Conversation

Micah
@micahflee
Wow that is really bad. "If you're using a custom ROM or rooted phone, your [WhatsApp] messages won't be protected with end-to-end encryption."
Quote Tweet
Kilian
@kiliankoe
PSA: Using WhatsApp on a rooted Android device or running a custom ROM? No crypto for you. faq.whatsapp.com/en/android/260
10
94
Daniel Micay
@DanielMicay
Replying to
@micahflee
It's being misinterpreted. They're saying that their end-to-end encryption won't be able to protect people on alternative OSes, because they roll back many security features, break core parts of the security model and rarely ship full security updates even when available.
2
11
Daniel Micay
@DanielMicay
Replying to
@leftpaddotpy
and
@micahflee
No, not maybe. WhatsApp supports end-to-end encryption on other operating systems. This is a wording issue with their FAQ aimed at non-technical users. They aren't disabling end-to-end encryption on alternative OSes. It may be 2019, but there are still objective facts...
1
1
Daniel Micay
@DanielMicay
Replying to
@leftpaddotpy
and
@micahflee
Please stop spreading misinformation. The source code being unavailable does not mean that the code cannot be audited. It is also easily confirmed that this isn't the case. People spreading fake news like this need to stop. It's not okay. It's easy to make fact-based criticisms.
2
1
Daniel Micay
@DanielMicay
Replying to
@leftpaddotpy
and
@micahflee
It's a poorly worded attempt to say that an insecure endpoint can compromise the end-to-end encryption. They're generalizing devices running a stock OS as secure and those with app-accessible root or a 'custom ROM' (which has connotations beyond 'alternative OS') as insecure.
1