Slashdot Mirror


The Guardian Reveals That Whisper App Tracks "Anonymous" Users

New submitter qqod writes this story at The Guardian that raises privacy concerns over the Whisper app. "The company behind Whisper, the social media app that promises users anonymity and claims to be the “the safest place on the internet”, is tracking the location of its users, including some who have specifically asked not to be followed. The practice of monitoring the whereabouts of Whisper users – including those who have expressly opted out of geolocation services – will alarm users, who are encouraged to disclose intimate details about their private and professional lives. Whisper is also sharing information with the US Department of Defense gleaned from smartphones it knows are used from military bases, and developing a version of its app to conform with Chinese censorship laws."

27 of 180 comments (clear)

  1. Well by DaMattster · · Score: 4, Informative

    Looks like I WILL NOT be trying this app at all. I was a bit curious.

    1. Re:Well by Anonymous Coward · · Score: 5, Interesting

      This is almost not certainly the app you have been curious about. The company called Whisper Systems was started by Moxie Marlinspike, a highly respected cypherphunk. Their app is called redphone. The "whisper" app, though, is made by a company called Whisper, which has close DoD ties and all sorts of red flags.

      The similarity in names is no coincidence. I think this is actually a deliberate attempt to spread distrust about phone crypto apps.

    2. Re: Well by Anonymous Coward · · Score: 5, Informative

      The app is called Signal - Private Messenger in the Apple App Store. The android version is RedPhone. Just in case anyone is interested. It is a neat little end to end encryption app however I haven't checked the source code so I can't vouch for it.

    3. Re:Well by gnasher719 · · Score: 4, Insightful

      What the fuck are people doing using non-free software that claims to protect their privacy? If you can't even see the source, what do you expect?

      Seeing the source doesn't help when (a) you are not a software developer, (b) you are a software developer with a job who doesn't have unlimited time to look at source code, (c) you are a software developer with lots of spare time but the source code that you are shown isn't the source code used.

      And open source gives the bad guys an easy way to create hacked versions of secure software that aren't secure. Someone stealing your secrets is unlikely to be impressed by GPL and copyright.

    4. Re:Well by Anonymous Coward · · Score: 4, Insightful

      Seeing the source doesn't help when (a) you are not a software developer, (b) you are a software developer with a job who doesn't have unlimited time to look at source code, (c) you are a software developer with lots of spare time but the source code that you are shown isn't the source code used.

      The point is that, with free software, you have the *ability* to see the source, to hire others to audit the code, to modify the code, to hire others to modify the code, and to share any changes you make. How could any of that possibly be useless? Even just being able to *see* the source code is a step up from proprietary software. There are far more prying eyes.

      The benefits of free software cannot be denied. This sort of tracking is far less commonplace.

      And open source gives the bad guys an easy way to create hacked versions of secure software that aren't secure.

      Doesn't help them much; just pay attention to the source you're getting it from. You might be able to fool some people, but not enough.

    5. Re:Well by Impy+the+Impiuos+Imp · · Score: 2

      I am unconcerned if facebook computers are trying to determine if I want to buy Pampers or Depends so computers can sell electrons to other computers to shove electrons in front of my face.

      But claiming you have privacy from...just what now? Government, when you are feeding it back to government because government demands it?

      What. The. Fuck.

      That is the historical abuser of privacy we should be afraid of. Even privacy apps collapse immediately with just a wink from the onrushing government computerized panopticon juggernaut?

      It's time for some kind of constitutional amendment to extend and require warrants to virtual property and locations online, to get around the loophole that it's "on some company's server somewhere, so you 'have no expectation of privacy.' "

      And keep an eye on the weasel politicians who would water it down.

      --
      (-1: Post disagrees with my already-settled worldview) is not a valid mod option.
  2. Careless whisper by telleropnul · · Score: 5, Funny

    We could have been so good together
    We could have lived this dance forever

  3. Don't trust any app these days by Nyder · · Score: 5, Insightful

    It's getting to the point where you can't trust anything these days, because the NSA or other criminals seem to have access to your data.

    And remember, the FBI head dude doesn't want you to use encryption.

