WhatsApp is now using the exact same technology as Signal, and all communication is end to end encrypted by default. For technical details you can check out these links:
https://whispersystems.org/blog/whatsapp-complete/
https://www.whatsapp.com/security/WhatsApp-Security-Whitepaper.pdf
"export your data"
more like export a fraction of your data
in their privacy statement they explicit say what they collect (https://www.whatsapp.com/legal?lg=en#privacy-policy-information-we-collect) and the fun part begins at the automatic collection.
Where is this data, that is way more interesting!
I'm sorry for your loss. I would recommend contacting WhatsApp directly to see how they could help under these circumstances. https://www.whatsapp.com/contact/
I wouldn't want you to risk loosing those memories.
>Unsurprisingly, this data sharing policy with Facebook and its other services doesn't apply to EU states that are part of the European Economic Area (EEA), which are governed by the GDPR data protection regulations.
Shitty that facebook is doing this, who knows which region they will apply this policy next.
Be aware it is also necessary to OPT-OUT in order to prevent "[sharing] my account information with Facebook to improve my Facebook ads and products experiences", and can only be done in the first 30 days of registering. All told, WhatsApp is a poor choice for privacy.
The encryption is only for the messages. There is a ton of valuable personally identifiable information that they can (likely are) logging.
From whatsapp privacy policy
"We collect information about your activity on our Services, like service-related, diagnostic, and performance information"
"...how you use our Services, your Services settings, how you interact with others using our Services, and the time, frequency, and duration of your activities and interactions, log files, and diagnostic, crash, website, and performance logs and reports."
"...the features you use like our messaging, calling, Status, groups (including group name, group picture, group description)"
"We collect device and connection-specific information when you install, access, or use our Services. This includes information such as hardware model, operating system information, battery level, signal strength, app version, browser information, mobile network, connection information (including phone number, mobile operator or ISP), language and time zone, IP address, device operations information, and identifiers (including identifiers unique to Facebook Company Products associated with the same device or account)."
"Even if you do not use our location-related features, we use IP addresses and other information like phone number area codes to estimate your general location (e.g., city and country). We also use your location information for diagnostics and troubleshooting purposes."
Be aware it is also necessary to OPT-OUT in order to prevent "[sharing] my account information with Facebook to improve my Facebook ads and products experiences", and can only be done in the first 30 days of registering.
Based on the opt-out instructions, they say it will not use your acct info for "Facebook ads and products experiences" - it sounds as if there are some limitations there (e.g. Find friends may not link your number, but FB can ban you across all services). What other parts of the Whatsapp privacy agreement would be violated here?
There's also this catch-all at the end:
> And finally, if WhatsApp suddenly changes how it collects, uses, or shares new data, the FTC is urging the company to let users opt out — or at the very least "make clear to consumers that they have an opportunity to stop using the WhatsApp service."
It sounds like they're fulfilling that.
Citește mai bine, treaba asta nu se aplică la UE.
https://www.whatsapp.com/legal/updates/terms-of-service-eea
Partea asta:
>Affiliated Companies. We are part of the Facebook Companies. As part of the Facebook Companies, WhatsApp receives information from, and shares information with, the Facebook Companies as described in WhatsApp's Privacy Policy, including to provide integrations which enable you to connect your WhatsApp experience with other Facebook Company Products; to ensure security, safety, and integrity across the Facebook Company Products; and to improve your ads and products experience across the Facebook Company Products. Learn more about the Facebook Companies and their terms and policies here.
Se aplică doar la restul:
That would be metadata, i.e. when you send messages, to whom, etc. This information is not e2e encrypted, whereas the actual content of the messages is.
EDIT: Take a look at this if you'd like to opt-out of metadata sharing between WA and FB. I'm not sure it will block all of it—I recall a sneaky clause somewhere that seemed to indicate otherwise—but you could give it a try if you haven't already.
PSA: You can't: https://www.whatsapp.com/faq/en/general/26000016
>The Facebook family of companies will still receive and use this information for other purposes such as improving infrastructure and delivery systems, understanding how our services or theirs are used, securing systems, and fighting spam, abuse, or infringement activities.
> WhatsApp Plus is an application that was not developed by WhatsApp, nor is it authorized by WhatsApp. The developers of WhatsApp Plus have no relationship to WhatsApp, and we do not support WhatsApp Plus. Please be aware that WhatsApp Plus contains source code which WhatsApp cannot guarantee as safe and that your private information is potentially being passed to 3rd parties without your knowledge or authorization.
Simply update the app from the App Store or from here to get the new icon.
As per the iOS tradition, it uses the same gradient as Messages and FaceTime, so they form a nice green trio :)
This change is suspiciously aligned with the recent WhatsApp for iPad "announcement" (well, beta-test), which makes me think they want to give better care towards the Apple platforms, possibly hiring some people or moving them around...
Yeah but honestly, good luck. It just seems so unfeasible.
Especially notable is WhatsApp. WhatsApp is wayyyyy too big, and owned by a company with more power than a lot of sovereign governments.
If you think Facebook won't go to bat for their absurdly expensive acquisition's core tenet, I believe youd be mistaken.
