WhatsApp communication are end-to-end encrypted, right? Well, yes, but it still leaks confidential information. Here's an interesting story that happened to me this morning... 1/
Show this thread
-
More specifically, what happened is that WhatsApp rendered a rich preview of the link in my chat feed. That required that a request went out to YouTube with enough information for them to know it was me, and to proceed to use that leaked data to serve "relevant ads" to me. 6/
Show this thread
Conclusion: WhatsApp, despite being end-to-end encrypted, still leaks private information by making non-sandboxed queries to external web sites. It should not do that. 7/
-
-
Any external queries from the WhatsApp client needs to be strictly sandboxed and anonymized. Otherwise, its privacy claims are a joke. 8/ and end of thread.
Show this thread -
At his point, having learned more about how those previews are supposed to be working, I'm a lot more puzzled about what really happened. If somebody has an independent repro, please chime in. Thanks to y'all who participated in this chat.
Show this thread -
So what did I learn today? * WhatsApp generates previews at the src, not the dest * GBoard is scary, but irrelevant * Coincidences exist * Better to ask questions than jump to conclusions * That you're paranoid doesn't mean they're not after you * Twitter is exhausting
Show this thread
End of conversation
New conversation -
-
-
WhatsApp livestreams your entire address book off your device to Facebook—an advertising network. It does this with your explicit consent and no means to opt out. WRT privacy, “leaks” are hardly the issue. The core business model is the issue.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
This Tweet is unavailable
-
-
@threadreaderapp unroll please -
Hi! please find the unroll here: Thread by
@bleroy: "WhatsApp communication are end-to-end encrypted, right? Well, yes, but it still leaks confidential information. Here's a […]" https://threadreaderapp.com/thread/1127281591112196096.html … Have a good day.
End of conversation
New conversation -
-
-
Interesting. Wonder if anyone has published more information on this.
cc @F_Kaltheuner@quarkslab@insitusec@jeffvanderstoepThanks. Twitter will use this to make your timeline better. UndoUndo
-
-
This Tweet is unavailable
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.