Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror
Encryption Communications Open Source Privacy Python

Unofficial WhatsApp Library Gets End To End Encryption Before Official Clients 29

An anonymous reader writes Earlier last year WhatsApp announced partnership with Open WhisperSystems to integrate the ratcheting forward secrecy protocol found in their app called TextSecure, into WhatsApp. The protocol is supposed to provide end-to-end encryption between WhatsApp clients. So far it has been implemented only in WhatsApp on Android, with the rest of platforms yet to come. The implementation however has already made it into unofficial WhatsApp libraries which allow developers to use WhatsApp service in their applications, starting with a python-library called yowsup, and the rest will follow. It's worth mentioning that none of those libraries are supported nor approved by WhatsApp, so one has to wonder if WhatsApp is going to take some legal action (again) against them.
This discussion has been archived. No new comments can be posted.

Unofficial WhatsApp Library Gets End To End Encryption Before Official Clients

Comments Filter:
  • by OzPeter ( 195038 ) on Friday January 02, 2015 @12:08PM (#48718009)

    The implementation however has already made it into unofficial WhatsApp libraries which allow developers to use WhatsApp service in their applications, starting with a python-library called yowsup, and the rest will follow.

    With the previous story being 2014: The Year We Learned How Vulnerable Third-Party Code Libraries Are

  • OK (Score:3, Interesting)

    by koan ( 80826 ) on Friday January 02, 2015 @12:44PM (#48718339)

    Whatsapp is owned by Facebook, Facebook can not be trusted, Whispersystems is Moxie Marlinspikes gig, so has Moxie sold out? Possible but not probable so I'm going with "additional code" added to the package once the Facebook Balut's get their slimy claws on it.

    What's a Balut?
    https://en.wikipedia.org/wiki/... [wikipedia.org]

  • Implemented only in Android? Then how do Android users communicate with everyone else? I'm missing something here...
    (please note: i do not have whatsapp).
    • Re: (Score:2, Interesting)

      by Anonymous Coward

      Messages to other users are simply not encrypted

      • by johanw ( 1001493 )

        At least not better encrypted than Whatsapp did before it started with this.

        Did anyone analyse these implementations? Are they cryptographically sound?

    • Implemented only in Android? Then how do Android users communicate with everyone else? I'm missing something here...

      WhisperSystems seems to confine its development efforts to the Android platform for some reason.

  • XMPP (Score:5, Insightful)

    by BitZtream ( 692029 ) on Friday January 02, 2015 @01:12PM (#48718625)

    http://xmpp.org/rfcs/rfc3923.h... [xmpp.org]

    Seriously, stop using proprietary carpware.

    Its one thing when proprietary offers you some benefit, but when it comes to IM, using anything other than XMPP from someone who supports federation is just as retarded as using email from someone who doesn't do proper SMTP.

    • by Anonymous Coward

      Then please try to persuade all my friends and family members that currently use WhatsApp on their Android/iOS phones.

    • Well...they actualy do use XMPP, just with some junk added on to make it work more reliably in their enviroment.
  • It's worth mentioning that none of those libraries are supported nor approved by WhatsApp, so one has to wonder if WhatsApp is going to take some legal action (again) against them.

    Whatsapp has recently been banning users of a Third-Party Whatsapp client for SailfishOS, rather than take direct legal action at the app developers.

There is no likelihood man can ever tap the power of the atom. -- Robert Millikan, Nobel Prize in Physics, 1923

Working...