Not to say FB are the good guys here, but WhatsApp doubled down enough that a ban is the only solution. And again, to the UK interwebs pants-shitting committee, good luck.
Whatsapp offers api for businesses, I guess that's what KLM is using. It's even in their customer stories
It's going to get worse as more and more business integrate whatsapp.
WhatsApp will become like facebook messenger.
It was the reason why FB pushed the privacy policy. This is for whatsapp business people on wa business on what they can sell on WhatsApp: https://www.whatsapp.com/policies/commerce-policy/
For now your options are only block and report See: https://faq.whatsapp.com/android/security-and-privacy/how-to-report-a-catalog-or-business/
Mais que um bot, é possível falar com atendentes através da API Business do WhatsApp. O problema é que o Facebook (empresa hoje dona do WhatsApp)seleciona quem ela dá acesso a API. Então a não ser que você seja uma empresa do naipe do Banco do Brasil, o pedido é recusado.
Fiz esse pedido para a empresa que eu trabalhava e orientei vários provedores regionais de acesso à internet a fazer o pedido. Eu e todos estes que recomendei usam uma plataforma de atendimento a cliente (Zendesk) que suporta a tal integração com o WhatsApp. Seria fantástico: desde reclamar de internet fora do ar, agendar visita técnica e pedir segunda via do boleto, tudo poderia ser feito pelo WhatsApp com o sistema que implementei.
Infelizmente o Facebook/WhatsApp não nos julgou dignos de usar o serviço e recusou todos os pedidos. Além do BB apenas a Decolar.com que eu conheço que usa o WhatsApp API mas ambas é para mensagens automáticas como essa. O que eu propunha que seria inovador é justamente atendimento com humanos, suporte técnico.
Como odeio WhatsApp.
Ordens judiciais são incrivelmente inespecíficas e quando se arriscam a usar termos técnicos, as consequências são desastrosas. Basicamente dizem "impedir acesso ao site/serviço XPTO". Algumas empresas preferem fazer isso na camada DNS (o que é burlável), a maioria faz bloqueando os blocos de IPs mesmo na camada de roteamento.
Voltando ao exemplo do WhatsApp, eles mesmos divulgam uma lista dos IPs deles, o que facilita o bloqueio.
E o explicatie mai detaliata aici.
Cateva chestii interesante:
> WhatsApp's revised policy also spells out the kind of information it gathers from users' devices: hardware model, operating system information, battery level, signal strength, app version, browser information, mobile network, connection information (including phone number, mobile operator or ISP), language and time zone, IP address, device operations information, and identifiers (including identifiers unique to Facebook Company Products associated with the same device or account).
>
> "Even if you do not use our location-related features, we use IP addresses and other information like phone number area codes to estimate your general location (e.g., city and country)," WhatsApp updated policy reads.
​
>Unsurprisingly, this data sharing policy with Facebook and its other services doesn't apply to EU states that are part of the European Economic Area (EEA), which are governed by the GDPR data protection regulations.
In ideea asta adaug si eu ca am primit notificare acum pe Whatsapp cu modificarile DAR fara mentiune de integrarea cu Facebook, pe care altii din afara UE aparent o au.
Make of this what you will.
Download it from the actual WhatsApp website (https://www.whatsapp.com/android/) and just run it without battery optimisation.
Using it this way on my s7 for the last few weeks with no Google play services.
European Union have different TOS than rest of the world.
The EU follows Whatsapp Ireland terms and condition and the rest of the world follows the Whatsapp LLC terms and conditions.
As a eu citizen, we got the notification for the new terms, but it was missing the third bullet point that appears on the screenshot that someone shared in another reply.
https://whispersystems.org/blog/whatsapp-complete/
https://www.whatsapp.com/security/WhatsApp-Security-Whitepaper.pdf
For some reason the direct link isnt working. Go to https://www.whatsapp.com/security/ and right click on the link to download the pdf
I termini e le condizioni dovevano cambiare comunque per delle modifiche a Whatsapp For Business.
I termini di servizio sono di due tipi: quelli per gli utenti che risiedono nella regione europea, e quelli per tutti gli altri (che includono la modifica sulla condivisione dei dati).
You're probably confusing "information about you" with "your messages". They changed their privacy policy to collect and store your name and phone number and other meta-data. They promise in their privacy policy, which has been confirmed by countless security experts that the data is encrypted end-to-end. Some flaws have been found in the implementation so far, but they have been swiftly patched.
>Your Messages. We do not retain your messages in the ordinary course of providing our Services to you. Once your messages (including your chats, photos, videos, voice messages, files, and share location information) are delivered, they are deleted from our servers. Your messages are stored on your own device. If a message cannot be delivered immediately (for example, if you are offline), we may keep it on our servers for up to 30 days as we try to deliver it. If a message is still undelivered after 30 days, we delete it. To improve performance and deliver media messages more efficiently, such as when many people are sharing a popular photo or video, we may retain that content on our servers for a longer period of time. We also offer end-to-end encryption for our Services, which is on by default, when you and the people with whom you message use a version of our app released after April 2, 2016. End-to-end encryption means that your messages are encrypted to protect against us and third parties from reading them.
source: https://www.whatsapp.com/legal/#privacy-policy-information-we-collect
Amit bhai is said to made his initial money from the bootlegging of alcohol and he used the initial investment to conquer Gujrat and then India so i think it won't be legalized anytime soon.
