this post was submitted on 08 May 2025
151 points (98.7% liked)

Technology

69846 readers
3967 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago
MODERATORS
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
151
WhatsApp provides no cryptographic management for group messages (arstechnica.com)
submitted 14 hours ago by [email protected] to c/[email protected]
15 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 37 points 13 hours ago (5 children)

If you want your group memberships to be known only by the group members, use Signal.

[–] [email protected] 30 points 12 hours ago (1 children)

Just be sure to add only the people you want to be there. I've heard someone people add others and it's a bit messy

[–] [email protected] 20 points 12 hours ago (1 children)

How bad can it be, it's not like we're sharing state secrets

[–] [email protected] 6 points 9 hours ago

We're clean on OpSec

[–] [email protected] 8 points 10 hours ago

Or https://simplex.chat/ where there are no identifiers like phone numbers or any other identifier.

Security review was done by trail of bits.

[–] [email protected] 4 points 9 hours ago

Or P2P stuff like Briar :)

[–] [email protected] -3 points 10 hours ago

Just use signal is not a valid statement in a world where vast majority of people aren't using (and won't use) it. I have been trying to get people to install it and have a total of 6 over several years. They only use it to communicate with me.

[–] [email protected] 0 points 12 hours ago (2 children)

Or Matrix (warning some assembly required)

[–] [email protected] 13 points 12 hours ago (2 children)

WhatsApp isn’t the only messenger lacking cryptographic assurances for new group members. In 2022, a team that included some of the same researchers that analyzed WhatsApp found that Matrix—an open source and proprietary platform for chat and collaboration clients and servers—also provided no cryptographic means for ensuring only authorized members join a group. The Telegram messenger, meanwhile, offers no end-to-end encryption for group messages, making the app among the weakest for ensuring the confidentiality of group messages.

[–] [email protected] 8 points 12 hours ago

That study was 3 years ago, features to create private (invite only) group chats are supported now.

[–] [email protected] 1 points 9 hours ago

an open source and proprietary platform

Are parts of matrix closed source?

[–] [email protected] 5 points 10 hours ago

I actually found xmpp to be a breeze compared to most Matrix solutions.

Synapse is bloated, dendrite sucks and conduit is in perpetual beta and the uwu forks die too fast.

XMPP:

  1. Install Snikket
  2. Reverse proxy
  3. Done