code can be obfuscated

    Sure, but someone would still find out. We can be 100% sure of that, so it's still better than SMS period.

    Instantly", yeah, sure... WhatsApp isn't really used for secure communication (I wonder why), but by normies who don't know any better. I doubt most users would care if something like this came to light

    You have no idea how many businesses use WhatsApp and have their trade secrets on there even. And it is used for secure communication in the real world, in a lot of cases.

    Sealed sender has nothing to do with this, as it applies to messages. You can still build a profile of users based on which users submit which hashes for contact discovery, without the need for them to send any message to those contacts at all.

    That assumes the server can see which hashes belong to which account. Signal’s contact discovery is designed to match contacts inside a protected enclave, so the server doesn’t get a readable list of them. It may see that a lookup happened, but that alone doesn’t show it can build a contact profile

    Not necessarily true, and also not really relevant to the analogy. If a hardware component would spy on basically everything, I'd find it weird to just say "Hey Intel, you already have all my data any way, so I'm just going to freely give it to Meta as well."

    Well, have you ever heard of Prism? But I do agree that the less companies you give your data, the better. But still... I don't really think in this scenario it would make any difference.

    You're putting too much blind trust in reverse engineering. And since you seem to be insistent on naively trusting Meta and proprietary applications, I won't try to convince you otherwise. Have fun, I guess.

    No, I'm not. You're putting way too much trust into open source software, since I'm sure you don't read all the lines of code that there are. You're basically doing the same thing as me.

  • source
  • parent