Very nice! The implementation seems to be by Trevor Perrin, who designed Noise and the Axolotl/double ratchet protocol as well, which is being used by Signal and Whatsapp.
Edit: Whatsapp does use the Noise protocol, see their whitepaper.
Well according to their rules it is the rules.
>We remove over two million
accounts per month for bulk or automated behavior — over
75% without a recent user report. These efforts are
particularly important during elections where certain groups
may attempt to send messages at scale. While there are
many actors trying to abuse the free service we provide, we
are constantly advancing our anti-abuse operations to keep
our platform safe.
https://www.whatsapp.com/safety/WA_StoppingAbuse_Whitepaper_020418_Update.pdf
I actually don't think it means much. They are just looking for a mobile developer with experience on different platforms, Windows Phone including.
You can gather a huge amount of useful information - for marketing purposes - without ever actually reading the content of any message sent.
Where it's used, when it's used, frequency of use, type of use, number of friends, type of device, service provider. Even things like the speed you write can inform a profile of what kind of person you might be.
It's all in their privacy policy
Then there's all the information your less tech savvy friends spray into these things about you. There's 'netmyth' that LinkedIn somehow hack into Gmail servers and scrape all your emails, otherwise how could they possibly know who you talk to etc etc - they don't hack anything, it's the other people who just click buttons and tell these companies all your information.
Dat is niet waar, WhatsApp gebruikt sleutels die in principe alleen bij jou en de andere persoon waarmee je communiceert opgeslagen zijn. (Bron) Uiteraard is het dan wel weer moeilijk te verifiëren dat die sleutels niet stiekem een keer naar WhatsApp zelf gestuurd worden, maar de berichten zijn in de basis dus alleen leesbaar voor jezelf en de ander.
The creator of Signal approved it because they implemented his protocol, which is the gold standard for encryption. WhatsApp still shares data with Facebook:
> afaik wird man sich dagegen entscheiden können Daten an Facebook zu geben.
Nein. Die Daten gehen in jedem Fall an FB und werden dort genutzt. Deine Widerspruchsmöglichkeit bezieht sich einzig auf den Bereich Werbeoptimierung.
> [...]
> Die Facebook-Unternehmensgruppe wird diese Information trotzdem erhalten und für andere Zwecke, wie Verbesserung von Infrastruktur und Zustellsystemen, des Verstehens der Art der Nutzung unserer bzw. ihrer Dienste, der Absicherung der Systeme und der Bekämpfung von Spam, Missbrauch bzw. Verletzungshandlungen.
Quelle: WhatsApp.com
I wrote a detailed blog post on the news + how to opt-out (when they will start sharing the data) here on nowgeeks.com but if you feel more comfortable reading it on WhatsApp's website, it's here https://www.whatsapp.com/faq/en/general/26000016 :)
Congratulations. You now have Whatsapp on your phone!
Whatsapp is also secured, protected by end-to-end encryption, but Whatsapp is not seen as the best choice anymore since they are in bed with Facebook.
It's still against Whatsapp's terms and conditions to use (and develop) this. Using third-party apps already got some users banned from Whatsapp for a day.
Use at your own risk.
>If you do not see two blue check marks next to your sent message
>* The recipient may not have opened your conversation. >* The recipient may be using an outdated version of WhatsApp.
>We joined the Facebook family of companies in 2014. As part of the Facebook family of companies, WhatsApp receives information from, and shares information with, this family of companies. We may use the information we receive from them, and they may use the information we share with them, to help operate, provide, improve, understand, customize, support, and market our Services and their offerings.
https://www.whatsapp.com/legal/#terms-of-service
>...However, your WhatsApp messages will not be shared onto Facebook for others to see. In fact, Facebook will not use your WhatsApp messages for any purpose other than to assist us in operating and providing our Services.
See, they said Facebook will NOT use YOUR whatsapp messages for any OTHER purpose. I got no worries now haha ;)
Do not use Nemory's Whatsapp. It's a third party client that he ripped off of another Developer and was selling.
Use the official whatsapp apk via https://www.whatsapp.com/android/
Use Whatsfixer by Cellninja. Have a SD Card in.
If it doesn't work, delete everything Whatsapp deleted off your phone. Go into your SD card and delete everything Whatsapp related. Make sure to make backups if you need to. Try again.
If it doesn't work, not much you can do.
They make the claim, and they have a whitepaper.
If you are sufficiently paranoid that you cannot believe they would be truthful here, you should probably just use Signal (based upon the same protocol). ~~Of course, Im not sure Signal is open source either but~~ It's a lot more trustworthy given the folks behind it.
EDIT: It is. I was thinking of the fact that it is centralized, which some find worrying.
Quick clarification - You are now sending videos over MMS. This will mostly limit the video size to around 1 MB. Using iMessage would compress the video a little and send via the data connection through Apple servers.
