43 comments

[ 1.5 ms ] story [ 60.6 ms ] thread
> Our messaging system has long been designed to balance user privacy with the ability to respond to scams, harassment, and other safety concerns when users report them or when required by law

TikTok about why they won’t put e2e for private messages.

I guess it’s reasonable to give up privacy to save the children, TikTok cares so much about our kids safety and wellbeing !

I'm not sure if this meets the bar for substantive and thoughtful discussion, but this kind of corporate cowardice, enforced by unelected bureaucrats standing at the bully pulpit is only going to get worse as the noose tightens on the open web.

The combination of hardware attestation and walled garden "app stores" is the end goal of most policymakers in this area, and it happens to suit the monopolists in Google and Apple and Facebook down to the ground.

Perhaps a timely reminder that things do not always get better over time, and that we may have lived past the high point of secure communications in our lifetime.

Hardware attestation really sounds like one of the worst things that could've happened to computers.
Instagram should be shut down. Not using encryption for social media and places where users expect any level of privacy is insanity.
How likely is this about collection of LLM training data?
I'm not sure the value of end to end encryption for proprietary application chats. For emails and SMS messages, your messages are being sent between different multiple servers on the open internet and it opens you up to spying, but end to end encryption on instagram is only protecting your chats from Meta.

I find the end to end encryption on Facebook to be detrimental to ease of use, because you always have to use a pin code, etc for the web interface.

If you don't trust meta with your chats, you probably shouldn't be using their application to begin with.

FB Messenger was nice and simple before they added the clunky e2ee feature, and it's not even secure cause it's just 6 digits of entropy.

WhatsApp e2ee is solid. It's painful if you have multiple devices, but it was designed for people to use on just one phone in the first place, not necessarily caring about chat history.

Put simply:

I’ve talked to Apple engineers.

Siri fell behind due to how good Apple’s privacy is.

Everyone made fun of them for protecting them.

This is exactly the opposite of that, where Mark is throwing you and your children under the bus again because he’s unoriginal and doesn’t know how to make money any other way than by getting all up in your business, statistically.

I don't buy that. They could have done more with it despite the constraints. There's been a big lack of interest from Apple for a long time. Just like every few years they introduce a completely new Mac Pro with all the fanfare and then completely lose interest and let it wither and die for 5 years.
> Siri fell behind due to how good Apple’s privacy is.

Garbage. That's some good spin, though. Siri is a turd in a punch bowl for many reasons that have nothing to do with privacy.

"Siri, do X thing" "Done"

"Siri, do [extremely similar to X] thing" "I don't know what you mean"

Siri is connected to my Apple HomeKit. "Siri, turn off my Kitchen Lights" "I don't know what lights you mean."

Siri feels like it never evolved past a proof of concept.

> Siri fell behind due to how good Apple’s privacy is.

That makes zero sense.

The problem with Siri is... Siri. The interface itself.

Zero of my complaints around Siri have to do with it not being able to access my private data.

They're entirely about it not understanding my request in the first place or lacking a basic capability.

Siri fell behind because the bean counters at Cupertino didn’t want to spend on it, this is well documented and has nothing to do with privacy.
Interesting. I've talked with engineers at Apple that worked directly on the Siri team who made no such claim and said it largely a cultural issue.
> Siri fell behind due to how good Apple’s privacy is.

Uhh. What the heck are you talking about? I’m calling straight bs on this unless presented rational.

Siri has access to knowledge.db or whatever it is, which is the centralized hub for pretty much all things. Siri phones home every request made via Siri.

I think you got sold snake oil

While encryption already ruined FB Messenger (no comment on IG encryption or lack of but people have hated Insta since Zuck took over)

While they ALREADY probably only have Messenger for nefarious reasons https://news.ycombinator.com/item?id=4151433

He's a bit of a... something. That might get a 'low effort comment' moniker attached to it. Rhymes with ociopath

I worked at Instagram during this (not at the EeE, but saw enough of it, to see that it was a mess).

I think the reason for dropping it, is more of a technical issue and user experience, rather than a 'desire' issue or company will. From my understanding, Zuck wanted this. The implementation was a mess, and folks have different expectations about messages to appear at every platform. Having messages disappear between devices/web, or having to back up encryption, keys, etc... it was just a terrible user experience. Even employees, disliked this feature.

This was not something actually asked by users, but more of a feature done in order to thwart all the types of legal issues created when folks use the platform.

At some point, I counted, there were 64 'leads', just to make this happen. Each lead, had a certain area, or surface/views, which means we are talking about hundreds of folks involved to make this happen (across fb and ig).

It was a boodongle, and it was something that users didn't ask.

Ps. I know, many here at HN really care about this, but the average user was not willing to put up with the degradation of the user experience in order to make this happen. All workarounds, require weakening E2E, which made it pointless.

Ultimately, If you want a truly E2E, you will have to use a platform specifically made for it. IG/FB are just not it.