    Is this the America we are supposed to be proud of?

    --
    Be seeing you...
    1. Re:Don't trust any app these days by Anonymous Coward · · Score: 4, Funny

      The check is in the post
      I won't come in your mouth
      I promise we won't track you

    2. Re:Don't trust any app these days by Anne+Thwacks · · Score: 4, Insightful
      If you want people with secrets worth investigating, surely advertising as providing secrecy is the best way to recruit them.

      If you are hiding a needle in a haystack, you might want to make sure the hay is magnetic first.

      --
      Sent from my ASR33 using ASCII
    3. Re:Don't trust any app these days by vikingpower · · Score: 5, Interesting

      Mod parent up into the sky, please. As a European, I am watching at the sideline, with ever-growing incredulity, how US Americans take all this, and worse, and more, from their so-called "government", from their unbelievably brutal "law enforcement", from what once was their state. What do you people need for an incentive to kick off a revolution ? Maybe if the US government put almost 1% of your population into prison, you would finally protest. Oh no, shit, wait....

      --
      Religous speak to God. Insane are spoken to by God. When all shut up, one can finally hear Shostakovich in peace
    4. Re:Don't trust any app these days by DirePickle · · Score: 4, Insightful

      Europeans should have a pretty damn good understanding that things can get really, really, really bad without people revolting.

    5. Re:Don't trust any app these days by weilawei · · Score: 3, Insightful

      We're all spread out. There's hotspots of issues and then huge swaths of relatively uninhabited areas without anything resembling a critical mass.

      The people in the cities are out in the streets. The people in the suburbs and farms still have something to lose.

    6. Re:Don't trust any app these days by vikingpower · · Score: 3, Interesting

      Good point. The French revolution began in Paris, with its - for then - record-high concentration of poor people. So did the communist revolution: it began in St. Petersburg. Not on the countryside. LA, what are you waiting for ?? ;-)

      --
      Religous speak to God. Insane are spoken to by God. When all shut up, one can finally hear Shostakovich in peace
    7. Re:Don't trust any app these days by Eunuchswear · · Score: 2

      Ironically you're asking when we might revolt against our own Government when yours disarmed you long ago, removing your capability altogether.

      Why do Americans think all Europeans are unarmed?

      Gun ownership per 100 residents:

      USA: 90
      Switzerland: 45.7
      Finland: 45.3
      France: 31.2
      Austria: 30.4
      Germany: 30.3
      Greece: 22.5
      Belgium: 17.2 ...
      England: 6.2

      Gun ownership is lower in Europe, but not as low as some people think.

      --
      Watch this Heartland Institute video
  4. When are you going to believe me? by fustakrakich · · Score: 2

    When I tell you that privacy policies are pure BS? It doesn't matter if it's Whisper, Apple, or Google. They are tracking you, probably under orders. We won't know, unless we rearrange the house!

    --
    “He’s not deformed, he’s just drunk!”
    1. Re:When are you going to believe me? by TapeCutter · · Score: 3, Funny

      We won't know, unless we rearrange the house!

      Nice try, but it's still your turn to do the dishes.

      --
      And did you exchange a walk on part in the war for a lead role in a cage? - Pink Floyd.
  5. No profit in it by EzInKy · · Score: 5, Insightful

    Any business depends on profit to survive, and there is no profit to be had in providing privacy...and certainly not privacy without a fee. A fee of course means a method of payment, and every method of payment is traceable to some extent. Even totally volunteer systems are no guarantee of privacy, as governments are certain to be the first to volunteer.

    --
    Time is what keeps everything from happening all at once.
  6. Re:Surprise by Anonymous Coward · · Score: 5, Insightful

    "He’s a guy that we’ll track for the rest of his life and he’ll have no idea we’ll be watching him," the same Whisper executive said.

    Pro-tip: The people who scream the loudest about privacy and anonymity, but won't show you their source: these are the honeypots. And agent provocateurs. If someone's pushing you to do something for no good reason, perhaps you should ignore them.

  7. Re:Threema by weilawei · · Score: 2

    Okay, NSA, we heard you.. we'll get right on that.

    "Sorry, we shut down Project Minaret. We don't do that anymore."