Files services/storage like Dropbox and Google Drive store the video and you provide a link to the person. They click and view. The full resolution of the video is downloaded (generally 720p or 1080p with modern phones). I don't like this method because of the large amount of data being used by the person who clicks the link. It also uses a large amount of data to upload the video.
I prefer using a service like WhatsApp. This is a free and extremely popular messaging service. It is compatible with Android and Apple phones. It will only compress the video as needed to send. It is also very reliable. One of the many reasons it has become so popular. Side note: WhatsApp was purchased by Facebook in 2014. Some folks consider this a negative. I personally like the money that Facebook brings to the table for sustaining their growth and innovation. e.g. They recently added video calling.
> If the message is undelivered for thirty (30) days, the undelivered message is deleted from our servers. Once a message has been delivered, it no longer resides on our servers.
Fonte: https://www.whatsapp.com/legal/
Todo mundo sabe que isso é mentira, a verdade é a seguinte:
1 Tracinho: A rede Globo está conferindo e aprovando a sua mensagem.
2 Tracinhos: A mensagem subiu pra sala do seu Schroder pra ele aprovar.
2 Tracinhos azul: Seu Schroder liberou a mensagem.
No need for a module, the version you can download from the whatsapp homepage has an option to disable it (and still receives updates from the Play Store).
Settings --> Account --> Privacy --> uncheck read receipts
https://www.whatsapp.com/security/
Their whitepaper is here if you want to find me an independent company that has certified them as actually following the signal protocol they claim to.
Also the keys for encryption come from whatsapp servers so they can execute a man in the middle attack very easily and we have to take them on their word that they are not doing so. This is the point of outside companies doing independent certification (which i can't find online).
Even if you trust Facebook, even after all the crap they have done. I don't see the need to get rude the way you were. I was being noncommital because I didn't want to look up sources at the time but I actually do work in IT and am familiar with these concepts.
I won't be responding to further messages in this thread btw.
Unsurprisingly, this data sharing policy with Facebook and its other services doesn't apply to EU states that are part of the European Economic Area (EEA), which are governed by the GDPR data protection regulations.
To add to that
Whatsapp uses signal encryption for end to end in direct chats. Group chats are encrypted to the members, but stored on the server, and then send to the members of that chat group. The messages are stored until every message is received or they time out.
Live location, status updates, etc are all encrypted.
Source : https://www.whatsapp.com/security/WhatsApp-Security-Whitepaper.pdf
Whatsapp does a decent job on privacy compared to other organisations. It uses the Signal Protocol for end to end encryption and a different key for every message, deletes delivered messages from their servers, and deletes undelivered messages after 30 days. Allegedly.
They would be able to see with whom you are communicating and when, but not the contents of the messages. Their security white paper can be found here
I was under the assumption that the audit was performed by a third party but just as you said I can't find anything about it now.
This was the paper I was thinking about but it is indeed written by whatsapp themselves.
https://www.whatsapp.com/security/WhatsApp-Security-Whitepaper.pdf
I don't think they hold the encryption keys after the initiating session is established, everything is E2E. They only hold the information that /u/ccrraapp contacted /u/lfod14 at 3:00am but they don't know what we discussed. They cannot read the messages as they are encrypted by keys generated by users' devices.
Domanda di OP: > Ma la pubblicità che uno subisce su Facebook (tipo quella chiamata "Post consigliato") è possibile che derivi dalle conversazioni che questo fa con i propri contatti su whatsapp (essendo quest'ultimo ormai proprietà di Zuckerberg)??
> Facebook e le altre società del gruppo Facebook possono utilizzare le informazioni di WhatsApp per migliorare le esperienze degli utenti all'interno dei loro servizi come per fornire suggerimenti sul prodotto (ad esempio, suggerimenti relativi ad amici o collegamenti oppure a contenuti interessanti) e per mostrare offerte e inserzioni pertinenti.
La risposta alla domanda di OP è quindi sì.
> Agora que todas as conversas são criptografadas, eu não deveria estar protegido contra isso (na teoria)?
Nope.. Basicamente o WhatsApp tem o poder de forçar um usuário offline a mudar sua chave criptografica (sem avisar o usuario) e isso faz com que mensagens ainda não recebidas (sem os 2x V) sejam reenviadas com a chave criptográfica nova. Sem falar que o o WhatsApp ainda coleta metadados. Ou seja, um ataque de timing seria possivel (tipo, vc pesquisar por "restaurante gourmet qualquer", clicar em um resultado, e assim que você abre o site tem um daqueles botões "Nos curta no Facebook" ou "Curtir", e mesmo que você não esteja logado no face, quando seu navegador pediu para o facebook enviar o conteudo daquele botão, seu IP pode ser usado para determinar quem [qual conta] está pesquisando X, e ai após uns 10 mins você fala com uma pessoa que tem você marcado "namorado(a)" no face via whatsapp (o whatsapp pode não saber oque vc mandou via mensagem, mais ele sabe o quando você envia uma mensagem). E pronto, agora o Facebook sabe que você pretende ir no restaurante com seu namorado(a).
