That's when you lost me. Either teach your boomer relatives to use Signal, Matrix, or, at the very least, Telegram. Otherwise, let them reach to you via Facebook which you open only in web browser in containerized tab.
Otherwise, let them reach to you via Facebook which you open only in web browser in containerized tab.
I just hire a rando guy from a different country to become me on Facebook. Then I have them email screenshots to a different email. A separate person gets those emails and prints them out. They mail it to a PO box, which gets picked up by a whole different person. The handoff happens at 615pm at the subway on Broadway Ave.
I open the handoff. It's pictures of my niece celebrating her 6th birthday. I give the guy a thumbs up. He takes that thumbs up, translates it back to paper and reverses the whole process.
It takes 6 weeks for me to respond. But that's the price of security.
No its not. Only your chat is E2E, other meta data is collected. Who you have saved in your contacts, who you are talking to. Your friends, family co-workers etc. They are all connected to you.
So if only one of your friends were to voice their opinion about a controversial opinion (eg palestine, luigi etc) it will be linked to you.
I thought WhatsApp used the same encryption tech/lib/method as Signal? But again, as you said, still only for chats?
But how would anyone know if we're talking about Palestine or whatever, if chats are encrypted? Or do you mean talking about Palestine elsewhere where it isn't encrypted, and then it's linked to me via WhatsApp connecting us?
Yes, if someone talks about it on fb or insta, it would be immediately linked with their phone number which is also a requirement for Whatsapp.
I was recently watching an interview with some tech workers who were fired for voicing their opinion against israel and one of them was from Meta and she confirmed that meta is closely working with IDF especially sharing WhatsApp meta data.
It's closed as fuck source. They went as far as sending cease and desists to third party client developers.
It's tied down to phone number and shares it with everyone you talk to
It's bolted down to gdrive
Only boomers use it to send trashy GIFs to each other
That's about all I have, but I've never actually used it. Maybe someone else could chime in with more reasons, but for me those are already enough to stay away from it as far as possible.
In Russia, too. When I need them I just call them and pretend to be ultra-Z-patriot and do my best to be extra annoying while complaining about them using an illegal app made by a designated extremist organization. Works well enough for them to at least offer another option.
Last point isn't true unfortunately. My late 20s to mid 30s coworkers use it almost exclusively, as well as most of my customers, and even some businesses (AirBnB, airlines)
The same reason as... say, you can't say Gran Turismo works on PC, even though its compatible with PlayStation's remote play.
And I don't buy the E2EE argument. It's not impossible to have multiple "ends" on each side e2e. Heck, they've done it themselves... In 2022. Given their track record, I'd suspect they're just doing something shady in the app and are being overly protective because of it.
But we're not seeing some screen sharing of the android app. We're seeing a completely separate web app, running in the browser. The only difference is from where it is syncing its messages. It's a real web app.
And it works this way because chats are only stored on a single "main" device. Then they sync to connected peripheral clients as needed. I think that's a good thing, to be honest. I don't see that as a negative thing. It's not stored on any server (I assume(?), due to the current behavior), which is nice.
But we’re not seeing some screen sharing of the android app
We're getting into weeds and details of what is remote and approaching the grey line of question of ownership in online software, services and games. Fact of the matter is, thing didn't work without a phone for 13 years. Or if a phone is not Android or iOS. Or if a phone is dead. Or if you left your phone at car or at home. Or if a phone has broken camera. Or if it's out of service. Or if the app has been killed by power or memory optimizer. Or so on and so forth, which is already a terrible UX worthy of criticism.
It’s not stored on any server
It is stored as an encrypted blob on your gdrive. It asks you about it on every login. Otherwise, how would you recover your chat history if you lost or changed your phone.
Locking the data onto one device is actually worse in terms of security. Assume someone stole your phone or just found it after you lost it. Additionally, assume that screenlock has been bypassed - most Android devices are very bad in this regard. Now the other person has access to your messenger and you can't even kick them out. Not until you go to the carrier and do the whole recovery rigamarole, and get a replacement phone, assuming you don't actively carry a spare one with an active session with you.
[...] Or so on and so forth, which is already a terrible UX worthy of criticism.
I mean... You get what you get with the provided infrastructure. If you want decentralized storage, this is what you get. I think it's a good thing. The UX is fine from my perspective. I'm not using WhatsApp for sensitive data or conversations that I need to save indefinitely. So for that purpose, it's good enough, UX wise. I use the web app all the time, too.
It’s not stored on any server
It is stored as an encrypted blob on your gdrive. It asks you about it on every login. Otherwise, how would you recover your chat history if you lost or changed your phone.
That's different. That's not what I mean by your messages being "stored on a server". What you're talking about is an incremental backup sync. It's not where messages are fetched when you receive messages while chatting. Not to mention it's entirely optional last time I checked. I have it disabled and it doesn't nag me about it. 🤷♂️
The whole security aspect is surely an issue regardless of app, if the perpetrator is looking to steal your data rather than your hardware. If they have your phone, and bypass the lock screen, then they have your 2FA app and everything. You're fucked regardless of app.
That’s different. That’s not what I mean by your messages being “stored on a server”. What you’re talking about is an incremental backup sync. It’s not where messages are fetched when you receive messages while chatting. Not to mention it’s entirely optional last time I checked. I have it disabled and it doesn’t nag me about it. 🤷♂️
This "incremental backup" is literally the same thing that's sitting on your phone and from where the messages are read from and where new messages are appended to. So it's technically is being read from there, e.g. if you receive a message, uninstall whatsapp before opening reading it, re-install and restore from backup, you've technically got a message from google's server. Secure messengers are not space magic, it's just a database, probably even just JSON file encrypted with some homebrewn public key crypto derived from a seed phrase. The only difference between WA and other messengers is that Facebook is for some reason very adamant about keeping it at your phone, and also shifts the burden of storing messages to google rather than themselves for some reason.
The whole security aspect is surely an issue regardless of app, if the perpetrator is looking to steal your data rather than your hardware. If they have your phone, and bypass the lock screen, then they have your 2FA app and everything. You’re fucked regardless of app.
Nope. I can literally hand you my unlocked phone and you wouldn't be able to do anything malicious with it because everything is behind passwords, passkeys, and fingerprint verifications. Last one, not a big fan of, but it's the only option for some of the apps. You can try some advanced techniques like memory dumping and scavenging keys from there, but if you're too slow and/or I get to any other device first (even not mine), then there wouldn't be anything to recover from it at all.
It freaking does. I want to use good apps, but I can't use good apps. In fact, the only people I am able to convince are my fiancee and my one friend, both female, both tech illiterates (boy let me tell you).
It's kind of funny. They're buying the fact that big tech is "spying"/collecting data on us more than my more tech-savvy (male) friends. Or at least, it matters more to my less techy peers, it seems. Maybe my male friends have too much pride, and/or are too lazy to switch? Idfk.
Always talking about "I don't want another app". Bitch all we do is just press notifications anyway. Who cares which app it takes us to if you don't care about privacy. I'm the one who cares, humor me! 🥲