client side scanning.
Whatsapp is closed source, and could implement a switch that can be remotely enabled by them that makes your client to start scanning your messages + upload plain text messages to their server in case it reveal some particular words.
Just a possible example of a backdoor well obfuscated in binary release that doesnt deal with crypto. This backdoor with open source and reproducible builds would be pretty impossible, but with closed source complex apps it is realistic and possible at least...
ponymontana🦄⚡
npub185p…36k8
2024-06-09 22:44:08
in reply to nevent1q…m2q5
Author Public Key
npub185pu2dsgg9d36uvvw7rwuy9aknn8hnknygr7x2yqa60ygvq6r8kqc836k8Published at
2024-06-09 22:44:08Event JSON
{
"id": "88c3e3dbcef1532fefb814f9104c5eac2894ef46b5a850348b0129259e77e747",
"pubkey": "3d03c53608415b1d718c7786ee10bdb4e67bced32207e32880ee9e44301a19ec",
"created_at": 1717965848,
"kind": 1,
"tags": [
[
"e",
"ec3419bde1ff54cc72501c55e09ecd0b7bc2f38cd1bf60949b7efe98950d18fd",
"",
"root"
],
[
"e",
"08f4dd0dc77db7fb6b12425e0bfdf599f1a0da052fc2449e9c7ab90776a6f66b"
],
[
"e",
"0b98bdc02db4240cb67fd1f86f958ec28a864d16e06f1470cfac27f0edbd3ba6",
"",
"reply"
],
[
"p",
"96a0b3e0738e7ff0838abc900fc48f61effef780d175a6bb2c0240246556bb3e"
],
[
"p",
"726a1e261cc6474674e8285e3951b3bb139be9a773d1acf49dc868db861a1c11"
],
[
"p",
"3d03c53608415b1d718c7786ee10bdb4e67bced32207e32880ee9e44301a19ec"
]
],
"content": "client side scanning.\nWhatsapp is closed source, and could implement a switch that can be remotely enabled by them that makes your client to start scanning your messages + upload plain text messages to their server in case it reveal some particular words.\nJust a possible example of a backdoor well obfuscated in binary release that doesnt deal with crypto. This backdoor with open source and reproducible builds would be pretty impossible, but with closed source complex apps it is realistic and possible at least...",
"sig": "28cbac86f9fd7df534f9949d060b43e0e917f51ba55e3d8cc16140aa09dcdce60587a0213dfa67ba10b4e4a2a44eb3a128d80c335d40351add8acb44a008ebac"
}