    Closed source? Check.
    Commercial? Check.
    Being hawked after the latest revelation that some other commercial and closed source app promising privacy was doing exactly the opposite? Check.

    Go fuck yourself.

  8. If you want to be sure your words are not overhead by American+Patent+Guy · · Score: 2

    then do not speak them.

    You have a right to free speech (or perhaps a lesser equivalent outside the U.S.) You never had a right to be free from the consequences of your speech. You also do not have a right to anonymity, or to a privacy attached to words that you have delivered outside of your control. You have no right to be free of your own foolishness, if you choose to act like a fool.

    That said, this company might get it's backside sued off by a class action lawsuit if it can be shown that it was tracking its clients without their consent or against their wishes. I'll bet that in at least in one state there's a law prohibiting that, even if there's a clause in their license or contract that permits it (which apparently their new terms of service has.) Extraordinary terms in a contract are not necessarily enforced, as any first year law school student can tell you.

    Any data gleaned by such measures would likely be ruled to be inadmissible in a criminal action: it is merely the government attempting to use a third party to engage in an unreasonable search and seizure. It might be a stupid thing for a soldier to use this app on a military base against regulations, but the government would be even more stupid to try to use "the fruit of the poisonous tree" (evidence that would not have been gathered but for the unlawful search) against one of its citizens.

    All of this goes to show that you can't stop others from being stupid...

  9. Whisper's already denied this by Chas · · Score: 4, Informative

    http://www.washingtonpost.com/blogs/style-blog/wp/2014/10/16/secret-sharing-app-whisper-to-the-guardian-you-published-a-pack-of-vicious-lies-about-us/

    Whisper, darling child of the online anonymity surge, is going to war with the Guardian over a story saying the app tracks the identities and locations of some users.

    Launched two years ago, Whisper says it’s the “safest place on the internet,” a social networking app that lets people anonymously share short messages — “whispers” — supposedly detached from any identifiable information.

    But in a lengthy takedown published Thursday, the Guardian claims otherwise, saying Whisper uses a handful of tools to subvert its own claims of privacy and anonymity. Whisper, according to the Guardian report, tracks newsworthy users and uses roundabout methods of finding out the locations of users who decline to share it; the company then shares that information with third parties, including the U.S. government, the Guardian reported.

    The outlet also said the app changed its privacy policy after it was made aware that the Guardian’s story would run.

    All of these claims, Whisper officials said, are patently false.

    Whisper’s editor-in-chief, Neetzan Zimmerman, went into attack mode immediately after the story was published, saying it was a “pack of vicious lies” and that “the Guardian made a mistake posting that story and they will regret it.”

    Reached by phone, Zimmerman categorically denied the basis of the story, saying that while certain degrees of tracking (such as a city of location) are possible through simply connecting to the Internet, the methods the Guardian described are “either outright false or misguided or misinformed.”

    “Clearly, their intention was for absolutely no reason to write a hit piece about us and try to scare away our users,” Zimmerman said, sounding irate at times.

    The Guardian story describes techniques that Whisper allegedly uses to find “newsworthy” users, such as those who work at Yahoo and Disney, or on Capitol Hill. It also says there is a technical backdoor that allows Whisper to pinpoint the location of users who have declined to share their location with the app, and that Zimmerman and another executive had requested staff to exploit it.

    But Zimmerman, fuming at the accusations, said such backdoors are “technically impossible.”

    “That is false, that is 100 percent false,” he said. “That was never said by anyone. I have no idea where that quote came from. I have no idea what they’re talking about. I have never, ever, ever asked anybody in my life, and would never ask anybody, for information on a user who opted out of user location. That cannot be overemphasized. That is a 100 percent lie.”

    He added that no change was made to the app’s privacy policy as a response to the Guardian’s story. (Still, my colleague Brian Fung noted that any changes to a privacy policy may invite inquiry from the FTC.)

    Whisper employees can, however, search for keywords (analogous to a Twitter search) to find users and their “whispers” that may be interesting to some of its media partners, including BuzzFeed, which publishes an ongoing series of posts that highlight interesting or newsworthy messages on the service.

