WhatsApp has bolstered the security of the iCloud backup feature in its messaging platform, in an attempt to protect archived chat logs from being accessed in a readable form (via TechCrunch).
WhatsApp has offered end-to-end encryption on its messaging service for some time, but that encryption did not previously extend to iCloud backups of messages. Given that Apple holds the encryption keys for iCloud, a subpoena of Apple or an unauthorized iCloud hack could potentially allow access to WhatsApp messages backed up there.
However, WhatsApp has moved to prevent that possibility by also pre-encrypting the backup files. "When a user backs up their chats through WhatsApp to iCloud, the backup files are sent encrypted," a WhatsApp spokesperson told Forbes, confirming the change.
WhatsApp quietly added the encryption to WhatsApp iCloud backups late last year, however the change only came to light last week when professional hackers claimed to be able to circumvent the security measure.
According to Russian-based Oxygen Forensics, third-party hacking tools are able to download the encrypted WhatsApp data backed up to iCloud and then generate an encryption key to decrypt the data using the associated SIM card. The tools could potentially be used by police with access to a phone where the WhatsApp account has been deactivated but the encrypted messages are still stored in iCloud. WhatsApp has yet to comment on the claims.
The encryption debate has been reignited in recent weeks on both sides of the Atlantic. FBI director James Comey revealed earlier this month that his agency had been unable to access the data on more than 3,000 mobile devices in the first half of the fiscal year, despite having legal authority to avail themselves of the contents.
A recent statement by U.S. senator Dianne Feinstein also appeared to confirm that the government had used $900,000 of public money to pay for the third-party tools to unlock the iPhone used by the San Bernardino terrorist. No information of relevance was found on the device, the FBI later revealed.
Meanwhile in the U.K., government home secretary Amber Rudd recently claimed that it is "completely unacceptable" that authorities cannot gain access to messages stored on mobile applications protected by end-to-end encryption, such as WhatsApp. Rudd said she would be discussing the situation with technology companies in the near future.
Since that time, a draft technical paper prepared by the U.K. government has been leaked that contains proposals related to the removal of encryption from private communications. The paper reveals that companies would be required to provide the raw data "in an intelligible form" without "electronic protection" within one working day. Discussions about the feasibility of the proposals are said to be ongoing.
Note: Due to the political nature of the discussion regarding this topic, the discussion thread is located in our Politics, Religion, Social Issues forum. All forum members and site visitors are welcome to read and follow the thread, but posting is limited to forum members with at least 100 posts.
WhatsApp has offered end-to-end encryption on its messaging service for some time, but that encryption did not previously extend to iCloud backups of messages. Given that Apple holds the encryption keys for iCloud, a subpoena of Apple or an unauthorized iCloud hack could potentially allow access to WhatsApp messages backed up there.
However, WhatsApp has moved to prevent that possibility by also pre-encrypting the backup files. "When a user backs up their chats through WhatsApp to iCloud, the backup files are sent encrypted," a WhatsApp spokesperson told Forbes, confirming the change.
WhatsApp quietly added the encryption to WhatsApp iCloud backups late last year, however the change only came to light last week when professional hackers claimed to be able to circumvent the security measure.
According to Russian-based Oxygen Forensics, third-party hacking tools are able to download the encrypted WhatsApp data backed up to iCloud and then generate an encryption key to decrypt the data using the associated SIM card. The tools could potentially be used by police with access to a phone where the WhatsApp account has been deactivated but the encrypted messages are still stored in iCloud. WhatsApp has yet to comment on the claims.
The encryption debate has been reignited in recent weeks on both sides of the Atlantic. FBI director James Comey revealed earlier this month that his agency had been unable to access the data on more than 3,000 mobile devices in the first half of the fiscal year, despite having legal authority to avail themselves of the contents.
A recent statement by U.S. senator Dianne Feinstein also appeared to confirm that the government had used $900,000 of public money to pay for the third-party tools to unlock the iPhone used by the San Bernardino terrorist. No information of relevance was found on the device, the FBI later revealed.
Meanwhile in the U.K., government home secretary Amber Rudd recently claimed that it is "completely unacceptable" that authorities cannot gain access to messages stored on mobile applications protected by end-to-end encryption, such as WhatsApp. Rudd said she would be discussing the situation with technology companies in the near future.
Since that time, a draft technical paper prepared by the U.K. government has been leaked that contains proposals related to the removal of encryption from private communications. The paper reveals that companies would be required to provide the raw data "in an intelligible form" without "electronic protection" within one working day. Discussions about the feasibility of the proposals are said to be ongoing.
Note: Due to the political nature of the discussion regarding this topic, the discussion thread is located in our Politics, Religion, Social Issues forum. All forum members and site visitors are welcome to read and follow the thread, but posting is limited to forum members with at least 100 posts.
14 comments
An Israeli security firm claims it has developed a smartphone surveillance tool that can harvest not only a user's local data but also all their device's communications with cloud-based...
Ahead of every new iPhone release, we're inundated with rumors, part leaks, mockups, and dummy models, all of which give us a good idea of what to expect when new devices launch.
2019 is no...
Apple today released the third public betas of iOS 13 and iPadOS to its public beta testing group, 10 days after seeding the second public betas and a day after the fourth developer beta. The public...
Apple today shared a new trailer for its upcoming "Snoopy in Space" show that's coming to Apple TV+ this fall. As Deadline points out, the release of new trailer has been timed to...
Apple this morning released the fourth beta of iOS 13 for developers, introducing bug fixes and adding and refining iOS 13 features.
Now that we're into the fourth beta, changes and updates...
A security vulnerability in the Bluetooth communication protocol has the potential to allow malicious actors to track and identify devices from Apple and Microsoft, according to new research from...
Apple is renewing its "Carpool Karaoke: The Series" show for a third season, Apple announced on YouTube today via James Corden's YouTube channel. The new season is already in production...