> o Facebook faz tracking do que você faz mesmo deslogado
Para aqueles interessados: Fonte Quote do site > "The Belgian privacy commission has told Facebook to stop tracking the internet activities of people who have not registered with the site or have logged out, after a “staggering” report showed alleged breaches of EU privacy law."
Blocking a /8 subnet removes a whole swath of people/companies/services that have nothing to do with Whatsapp.
Use a site like DNSdumpster.com to lookup all the subdomains for whatsapp.com and whatsapp.net and then surgically block only those IP's.
Or just look at the source, Whatsapp provides a current list of their service IP's at: https://www.whatsapp.com/cidr.txt
Keep in mind that if the app whatsapp can't connect via wifi, it will connect over the cell service, so I'm not sure what you hope to accomplish with a network/wifi block.
GrapheneOS user profiles are isolated and apps are sandboxed.
Check out https://grapheneos.org/features
As well as https://grapheneos.org/faq
You can obtain WhatsApp's non-play-store apk, directly from:
https://www.whatsapp.com/android/
Enable the background connection feature for non-FCM push notifications and give it a battery optimization exception.
You can use WhatsApp without any permissions. Btw, Without contacts permission, contact names turn to numbers, but work fine. Without storage permission you cannot view photos/files.
WhatsApp works on GrapheneOS
For users based in the EU or UK, this is also a violation of the GDPR article 7 (4) <https://gdpr-info.eu/art-7-gdpr/>
You can report it to your country's data protection authority, as well as complain to WhatsApp Inc directly: <https://www.whatsapp.com/contact/?subject=privacy>
While I do agree that Whatsapp has its fair share of issues with privacy and the data they do collect, but their encryption is really pretty good. They use the Signal Protocol, which is already used in Signal Messenger, as their encryption layer.
Here's there white paper on how the encryption protocol works on whatsapp: https://www.whatsapp.com/security/WhatsApp-Security-Whitepaper.pdf
A good video by Computerphile explaining the Signal protocol: https://youtu.be/DXv1boalsDI
depende do tipo de segurança.
em termos de privacidade do conteúdo (não lerem o que você manda), se o facebook estiver seguindo o procedimento descrito no artigo deles sobre a segurança do whatsapp, então sim. Eles fazem uso de criptografia baseada em curvas para geração de chaves, mas, pelo menos usam a curva 25519 que é considerada bem implementada e sem backdoors. O problema de criptografia elíptica é que vc tem que confiar que a escolha da curva não apresenta um backdoor.
em termos de privacidade de envelope, aí não é seguro. o facebook/whatsapp sabe o que vc manda (tipo de conteúdo) e para quem você manda. isso por vezes é suficiente para identificar até o próprio conteúdo. dois recém-namorados vão ter um padrão de uso maior em horários não comerciais. amigos vão ter um padrão mais esporádico de troca de mensagens. duas pessoas querendo fazer o mal podem ter busts de conversas rápidas, mas espaçadas... etc. eles podem não ver seus nudes, mas vão saber o que vc está tramando.
WhatsApp has end to end encryption. WA/FB is unable to read your messages. Here is a technical whitepaper on how it works, and here is their open source code if you want to really get hands-on.
> Ovvio, loro ufficialmente dicono che questa associazione non la fanno
Nah, lo dicono proprio chiaramente:
> Facebook e le altre società del gruppo Facebook possono utilizzare le informazioni di WhatsApp per migliorare le esperienze degli utenti all'interno dei loro servizi come per fornire suggerimenti sul prodotto (ad esempio, suggerimenti relativi ad amici o collegamenti oppure a contenuti interessanti) e per mostrare offerte e inserzioni pertinenti. (Termini di servizio di WhatsApp)
thank you for posting this... has helped me understand the protocol a lot more than I was able to with only the WhatsApp white paper (PDF) and the Marlinspike blog post
https://www.whatsapp.com/faq/en/general/26000016
>"The Facebook family of companies will still receive and use this information for other purposes such as improving infrastructure and delivery systems, understanding how our services or theirs are used, securing systems, and fighting spam, abuse, or infringement activities. "
Niinhän ne väittää. WhatsApp kerää tai on on ainakin joskus kerännyt tietoa käyttäjien keskusteluista. Näiden perusteella näytetään mainoksia muun muassa Facebookissa.
http://kioski.yle.fi/omat/testasimme-keraako-whatsapp-keskusteluista-tietoa-facebookin-mainoksiin
Sitähän ei voi tietää salataanko viestit päästä päähän oikeasti, mutta ainakin itsestä on hyvin vaikea uskoa sitä, että WhatsApp luopuisi tavastansa tehdä rahaa käyttäjillä. Ilmaista lounasta ei ole.
Mirror
>Today we're introducing a desktop app so you have a new way to stay in touch anytime and anywhere - whether on your phone or computer at home or work. Like WhatsApp Web, our desktop app is simply an extension of your phone: the app mirrors conversations and messages from your mobile device.
