• shortwavesurfer@lemmy.zip
    link
    fedilink
    English
    arrow-up
    16
    ·
    5 days ago

    What oh my god, you mean Facebook was violating my privacy? I never would have guessed. /s

    This is why I stopped using any product associated with their company in 2018 and have never gone back.

    • idunnololz@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      arrow-down
      1
      ·
      5 days ago

      I think you might have misread the article (or maybe I have?). I think the article is saying that other people (a 3rd party that is not Meta) can use some metadata clues to puzzle out which OS a user is using WhatsApp from. The article then says this is bad because an attack can target specific OSes or tailor their attack to the user’s OS. Eg. Hacker has an evil link that abuses an exploit on Android only. They can figure out who is signed into WhatsApp on android and only send those people the evil link.

      • blackfire@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        4 days ago

        I read it, I just believe that meta knew what they were doing. I also believe there are other fingerprints they are using while hiding behind the whisper protocol to say they are e2ee.

        • idunnololz@lemmy.world
          link
          fedilink
          English
          arrow-up
          2
          ·
          edit-2
          4 days ago

          Oh it’s really easy to fingerprint a device on Android so I’m 99% sure they are fingerprinting you in one way or another. But this seems to be an overly complicated way of doing it. It does really just seem like an unintentional design flaw.

          • blackfire@lemmy.world
            link
            fedilink
            English
            arrow-up
            1
            ·
            4 days ago

            If they fix it and randomise then I’d say you’re right. But from the article they didn’t say they would.