Comment on Lawsuit Alleges That WhatsApp Has No End-to-End Encryption

• snowboardbumvt@lemmy.world ⁨5⁩ ⁨days⁩ ago

  Reverse engineering is theoretically possible, but often very difficult in practice.

  I’m not enough of an expert in cryptography to know for sure if packet inspection would allow you to tell if a ciphertext could be decrypted by a second “back door” key. My gut says it’s not possible, but I’d be happy to be proven wrong.

  source

  • black0ut@pawb.social ⁨5⁩ ⁨days⁩ ago

    Hell, as far as I know, E2EE would be indistinguishable from client to server encryption, where the server can read everything. You can see the channel is encrypted, but you can’t know who has the other key.

    source

    • herseycokguzelolacak@lemmy.ml ⁨4⁩ ⁨days⁩ ago

      The easiest way to break E2EE is to copy your private key to Meta’s servers. It’s very easy to implement, and close to impossible to detect.

      source
• escapeVelocity@lemmy.ca ⁨5⁩ ⁨days⁩ ago

  Outside of open-source. That shit is usually illegal

  source

  • CeeBee_Eh@lemmy.world ⁨5⁩ ⁨days⁩ ago

    It isn’t. Otherwise security research would never happen for proprietary software and services.

    source

    • escapeVelocity@lemmy.ca ⁨4⁩ ⁨days⁩ ago

      SureSure no white hat never been sued before

      source
    • drmoose@lemmy.world ⁨4⁩ ⁨days⁩ ago

      In the US CFAA is so draconian that in certain aspects it can be very illegal to reverse engineer code behind explicit ToS which whatsapp make you agree to click-wrap upon installing the app. So Meta could easily sue you with very good chance of winning. I work in security and reverse engineer a lot of stuff but just because my company has lawyers that will protect me (also I’m not an american) but generally americans are super fucked here.

      source
• Sinthesis@lemmy.today ⁨5⁩ ⁨days⁩ ago

  Now you just need Meta to allow you on their networks to inspect packets and reverse engineer their servers because as far as I know, WhatsApp messages are not P2P.

  source
• herseycokguzelolacak@lemmy.ml ⁨4⁩ ⁨days⁩ ago

  No it is not. Whatsapp gets several updates a month. How do you keep up with that rate?

  source