To support your public commitment to privacy: OTR or better for WhatsApp, and/or a third party client so we could do this, please.<p>I'll excuse the metadata issues for a while if you build the app in such a way that confidentiality is protected independent of your infrastructure, and if pushing a "bad" app to clients is detectable. It's still a pain if targeted malware is pushed to individual clients, as those clients are unlikely to detect it. There are some emerging ways to address that, but first things first.<p>You have literally billions of dollars; it would take at most millions to implement this. Making an app with 450 million uses around the world somewhat more secure would be supremely meaningful, even if it's not perfect.
Facebook will use whatsapp for whatever purpose they see fit. A 19 billion acquisition is not a partnership.
When that will happen deliberately, maybe a year from now, the founders will leave, maybe slamming the doors, and enjoy their riches for the years to come.
<p><pre><code> Respect for your privacy is coded into our DNA, and we built WhatsApp
around the goal of knowing as little about you as possible: You don’t
have to give us your name and we don’t ask for your email address. We
don’t know your birthday. We don’t know your home address. We don’t
know where you work. We don’t know your likes, what you search for on
the internet or collect your GPS location. None of that data has ever
been collected and stored by WhatsApp, and we really have no plans to
change that.
</code></pre>
I don't recall them ever being accused of tracking all this information. The problem is the metadata; They know who you are talking to and for Facebook this is exactly the kind of information that they want. They want to enhance their social graphs and have a better view of who interacts with who. This is auspiciously lacking in their statement.
<i>If partnering with Facebook meant that we had to change our values, we wouldn’t have done it.</i><p>With no disrespect intended towards the whatsapp team, given the terms of the deal, it's a bit hard for them to say "If partnering with Facebook meant X we wouldn't have done it" unless X is "life would not have been as staggeringly beneficial to us".
Wow. Not the response I expected. I'm not sure if the naivety is authentic or we should feel punked. They didn't partner with anyone. They were bought. Not changing will be allowed as long as it benefits the buyer.
> You don’t have to give us your name<p>Ok, is that another way of saying they know it already since it was in another users contacts that got synced to there server?
provided you have whatsapp and facebook on your phone the following happens though.<p>1. they both know your mobile phone book.<p>2. they both know your imei<p>3. they both know your phone number(this doesn't have to be the same by the time you sign up for the other)<p>just no.1 is already enough to get an accurate estimate on who the person is. notice how they never said that they didn't log that information?<p>it's also very unlikely that they don't have access logs to their service, which usually includes ip's i.e. location, but for all we know they could be encoding carrier information in a couple of bytes during the transmission of the contact list.<p>edit: while the mobile ip's don't give you exact information, they still give you enough heuristics to overlap them with other services
This may sound naive, but I genuinely believe that Whatsapp cares about user privacy and that they won't silently mine our data and send it to Facebook. That would amount to sheer hypocrisy, and could also come under legal scrutiny. I also think that Zuckerberg, at some level, really does want to connect the world and all that, and Whatsapp is a much better bet than Facebook is, for developing countries.
That being said, Whatsapp does need to improve their security, and irrespective of the facts, this is proving to be a bit of PR disaster for them, with a mass exodus of users to Telegram. (They'd do well to nick some features from Telegram).
Discussion from half a day ago:<p><a href="https://news.ycombinator.com/item?id=7416717" rel="nofollow">https://news.ycombinator.com/item?id=7416717</a>
<p><pre><code> "Respect for your privacy is coded into our DNA"
</code></pre>
This post is complete nonsense, and has no value at all because their words don't match their actions. A company that respects privacy wouldn't partner up with another company best known for infringement of privacy.<p>Suit the word to the action.
"None of that data has ever been collected and stored by WhatsApp, and we really have no plans to change that." ... but I'm not promising we won't!
I have been meaning to ask this.<p>What encryption does Whatsapp use? Their FAQ doesn't say.<p>It also doesn't say if it is end-to-end (client-to-client) encryption or if the data is stored in plain on their servers? (I understand it is not stored permanently.)