They didn't actually crack WhatsApp traffic. Someone in the group probably just reported it.

WhatsApp's insecurities are that Meta has access to a full network graph of all users' contacts, and that it wants to upload an unencrypted backup to Google or Apple by default. If there was an actual backdoor in the closed-source crypto, I highly doubt they'd give Dubai police access to it.

▲

lamasery 37 minutes ago | parent | next [-]

WhatsApp put a (weirdly tame and unremarkable?) image a friend of mine tried to post into review and ended up never letting it show up in a thread, the other day. He was able to post a screenshot of it sitting in his view of the thread, and the message about why it was temporarily delayed (it never showed up, though).

This was in a chat of close friends, not one of those weird huge spammy groups of strangers or something. Nobody was using the report button on him, lol.

We’re all in the US. WhatsApp has some level of awareness of the images you’re sharing, apparently.

▲

jmye 4 hours ago | parent | prev | next [-]

I’ll preface this with agreeing that you’re probably correct.

That said, it wouldn’t surprise me at all if Meta built an intentional backdoor, and that someone else (or many someone else’s) found it and was utilizing it.

	▲	breisa 3 hours ago \| parent \| next [-]
		If such a backdoor exists, it is probably cryptographically secured to prevent "unauthorized" access. E.g. the xz backdoor was secured like that.
	▲	svachalek 3 hours ago \| parent \| prev [-]
		Or that the government offered Meta $50 for a list of agitators and they said why not. Given Meta's track record it's totally on brand.

▲

righthand 3 hours ago | parent | prev [-]

> They didn't actually crack WhatsApp traffic. Someone in the group probably just reported it.

So you don’t know any of this? You have no proof someone in the group reported it. You have no proof they weren’t using a backdoor they found with or without Meta knowing this…

You’re just here to defend Meta then?

▲

constantius 3 hours ago | parent | next [-]

The poster is right, it's very unlikely that WA has been backdoored/cracked, and it seems obvious why.

A backdoor to the world's largest messaging app would be extremely valuable: while it can exist, it's unlikely that it'd be so widely available the UAE police can use it for such insignificant cases. And because of its value, no one with access to it (the US, the UAE, Meta) would want it to become public knowledge through such an insignificant case, because everyone they really want to spy on would switch to Signal in a second.

▲

righthand 2 hours ago | parent [-]

It’s weird that the notification backdoor never gets talked about, but your Whatsapp messages are decrypted in plain sight when the text content is shipped through the notification services. This is mentioned always for Signal but Whatsapp always gets a pass even though it’s a way more malicious company and indeed probably using that hole to profile/track it’s users.

The only response is “oh no Whatsapp cant leak anything the security model of how chat messages are backed up is a-okay!”

	▲	unethical_ban 2 hours ago \| parent [-]
		Signal got called out for it because it actually happened to a user with the police. Of course it affects all apps. It's also local, so irrelevant to the discussion of networked/encryption hacks someone alleged above.

▲

ljlolel 3 hours ago | parent | prev [-]

It’s just Occam’s razor chip out

Way easier for one of a group of humans to report than for a conspiracy hack