>The new desktop app is available for Windows 8+ and Mac OS 10.9+ and is synced with WhatsApp on your mobile device. Because the app runs natively on your desktop, you'll have support for native desktop notifications, better keyboard shortcuts, and more.
>To download the app, visit https://www.whatsapp.com/download from your desktop browser. Then, open the app and scan the QR code using the WhatsApp app on your phone (look for WhatsApp Web menu under Settings).
>Just like WhatsApp Web, the new desktop app lets you message with friends and family while your phone stays in your pocket.
No Windows 7 support. Not unexpected tbh. Wonder if you still need to keep your phone connected.
That still doesn't change anything though. After OpenWhisper looks at it, Facebook just changes what they want. In order for any trust to be placed in an encryption algorithm, the implementation has to be transparent. It's fundamental to cryptography. Security by design > security by obscurity [of the code]
EDIT: Not to mention, their plain text backup to Google Drive.
New privacy policy forces you to share data with facebook
if you don't have facebook account they make ghost account
https://www.whatsapp.com/legal/updates/privacy-policy/?lang=en
As per WhatsApp’s privacy policy they most certainly do collect IP addresses of their users, along with a lot of other information.
If you are looking to find the IP address of a user who messaged you then that is not possible.
You can download directly from https://www.whatsapp.com/android/. You need to update manually (i.e. download every time the new version) but, at least in my experience, whatsapp reminds from time to time when there is a new version.
Don't trouble yourself of whether it's her or not. https://www.whatsapp.com/faq/en/general/21242423 Here is how to block someone on whatsapp with links to your phone type.
If it is your mother, she's trying to make you come unNC with her. If it's some weird sadistic spammer - more likely imo but not totally for sure - then they're trying to check to see if their connection to you works. If you reply, they'll simply do it all over again.
>I heard using a ROM without GAPPS can greatly improve overall battery life and performance.
The improvement is not that significant, read about it on xda
And yes, Whatsapp can be downloaded directly and works normally without Gapps
Hier die Anleitung zum Widersprechen.
>Nachdem du unseren aktualisierten Nutzungsbedingungen und der Datenschutzrichtlinie zugestimmt hast, hast du weitere 30 Tage Zeit, um deine Auswahl zu treffen, indem du in der App zu Einstellungen > Account > Meine Account-Info teilen gehst. Falls du deine Account-Informationen nicht mit Facebook teilen möchtest, um deine Facebook-Werbung und Produkterlebnisse zu verbessern, kannst du das Häkchen aus dem Kästchen entfernen oder den Schieberegler umschalten.
She can use WhatsApp business app And have catalog in it. https://www.whatsapp.com/business
Also Facebook and Instagram should do the job for her along with WhatsApp business.
Steps to follow 1. Create Facebook business page 2. Connect WhatsApp messaging 3. Create Instagram and connect to Facebook 4. Create store on Facebook and catalog on WhatsApp bunnies
Everything for free and open for business
Mira, lee el los términos y condiciones de WhatsApp y vas a ver de qué no pueden ver tus mensajes y dicen claramente que recopilan de ti, yo ya me leí esto.
https://www.whatsapp.com/legal/privacy-policy (Métete al menú que dice "información que recopilamos")
Además, intenta reinstalar whatsapp, no restaures la copia de seguridad y vas a ver cómo todos tus chats ya no están. Eso también es aclarado en la página.
> Do Americans have to accept facebook data sharing thing from whatsapp?
Yes
On EU (GDPR) isn't optional, you still need to accept the new terms or your account will be disabled, just "won't share it with Facebook"
>“For the avoidance of any doubt, it is still the case that WhatsApp does not share European region WhatsApp user data with Facebook for the purpose of Facebook using this data to improve its products or advertisements,”
https://digit.fyi/facebook-to-access-whatsapp-user-data-except-in-europe/
But WhatsApp will still collect your Phone Number, Location and IP, Contacts, cookies, transactions, device ID.
See "Information We Collect" https://www.whatsapp.com/legal/updates/privacy-policy-eea
https://www.whatsapp.com/legal/updates/privacy-policy/?lang=en
See for yourself:
> Your Connections. You can use the contact upload feature and provide us, if permitted by applicable laws, with the phone numbers in your address book on a regular basis, including those of users of our Services and your other contacts. If any of your contacts aren’t yet using our Services, we’ll manage this information for you in a way that ensures those contacts cannot be identified by us. Learn more about our contact upload feature here. You can create, join, or get added to groups and broadcast lists, and such groups and lists get associated with your account information. You give your groups a name. You can provide a group profile picture or description.
So according to this, they collect it but they don’t ‘identify them’. This is a bit vague. This alone is a cause of concern for me at least.
AES and DES in symmetric could be nice to implement, they do not require hard hard math knowledge.
Otherwise if you want something that is a bit trendy, ECC is for you; requires more advanced math to understand though
https://en.wikipedia.org/wiki/Elliptic-curve_cryptography#Cryptographic_schemes
otherwise hashing functions are often simple.
Otherwise if you want to know what kind of cryptography such app or app uses, search "white paper X" and you'll find them, they are public.
Following is an exemple of such, at the bottom there's an hyperlink "technical explanation", it's the whitepaper, to see wat it looks like.