Even Telegram, doesn't have it enabled by default, unless you specifiy it.

This is exactly what I expected, and it's good to hear from someone with experience.
How were there 64 leads?
> 'Very few people were opting in to end-to-end encrypted messaging in DMs,' Meta says.

Then why didn't you make the opt-in default like Signal and WhatsApp? :-)

Instagram wasn't set up this way. If you install it on a new phone or open it in-browser, you aren't expected to give it a recovery key to get your DMs back. They did add e2ee for FB Messenger, and it was very clunky besides not being secure at all (6-digit numeric pin).
i never even knew they had e2e available, so they cannot have been too serious about people opting in.

a shame that they now have to shut it off because people didn't use something they didn't know existed /s

Because either you have:

1. An E2E system where the provider has de facto access to the encrypted data, or

2. You shift key management to the users and let them risk data loss.

Either way:

a. The provider can release an app version at any time that accesses the data on the client side, and

b. Most of your users cannot differentiate between E2EE and SSL/TLS, nor are they interested in doing so, nor they care about it.

So don’t use Meta products if you care about privacy?
This is a reductive and frankly insulting response. People want to be able to communicate with other people they will use the tools that allow them to do it. Sometimes the person I want is on Instagram, that’s how I can reach out to them. I believe privacy ought to be a human right. I don’t just limit myself to tools used by a very narrow swath of arrogant nerds. Instead, we fight for privacy.
Perhaps they should phase out the encryption on WhatsApp as well?
Isn't this really about "protecting" minors using Instagram?

If they allow E2E encryption, they can't scan for CSAM or do other monitoring stuff effectively, so they can't provide a "safe" place for minors.

Obviously the right answer is kids shouldn't be exposed to social media at all, but more eyeballs is more important than our kids.

It's too bad we fell so hard for centralization. In an alternate universe, messaging on the Internet could have been:

1. Alice's device has a publicly routable IP address with a domain name like alice.home.her.isp

2. Bob's device is has same qualities, using: bob.mobile.his.isp

Then Alice can just open her chat app up, add bob@bob.mobile.his.isp and off they go. I mean we had UNIX's "talk" for how long but instead of evolving/securing/fixing it, we blew it! And now we have all these companies 1. coming up with their own incompatible protocols and 2. inserting their stupid centralized servers as intermediaries. And now every chat message we send over the Internet has to be received and re-sent through a handful of amoral corporations.

If people spent half the time they do wishing for decentralized messaging working on the actual problems with it, we would have decentralized messaging.
Big question is how to put sgt.cia.gov or mayor.fbi.gov in the middle between alice.home.her.isp and bob.mobile.his.isp.

That is why centralised messengers are pushed hard.

And this is not to protect society from harm, as many would assume.

Decentralized cooperation and associated protocols is a lot harder than just inserting messages into a MySQL database and then displaying those messages.
>In an alternate universe, messaging on the Internet could have been:

I don't think so, and I think the very reason is because the people who opt for these decentralized solutions never really sit down and try and design a product, they just want decentralization for the sake of decentralization. For them decentralization is the product. Your alternate universe evaporates when you ask the question "what happens if Alice's device is offline?".

If you squint, the exact system you are describing is e-mail, and that has become effectively centralized, and it happened long before we had tech mega corps.

Didn't you just describe email?
Have a look at Keet, it’s a p2p IM app, works on mobile and desktop, behind NAT and all. To be honest it’s not even the only app in this game.

It just seems like nobody cares about these things until the frog already boiled.

People here like it, but end-to-end encryption is an objectively worse user experience for people that don't care about that feature
I didn’t even know it was available to opt-in to! Probably why adoption wasn’t great.
I don't understand why they would go in this inversely-progressive direction.

Shouldn't we be aiming to increase e2e encryption for the most regularly used communication platforms?

Centralized proprietary software on on proprietary platforms can always be opted into a special update that makes all the private keys deterministic making end to end encryption useless for anyone with knowledge of that targeted backdoor.

Only FOSS can deliver verifiable E2EE, and all centralized and proprietary solutions like Zoom, Whatsapp, Instagram, etc should end the security theater.

I applaud Meta for at least being honest about one product.

a cynical part of me thinks this can be a lucrative angle to sell an added verified program with end to end encryption.

a lot of shady messages go around in Insta DMs - whether it's cheating spouses, athletes getting exposed etc then of course other criminal shit.

if only, only if - you as the platform can sell added insurance (verified) program that screenshots can't be taken without the other party consenting etc.

Anyone that cares about privacy and uses Instagram won't care about this. It's not a good thing for Meta to do this but the last two+ decades has demonstrated people prefer to be ignorant and accept whatever comes. Let them eat cake and rot. I tire of being called paranoid because I know how all this can be abused.
Are you having troubles spying your suspected cheating spouse phone or you having troubles recovering your stolen bitcoins assets? Kindly send a detailed mail to HENRYCLARKETHICALHACKER@GMAIL.COM, for best help