This is a security feature to let you know that the sender may be an imposter, right? Like matrix’s verified sessions, if my friend gets a new phone or pc it’s unverified and I have to verify the new session through another means, like in person or phone.
This isn’t new, interesting or noval information. If you run whats app from the desktop app or from web.WhatsApp.com on you’re browser on a PC then no shit they know your on your PC
Why does it matter if the people I’m chatting with know if in onnmy PC?
I see the issue. The issue is that you seemingly did not bother to read the link. Since that is not what is being discussed. It is not that you cannot tell whether someone is using a PC or a phone, but rather which PC or phone or peripheral you are using if you have number of them. Your point has literally nothing to do with the post.
“Be’ery wrote in his blog post explaining the data leak that it is a consequence of the way WhatsApp is designed: When someone sends a message to another WhatsApp user, their device creates a different session key for each device the receiver is using, thus telling the sender how many devices the receiver is using.”
Water is actually not wet. It only makes other materials/objects wet. Wetness is the ability of a liquid to adhere to the surface of a solid. So if you say something is wet we mean the liquid is sticking to the surface of the object
When someone sends a message to another WhatsApp user, their device creates a different session key for each device the receiver is using, thus telling the sender how many devices the receiver is using.
So like any other service using the Signal protocol, or am I wrong?
Well, I knew my brother was getting a new phone soon anyways so getting notified his device changed wasn't a surprise. Otherwise, getting notified hia device changed without that knowledge may have triggered me to contact him elsewhere to ask if he did. Signal is mostly going to be conversations between close/trusted individuals. It doesn't tell you what they changed to, the message basically tells you that if this person didn't legitimately change devices then it might be a bad actor.
Oh, so it’s not like “person is on their computer” or “person is on their iPhone”? That’s what I was imagining and that can obviously be problematic, since some devices would be location bound, and you might not want someone to know your location. Also if it identifies your device, then it’s another avenue for bullying (apparently kids get bullied for not having iPhones) and some potential security risks.
Add comment