On Android, users can download the app (.apk file) and install it. It's like installing an app on macOS or Windows from outside their respective stores.
Popular services usually offer the apk file for users that live in places without Google Services (eg: China) or where the app is unavailable (eg: censorship). For example, WhatsApp: https://www.whatsapp.com/android/
Or Epic could create their own store to install their games. Something like Steam, but for mobile. In practice, the "store" is just an app that manages the installation and updates.
Here is the WhatsApp whitepaper -
"WhatsApp Encryption Overview Technical white paper"
https://www.whatsapp.com/security/WhatsApp-Security-Whitepaper.pdf
​
Please note that this is not to prove you wrong but just to give you additional data to make an informed decision :)
You ask which is the most secure, but then say:
> I don't quite trust WhatsApp because it is owned by Facebook.
That's only tangentially related to security. If we take security to mean an app or service that has zero vulnerabilities that will expose your communications, know that none of them are absolutely secure.
So how would you validate the security? Here is a short list:
So let's take WhatsApp:
So, does that make it secure?
Now, on to the trust part.
Yes. Because the inability to read messages does not inherently make the service provider trustworthy. What other information does the app or service provider have access to? How can that information be used against you?
I agree that there is no way AT&T could charge a VoIP call as an international cellular call. But I think you are mistaken regarding WhatsApp being able to make cellular voice calls.
WhatsApp's terms of Service ( https://www.whatsapp.com/legal/#terms-of-service ) do not say anything about WhatsApp calls falling back to cellular voice.
The WhatsApp FAQ ( https://faq.whatsapp.com/en/android/28000016 ) says
"Voice Calling lets you call your contacts using WhatsApp for free, even if they’re in another country. Voice calling uses your phone’s Internet connection rather than your cellular plan’s voice minutes. Data charges may apply."
The only plausible explanation is user error. Someone thought they were using WhatsApp to place a call, but they were actually using the phone's dialer app.
Je hebt op z'n minst Whatsapp versie 2.18.329 nodig. Als je door te updaten op de Google Play Store nog steeds deze versie niet hebt kan je de nieuwste versie hier downloaden: : https://www.whatsapp.com/android/
​
Als het goed is kan je daarna hard op de knop "Add to whatsapp" rammen en komen de stickers op je Whatsapp.
Laat het me maar weten of het lukt!! Succes!
whatsapp crypto is at group level (the group creator generates a ‘sender key’ which is sent to all participants) and passes through the hosts encrypted. The connection isn’t p2p but the crypto is. You cannot pick out a single user based on origin and treat them differently; you’d have to weaken the whole group. That, or completely overhaul the protocol, which I don’t think Facebook are particularly likely to agree to.
The protocol is described at https://www.whatsapp.com/security/WhatsApp-Security-Whitepaper.pdf. I suggest you go through it, it’s quite an easy read.
I think it’s pretty hard to hack WhatsApp unless someone else has your phone on their hands. Not even the people from WhatsApp can read your convos or anything
They're obligated to provide a clear explanation in their privacy policy of how to rescind permission for processing and demand deletion of your information.
https://www.whatsapp.com/legal/?lang=de#privacy-policy
If you can't find the instructions you're looking for (whether because they're using confusing language or simply not mentioning it), or if you have reason to suspect that deleting your account via the app did not have the desired result, then you can make a complaint, with BFDI because you're German: https://www.bfdi.bund.de/DE/Service/Beschwerden/beschwerden_node.html
You can run WhatsApp without Google Apps and download it officially from https://www.whatsapp.com/android/.
Edit: I use LineageOS with privacy guard and do not allow WhatsApp access to any personal data. Other people have to initiate Chats with you, as your contacts are "empty" (blocked off by privacy guard). But that's good enough for me.
Whatsapp doesn't always totally free, back then it costs $1 to download, then it used a subscription model, free to download and use for the first year but to continue using, you have to subscribe. The model is dropped in 2016 and the app is totally free after that.
But whatsapp doesn't have in-app purchase, and there's no ad... this really rises the question: how do they generate money? and if they don't generate money, why facebook put big value on them?
The simplest answer is: Data Mining
whatsapp messages go through the server first before reaching user device(s). The server analyze data based on words usage. Big companies would paid big bucks for this kind of data to optimize their marketing and advertising campaigns. Though the currently end-to-end encryption used in whatsapp makes data mining tough.
> Your messages are yours, and we can’t read them. We’ve built privacy, end-to-end encryption, and other security features into WhatsApp. We don’t store your messages once they’ve been delivered. When they are end-to-end encrypted, we and third parties can’t read them.
Above quote is taken from WhatsApp Legal Info, who knows if they're telling the truth, half the truth, or just an outright lie.
Please correct me if I'm wrong or add for any lacking information.
A criptografia é ponto-a-ponto, ou seja, as chaves não ficam armazenadas no servidor central, mas sim nos aparelhos, o próprio WhatsApp tem uma seção explicando como funciona: https://www.whatsapp.com/faq/en/general/28030015
Have you checked the FAQ entries regarding backups and changing phone numbers?
