• baseless_discourse@mander.xyz
      link
      fedilink
      arrow-up
      14
      ·
      edit-2
      9 months ago

      E2E do not prevent client side blocking. Whatsapp app can get image that it needs to block from a remote, then check the recieved message against the image it needs to block; then block the image when it needs to.

      Obviously not trying to justify their behavior, but it us very important to know that E2EE is not a elixir for privacy and security.

      • jet@hackertalks.com
        link
        fedilink
        English
        arrow-up
        3
        ·
        9 months ago

        Right, the mantra needs to be end-to-end encryption, plus open source. For full user agency.

        If it’s closed source the agent doesn’t have to operate on your behalf.

        • 𝕸𝖔𝖘𝖘@infosec.pub
          link
          fedilink
          English
          arrow-up
          3
          ·
          9 months ago

          Oh that’s cool! That doesn’t really stop them from snooping as you type the message, though. I know fb does (or used to), so why not their chat app. Also, if all they’re doing with the video censoring is checking the hashes, then they’re not snooping (though they still shouldn’t censor chats).

          • ganymede@lemmy.ml
            link
            fedilink
            arrow-up
            2
            ·
            edit-2
            9 months ago

            hashing is still a form of snooping tbh. especially when paired with other metadata

            but ofc its not as direct

        • Knusper@feddit.de
          link
          fedilink
          arrow-up
          4
          arrow-down
          1
          ·
          9 months ago

          It kind of depends on your definition of “end-to-end”. Normally, what people mean is from one communication partner (i.e. human) to the other. If you use a software to do the encrypting and decrypting, it should be open-source and verifiable. The WhatsApp client is not that. It is an attack vector and it takes in your message in unencrypted form.