    A BuzzFeed spokesman told Valleywag on Thursday: “We’re taking a break from our partnership until Whisper clarifies to us and its users the policy on user location and privacy.”

    Zimmerman also said the Guardian has had a months-long partnership with Whisper that used the very techniques the article decries.

    “There are at least three Guardian stories written off Whisper, and two of which we

    --


    Chas - The one, the only.
    THANK GOD!!!
    1. Re:Whisper's already denied this by metamatic · · Score: 2
      âoeThere are at least three Guardian stories written off Whisper, and two of which were using the methods the article is attacking,â Zimmerman said

      The ones he insists don't exist because the Guardian article is all lies?

      If you're going to issue a denial, you should at least get your story internally consistent.

      --
      GCHQ Quantum Insert installed. If only our tongues were made of glass, how much more careful we would be when we speak
  10. Re:If you want to be sure your words are not overh by The+Ickle+Jones · · Score: 3, Insightful

    There is no explicit constitutional right to privacy. Look for it all you want: you won't find it.

    There doesn't need to be. The constitution is a whitelist of things the government can do, not a blacklist of things it can't.

    Your baggage will be searched at the airport, in one example, because the "right" to privacy that you think you have is unreasonable against the danger you might pose to the other passengers.

    We're supposed to be 'the land of the free and the home of the brave.' Free and brave people would not sacrifice fundamental liberties and allow worthless government thugs to search everyone at airports in the name of safety.

    So while the courts may often be complicit in the crimes against the American people, that by no means means that their interpretation of the constitution is the correct one. Often, they ignore the spirit of the constitution and even sometimes the words themselves in favor of letting the government do as it pleases. Were the spirit of the constitution considered, the government wouldn't be able to get just any information about you just because it's stored by some third party, and no individual with a brain would ever think that them doing this is a good thing.

    I'm just stating the way the law is.

    Which is pretty useless, because most people criticize the way the law is or criticize judges' interpretations of it. But it looks more like you're stating what others think the law is, which is even more useless, since those people are often hated for promoting police states.

  11. Re:Highly illegal by American+Patent+Guy · · Score: 2

    Tracking without the consent of the user is illegal wiretapping. The responsible persons at "whisper" should prepare for criminal law suits against them.

    1. You are tracked every day without your consent. Have you ever examined an email header? It contains these magical things called "usernames", "domain names", "timestamps" and "IP addresses" that authenticate who you are and when you did things. Do you ever drive a car? Then you have to present your license (containing your identity) to any officer who asks. Ever send an SMS message? Do you ever carry your phone around with you turned on so you can receive a call? Got a pass for the bus? Your "illegal wiretapping" is a fantasy.

    2. Do you really think the same government that is asking for and/or collecting this data is going to prosecute the provider?

  12. Re:If you want to be sure your words are not overh by The+Ickle+Jones · · Score: 2

    You know, there is a reason that we have these things called "judges": they are there to avoid would-be monarchs such as you from applying their own, independent law.

    You are appealing to authority. Just because judges say something doesn't make it right. If judges interpreted the first amendment to mean that the government has the power to murder anyone without any due process, obviously their interpretation would be incorrect, even if all judges kept interpreting it that way.

    There is no such single tribunal. In the US, it is ultimately up to The People to make sure the government follows the constitution. Judges will eventually be replaced and hopefully ones who respect the constitution will replace them, and with enough effort, politicians can be reigned in, and amendments can be created (perhaps to better enforce the constitution).

    Mindless individuals who feel that everything judges do is correct have no place in 'the land of the free and the home of the brave.' Or maybe, contrary to what you have said, you agree with the current state of affairs, and are not just telling others how the law is?

    No one would be free under your version.

    They'd be more free than under the reign of corrupt judges. Unless you think that privacy leads to a police state, but that would be strange.

    I do not want to be a monarch; I want the government to follow the constitution, which includes its spirit.

  13. sure, i am convinced by hurfy · · Score: 2

    "Zimmerman also said the Guardian has had a months-long partnership with Whisper that used the very techniques the article decries."

    Would that be the technically impossible ones or the ones they would NEVER use?