I have changed numbers and phones a few times and it worked every single time, as long as I stayed on the same OS.
I don't think WhatsApp falls into the category of security by obscurity. End-to-end encryption is by design- they advertise end-to-end encryption and "messages, photos, videos, voice messages, documents, and calls are secured from falling into the wrong hands" although that's clearly a lie now.
> https://www.whatsapp.com/legal/#privacy-policy-information-we-collect
In addition to the metadata, they say, they would retain "popular" media for a longer period of time in their servers, to improve performance - if that is the cause what purpose does end-to-end encryption serve (with encryption it would be impossible for them to classify what is popular and what is not), it also seems totally contradictory to the lines you have quoted from their Terms ("encrypted to protect against us and third parties from reading them")
Tuo Imagen ja Ylen Kioskin jutut ovat ihan huuhaata, koska ne perustuvat täysin datan kirsikanpoimintaan. Kumpikaan ei ollut jutuissaan yhteydessä palveluntarjoajaan ja olisi aika hyvin kummallista että Whatsapp valehtelisi täysin tietoturvailmoituksesaan.
Kummankin jutun argumentoinnille naurettaisiin täällä jos kyseessä olisi sähköallergia tai yksisarviset, mutta tämä foliohattuilu uppoaa ilman sen suurempaa kritiikkiä tutkimuksen metodologiaan (tai sen puutteeseen).
> Sitähän ei voi tietää salataanko viestit päästä päähän oikeasti
Se olisi aika kova juttu jos näin ei olisi, koska tämä kaveri oli sitä tekemässä.
Google ja Facebook tekevät rahansa kun käytät heidän palveluitaan, olisi aika itsemurha jos ne väärinkäyttäisivät käyttäjien tietoja koska a) kilpailijat olisivat onnesta soikeana ja b) etenkin EU:n valvovat viranomaiset olisivat onnesta soikeana.
A conversa é criptografada de forma que nem eles tem acesso a ela, são bem claros quanto a isso:
https://www.whatsapp.com/faq/pt_br/general/28030015
Não adianta pedir informação que já está sob uma criptografia inviolável porque simplesmente não tem como ser fornecida.
Oportuno acrescentar:
> We may collect and release Personally Identifiable Information and/or non-personally-identifiable information if required to do so by law, or in the good-faith belief that such action is necessary to comply with state and federal laws (such as U.S. Copyright Law), international law or respond to a court order, subpoena, or search warrant or equivalent, or where in our reasonable belief, an individual’s physical safety may be at risk or threatened. WhatsApp also reserves the right to disclose Personally Identifiable Information and/or non-personally-identifiable information that WhatsApp believes, in good faith, is appropriate or necessary to enforce our Terms of Service, take precautions against liability, to investigate and defend itself against any third-party claims or allegations, to assist government enforcement agencies, to protect the security or integrity of the WhatsApp Site or our servers, and to protect the rights, property, or personal safety of WhatsApp, our users or others.
No. They used to mean different things on ios vs Android (which made it confusing). Little clock = message outgoing. One grey tick = message sent to WhatsApp server. Two grey ticks = message delivered to recipient's phone. Two blue ticks = message viewed. On a group chat you'll get two grey ticks when everyone has received the message and two blue ticks once everyone has read it.
The fact they are logged into whatsapp I don't believe will help you locate your phone. You can log them out by emailing them. Info in this link. https://www.whatsapp.com/faq/en/general/24460358
Hopefully Android Device Manger was enabled or CyanogenMod account to help track. Maybe some social engineering with the thief could work. If you took up AirDroid Pro from the OnePlus offer, you can remotely activate the camera from your browser.
>For all phone types, WhatsApp is free to download and try for the first year. After, you have the option of extending your subscription for $0.99 USD per year. source
And
>On January 21, 2015, WhatsApp launched a web client which can be used from the browser to send messages. source
So the web client is new since I last looked at WhatsApp. They're playing catch up with everyone else. And it still isn't as robust, because you have to have your phone on and online for the web client to work.
Really, the only reason WhatsApp is worth using is that so many other people use it. Technically it's average or below average, and in the US it loses its only advantage (that your friends might use it).
What have you seen on Codester?
To send whatsapp messages you need to use a Whatsapp business api provider. This part is never free because whatsapp themselves charge a small amount per message.
https://www.whatsapp.com/business/api?lang=en
Once you have this, your form can hit your backend or a serverless function where you can validate the fields and send the message.
Hi
When choosing a sim only deal you'll get a choice of data - calls - texts - in a bundle. Pick one that close to what you use now or think you may need. Here's a UK comparison site to help illustrate this: https://www.uswitch.com/mobiles/compare/sim_only_deals/
Whatsap is owned by Facebook and as others have said, everybody uses it if there sending images. https://www.whatsapp.com/features/
Make sure your phone is unlocked as well.
Another option is to contact your data provider in the states and ask their advice.
Have a great trip.
Thanks for the video, it just confirms what I already thought about it. I should not touch it until we see something we cannot live without.
Did the F2 shortcut not work for renaming icon?
And also whatsapp has a desktop version already.