# WhatsApp "refuses" to hand over London terrorist's messages

**URL:** <https://boards.straightdope.com/t/whatsapp-refuses-to-hand-over-london-terrorists-messages/783108>\
**Category:** Great Debates\
**Created:** [March 27, 2017, 12:17am UTC](https://boards.straightdope.com/t/whatsapp-refuses-to-hand-over-london-terrorists-messages/783108 "2017-03-27T00:17:36Z")\
**Posts on this page:** 9\
**Page:** 3

<div class="post-metadata">

**Author:** ![aldiboronti](https://avatars.discourse-cdn.com/v4/letter/a/9fc348/32.png) [@aldiboronti](https://boards.straightdope.com/u/aldiboronti)\
**Post date:** [March 30, 2017, 3:17am UTC](https://boards.straightdope.com/t/whatsapp-refuses-to-hand-over-london-terrorists-messages/783108/41 "2017-03-30T03:17:37Z")

</div>

> [@up\_the\_junction](#):
>
> As before; nothing to see here. He wasn’t a ‘terrorist’, no one is seriously making a case for this, a politician took the opportunity to represented the interests of the security services, move on.

If we do some of us will do so having learned of the Straight Line fallacy for the first time, reason enough alone in my estimation for the existence of this thread. Love that fallacy! It should be required reading for all would-be legislators.

---

<div class="post-metadata">

**Author:** ![rat\_avatar](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/rat_avatar/32/255_2.png) [@rat\_avatar](https://boards.straightdope.com/u/rat_avatar)\
**Post date:** [March 30, 2017, 3:29am UTC](https://boards.straightdope.com/t/whatsapp-refuses-to-hand-over-london-terrorists-messages/783108/42 "2017-03-30T03:29:40Z")

</div>

OK lets try a throw back to the 1970’s as this is a very important topic.

You = Bob  
Amazon = Alice  
CC clearing house = Carol  
CAs = Faythe  
Government = Grace

You ask Faythe who both you and Alice trust if Alice is who she says she is. As there is a web of trust everyone works

But if Grace forces Alice and Faythe to also tell you that Grace is Alice the chain of trust is broken.

Because you have to change the process in a way that makes it so you cannot recognize Alice as a trusted individual. And you can now longer rely on Faythe to tell you the truth.

This also opens a pandoras box which will allow Oscar or Mallory to potentially pretend to be Alice because you can no longer recognize her by sight, challenge or trust that Faythe can vouch for her and confirm her identity…

Notice how Carol doesn’t come into the picture, that is because Carol is Alice’s Alice when she is being Bob. You don’t care.

While this may not be clear you can actually google the names above and add “encryption” and it will lead to several good descriptions.

---

<div class="post-metadata">

**Author:** ![coremelt](https://avatars.discourse-cdn.com/v4/letter/c/4491bb/32.png) [@coremelt](https://boards.straightdope.com/u/coremelt)\
**Post date:** [March 30, 2017, 3:55am UTC](https://boards.straightdope.com/t/whatsapp-refuses-to-hand-over-london-terrorists-messages/783108/43 "2017-03-30T03:55:19Z")

</div>

> [@Sage\_Rat](#):
>
> A mid-way stop isn’t a backdoor.

Any mid way stop is a back door, you are implying that the mid way stop (eg WhatsApp) has to store messages in an encrypted format that they have the key to (and which the government can request). Now thousands of WhatsApp employees potentially have access to your messages, any of which can be bribed or compromised. Or WhatsApps servers can be hacked giving black hats or overseas state actors access to everyones messages. Or a state actor can just plant an employee in the company as an undercover agent to ensure access. Etc etc.

---

<div class="post-metadata">

**Author:** ![CurtC](https://avatars.discourse-cdn.com/v4/letter/c/ce73a5/32.png) [@CurtC](https://boards.straightdope.com/u/CurtC)\
**Post date:** [March 30, 2017, 2:57pm UTC](https://boards.straightdope.com/t/whatsapp-refuses-to-hand-over-london-terrorists-messages/783108/44 "2017-03-30T14:57:26Z")

</div>

> [@Sage\_Rat](#):
>
> Unless you refuse to purchase things online, I’m not feeling like you’ve got any room to make the argument that two-hop security is a giant gaping backdoor that can and will be abused by everyone and their grandmother. Is there not a financial motive for Russian mafia to sit in the middle of your two-hop communication with your credit processor? Why have your details not been stolen yet?

I’m not getting how you’re comparing the Amazon transaction to a backdoor. Can you explain the idea in a little more detail?

From the surface, it sounds like you’re saying that the user-Amazon-credit card transaction involves three entities, and a man-in-the-middle attack involves three entities, so they’re equivalent. But I’ll give you more credit than thinking something that simplistic, so I assume there’s an unstated misunderstanding in here somewhere.

---

<div class="post-metadata">

**Author:** ![coremelt](https://avatars.discourse-cdn.com/v4/letter/c/4491bb/32.png) [@coremelt](https://boards.straightdope.com/u/coremelt)\
**Post date:** [March 30, 2017, 3:46pm UTC](https://boards.straightdope.com/t/whatsapp-refuses-to-hand-over-london-terrorists-messages/783108/45 "2017-03-30T15:46:15Z")

</div>

> [@Sage\_Rat](#):
>
> Unless you refuse to purchase things online, I’m not feeling like you’ve got any room to make the argument that two-hop security is a giant gaping backdoor that can and will be abused by everyone and their grandmother. Is there not a financial motive for Russian mafia to sit in the middle of your two-hop communication with your credit processor? Why have your details not been stolen yet?

