Path: ...!2.eu.feeder.erje.net!feeder.erje.net!weretis.net!feeder8.news.weretis.net!reader5.news.weretis.net!news.solani.org!.POSTED!not-for-mail
From: Richmond <dnomhcir@gmx.com>
Newsgroups: comp.mobile.android
Subject: Re: whatsapp interoperability
Date: Wed, 11 Sep 2024 20:26:56 +0100
Organization: Frantic
Message-ID: <86zfoekn3z.fsf@example.com>
References: <lk16jsFrc4qU3@mid.individual.net>
	<lk3rldF97p4U1@mid.individual.net> <lk3rvcF85pkU3@mid.individual.net>
	<lk8tjgF2385U1@mid.individual.net> <86ttemlcml.fsf@example.com>
	<lkdtt9Fp3gkU1@mid.individual.net>
MIME-Version: 1.0
Content-Type: text/plain
Injection-Info: solani.org;
	logging-data="135998"; mail-complaints-to="abuse@news.solani.org"
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.2 (gnu/linux)
Cancel-Lock: sha1:Lhjr+8Fzk1NeZEwId8arJDO3n9w= sha1:VDkTnQizXqiva0GMoVGXq9V9J5s=
X-User-ID: eJwFwYEBgDAIA7CXBrRFzhGR/09YwpDpS4gCl+vi4GShPSz2zEtnjdoWqMTAbPBg0v8y9QX+uBAU
Bytes: 2563
Lines: 40

"s|b" <me@privacy.invalid> writes:

> On Wed, 11 Sep 2024 11:15:46 +0100, Richmond wrote:
>
>> Whatsapp uses the Signal protocol. How did they make open source into
>> closed source? "The Signal Protocol is licensed under the GNU Affero
>> General Public License (AGPLv3). This license requires that the complete
>> source code of the licensed work and any modifications be made available
>> under the same license."
>
> I don't know the details, but someone explained it like this:
>
> A Signal user sends a message to a WA user. The encryption is:
>
> aZ*2
>
> When it reaches the servers at WA something gets added:
>
> aZ*2[Vy*3]
>
> This way data could be gathered by Meta. Meta doesn't give access to
> Signal to check if something like this doesn't happen.
>
> I don't know if I'm explaining correctly, but if Signal doesn't want to
> cooperate they must have a damn good reason.

What data do they collect? The FAQ says they use E2EE.

https://faq.whatsapp.com/820124435853543

"Privacy and security is in our DNA, which is why we built end-to-end
encryption into our app. When end-to-end encrypted, your messages,
photos, videos, voice messages, documents, status updates, and calls are
secured from falling into the wrong hands."

Signal used to be able to send SMS messages. I think as long as you know
that a message is not going to be E2EE and you can choose to go ahead it
is OK.

In order to display a message it has to be decrypted, and that's true
for all apps, so at that point an app could collect data.