• 2 Posts
  • 6 Comments
Joined 1 year ago
cake
Cake day: July 7th, 2023

help-circle






  • Tldr: This is a traffic analysis attack, it exposes metadata without help or access to data from whatsapp. Other messengers are vulnerable too. It requires vast resources and access only governments have. It is not a threat model that todays messengers defend against.

    The interesting part of the article ist the last one.

    According to the internal assessment, the stakes are high: “Inspection and analysis of network traffic is completely invisible to us, yet it reveals the connections between our users: who is in a group together, who is messaging who, and (hardest to hide) who is calling who.”

    The analysis notes that a government can easily tell when a person is using WhatsApp, in part because the data must pass through Meta’s readily identifiable corporate servers. A government agency can then unmask specific WhatsApp users by tracing their IP address, a unique number assigned to every connected device, to their internet or cellular service provider account.

    WhatsApp’s internal security team has identified several examples of how clever observation of encrypted data can thwart the app’s privacy protections, a technique known as a correlation attack, according to this assessment. In one, a WhatsApp user sends a message to a group, resulting in a burst of data of the exact same size being transmitted to the device of everyone in that group. Another correlation attack involves measuring the time delay between when WhatsApp messages are sent and received between two parties — enough data, the company believes, “to infer the distance to and possibly the location of each recipient.”

    Today’s messenger services weren’t designed to hide this metadata from an adversary who can see all sides of the connection,” Green, the cryptography professor, told The Intercept.



  • I don‘t think that article says what you think it says. First we need to accept your comparison and generalize the study to question wether law enforcement will treat you differently because of political views. And then it clearly states that the LOE treated the participants differently (negatively), because of the political views:

    „Nevertheless, he concluded that it is statistically unlikely that this number of previously ‘safe’ drivers could amass such a collection of tickets without assuming real bias by police against drivers with Black Panther bumper stickers.“

    Note that the “Nevertheless“ is in the context of the police only using the political bumper stickers as reason for citation only once. The rest of the citations were for other reasons. The participants had not been cited in all their driving in the year prior without the stickers. This leads to the mentioned statement by the author