There have been many hacks where hundreds of thousands of peoples credit cards have been stolen, a google search easily confirms this. Anyway I run an online ecommerce store for my company so I think I can speak about this with some confidence. There is no two hop system for the way credit card processing currently works. My online shop for my company never sees credit card details or numbers, we use a payment gateway to do that. The payment gateway talks directly to the card processor via strong encryption. All I do is send the order details, the payment gateway is then authorised to charge a specific amount, if they abuse this they get shut down very quickly.

Some online payment systems store the credit card number in an encrypted system, thats true. But if your credit card is compromised, you can call the bank, get a new one and usually the fraud is recompensed to you. If your messages are compromised via a two hop system you will never know it so you never have the chance to “call the bank” and get a new encryption key (equivalent of new cc number).

---

<div class="post-metadata">

**Author:** ![DrCube](https://avatars.discourse-cdn.com/v4/letter/d/a3d4f5/32.png) [@DrCube](https://boards.straightdope.com/u/DrCube)\
**Post date:** [March 30, 2017, 5:38pm UTC](https://boards.straightdope.com/t/whatsapp-refuses-to-hand-over-london-terrorists-messages/783108/46 "2017-03-30T17:38:34Z")

</div>

> [@wolfpup](#):
>
> And on Monday, August 6, 2001, President George W. Bush received a comprehensive daily briefing document warning that somebody named Osama bin Laden was “determined to strike within the US”. Yes, having the CIA, NSA, and FBI protecting the nation did a lot of good, didn’t it? Disband them all! :rolleyes:

You’re being facetious, but why? What good have any of those organizations done for anyone? (Besides the NSA – you have to distinguish between the previous “Good guy NSA that helped create strong cryptography” and the current “Bad guy NSA that tries to destroy cryptography”.)

---

<div class="post-metadata">

**Author:** ![Sage\_Rat](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/sage_rat/32/399_2.png) [@Sage\_Rat](https://boards.straightdope.com/u/Sage_Rat)\
**Post date:** [March 30, 2017, 6:29pm UTC](https://boards.straightdope.com/t/whatsapp-refuses-to-hand-over-london-terrorists-messages/783108/47 "2017-03-30T18:29:49Z")

</div>

> [@Steve\_MB](#):
>
> Those are two separate communications – “me to Amazon” and “Amazon to CC processor” – each of which is separately verified, with neither party attempting an impersonation.

Yes, nor did I suggest anything else. That’s all you need in order to be able to execute a wiretap for a legal warrant.

---

<div class="post-metadata">

**Author:** ![Steve\_MB](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/steve_mb/32/5339_2.png) [@Steve\_MB](https://boards.straightdope.com/u/Steve_MB)\
**Post date:** [March 30, 2017, 7:11pm UTC](https://boards.straightdope.com/t/whatsapp-refuses-to-hand-over-london-terrorists-messages/783108/48 "2017-03-30T19:11:18Z")

</div>

> [@Sage\_Rat](#):
>
> Yes, nor did I suggest anything else. That’s all you need in order to be able to execute a wiretap for a legal warrant.

A wiretap on what? The communication from me to the credit card center doesn’t even _exist_, so how can anyone get a warrant to wiretap it? Someone might be able to get a warrant to look at Amazon’s records or the credit card center’s records or my records, but that’s not an issue that involves creating a previously absent security hole in the communications infrastructure.

The essential issue is that data should be accessible at those points, and only those points, where access is necessary. Obviously, I need to know what I am ordering on Amazon, Amazon needs to know what to ship to me, and the credit card processor needs to know what to charge me, so all three are parties to the two separate communications links. When Alice sends Bob a message on WhatsApp, the WhatsApp management has no need to know what’s in the message; thus, keeping it inaccessible to them is desirable to avoid an unnecessary risk of leakage.

But, ah, you may say, there are times when the _gummint_ needs to know! Very well; let the gummint go to me, Amazon, or the credit card processor (in the former example) or go to Alice or Bob (in the latter) and serve their warrant.

---

<div class="post-metadata">

**Author:** ![Steve\_MB](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/steve_mb/32/5339_2.png) [@Steve\_MB](https://boards.straightdope.com/u/Steve_MB)\
**Post date:** [March 31, 2017, 3:13pm UTC](https://boards.straightdope.com/t/whatsapp-refuses-to-hand-over-london-terrorists-messages/783108/49 "2017-03-31T15:13:23Z")

</div>

It seems that the bureaucrat who originally raised the stink is now slinking away after the other people in the room came to [an unspoken consensus](http://www.digitallook.com/news/political-news/platforms-pledge-to-create-forum-to-discuss-tackling-extremist-content--2600848.html) to pretend that nobody smelled her three-bean-jumbo-burrito fart:

> [@](#):
>
> Tech firms said they would develop ways to “identify and remove terrorist propaganda” but failed to mention any movement on how to deal with encrypted messages, after a meeting with UK Home Secretary Amber Rudd.
> 
> Rudd met executives from Google, Microsoft, Twitter and Facebook. She has been publicly critical of their use of encryption on message applications which puts the content out of police reach…
> 
> In a statement after the meeting on Rudd called the talks “useful” but demanded the industry worked harder and faster to stop extremist material even going online.
> 
> There was no mention by either side of access to encrypted messages as flagged by the minister earlier this week. There was also no indication of when any measures would be implemented…

[Previous page](https://boards.straightdope.com/t/whatsapp-refuses-to-hand-over-london-terrorists-messages/783108.md?page=2)
