Meta knows messaging service creates persistent user IDs that have different qualities on each device
  • shortwavesurfer@lemmy.zipEnglish
    16·
    2 months ago

    What oh my god, you mean Facebook was violating my privacy? I never would have guessed. /s

    This is why I stopped using any product associated with their company in 2018 and have never gone back.

    • idunnololz@lemmy.worldEnglish
      11·
      2 months ago

      I think you might have misread the article (or maybe I have?). I think the article is saying that other people (a 3rd party that is not Meta) can use some metadata clues to puzzle out which OS a user is using WhatsApp from. The article then says this is bad because an attack can target specific OSes or tailor their attack to the user’s OS. Eg. Hacker has an evil link that abuses an exploit on Android only. They can figure out who is signed into WhatsApp on android and only send those people the evil link.

      • blackfire@lemmy.worldEnglish
        2·
        2 months ago

        I read it, I just believe that meta knew what they were doing. I also believe there are other fingerprints they are using while hiding behind the whisper protocol to say they are e2ee.

        • idunnololz@lemmy.worldEnglish
          2·
          2 months ago

          Oh it’s really easy to fingerprint a device on Android so I’m 99% sure they are fingerprinting you in one way or another. But this seems to be an overly complicated way of doing it. It does really just seem like an unintentional design flaw.

          • blackfire@lemmy.worldEnglish
            1·
            2 months ago

            If they fix it and randomise then I’d say you’re right. But from the article they didn’t say they would.