Slashdot Mirror


The Guardian Reveals That Whisper App Tracks "Anonymous" Users

New submitter qqod writes this story at The Guardian that raises privacy concerns over the Whisper app. "The company behind Whisper, the social media app that promises users anonymity and claims to be the “the safest place on the internet”, is tracking the location of its users, including some who have specifically asked not to be followed. The practice of monitoring the whereabouts of Whisper users – including those who have expressly opted out of geolocation services – will alarm users, who are encouraged to disclose intimate details about their private and professional lives. Whisper is also sharing information with the US Department of Defense gleaned from smartphones it knows are used from military bases, and developing a version of its app to conform with Chinese censorship laws."

18 of 180 comments (clear)

  1. Well by DaMattster · · Score: 4, Informative

    Looks like I WILL NOT be trying this app at all. I was a bit curious.

    1. Re:Well by Anonymous Coward · · Score: 5, Interesting

      This is almost not certainly the app you have been curious about. The company called Whisper Systems was started by Moxie Marlinspike, a highly respected cypherphunk. Their app is called redphone. The "whisper" app, though, is made by a company called Whisper, which has close DoD ties and all sorts of red flags.

      The similarity in names is no coincidence. I think this is actually a deliberate attempt to spread distrust about phone crypto apps.

    2. Re: Well by Anonymous Coward · · Score: 5, Informative

      The app is called Signal - Private Messenger in the Apple App Store. The android version is RedPhone. Just in case anyone is interested. It is a neat little end to end encryption app however I haven't checked the source code so I can't vouch for it.

    3. Re:Well by gnasher719 · · Score: 4, Insightful

      What the fuck are people doing using non-free software that claims to protect their privacy? If you can't even see the source, what do you expect?

      Seeing the source doesn't help when (a) you are not a software developer, (b) you are a software developer with a job who doesn't have unlimited time to look at source code, (c) you are a software developer with lots of spare time but the source code that you are shown isn't the source code used.

      And open source gives the bad guys an easy way to create hacked versions of secure software that aren't secure. Someone stealing your secrets is unlikely to be impressed by GPL and copyright.

    4. Re:Well by Anonymous Coward · · Score: 4, Insightful

      Seeing the source doesn't help when (a) you are not a software developer, (b) you are a software developer with a job who doesn't have unlimited time to look at source code, (c) you are a software developer with lots of spare time but the source code that you are shown isn't the source code used.

      The point is that, with free software, you have the *ability* to see the source, to hire others to audit the code, to modify the code, to hire others to modify the code, and to share any changes you make. How could any of that possibly be useless? Even just being able to *see* the source code is a step up from proprietary software. There are far more prying eyes.

      The benefits of free software cannot be denied. This sort of tracking is far less commonplace.

      And open source gives the bad guys an easy way to create hacked versions of secure software that aren't secure.

      Doesn't help them much; just pay attention to the source you're getting it from. You might be able to fool some people, but not enough.

  2. Careless whisper by telleropnul · · Score: 5, Funny

    We could have been so good together
    We could have lived this dance forever

  3. Don't trust any app these days by Nyder · · Score: 5, Insightful

    It's getting to the point where you can't trust anything these days, because the NSA or other criminals seem to have access to your data.

    And remember, the FBI head dude doesn't want you to use encryption.

    Is this the America we are supposed to be proud of?

    --
    Be seeing you...
    1. Re:Don't trust any app these days by Anonymous Coward · · Score: 4, Funny

      The check is in the post
      I won't come in your mouth
      I promise we won't track you

    2. Re:Don't trust any app these days by Anne+Thwacks · · Score: 4, Insightful
      If you want people with secrets worth investigating, surely advertising as providing secrecy is the best way to recruit them.

      If you are hiding a needle in a haystack, you might want to make sure the hay is magnetic first.

      --
      Sent from my ASR33 using ASCII
    3. Re:Don't trust any app these days by vikingpower · · Score: 5, Interesting

      Mod parent up into the sky, please. As a European, I am watching at the sideline, with ever-growing incredulity, how US Americans take all this, and worse, and more, from their so-called "government", from their unbelievably brutal "law enforcement", from what once was their state. What do you people need for an incentive to kick off a revolution ? Maybe if the US government put almost 1% of your population into prison, you would finally protest. Oh no, shit, wait....

      --
      Religous speak to God. Insane are spoken to by God. When all shut up, one can finally hear Shostakovich in peace
    4. Re:Don't trust any app these days by DirePickle · · Score: 4, Insightful

      Europeans should have a pretty damn good understanding that things can get really, really, really bad without people revolting.

    5. Re:Don't trust any app these days by weilawei · · Score: 3, Insightful

      We're all spread out. There's hotspots of issues and then huge swaths of relatively uninhabited areas without anything resembling a critical mass.

      The people in the cities are out in the streets. The people in the suburbs and farms still have something to lose.

    6. Re:Don't trust any app these days by vikingpower · · Score: 3, Interesting

      Good point. The French revolution began in Paris, with its - for then - record-high concentration of poor people. So did the communist revolution: it began in St. Petersburg. Not on the countryside. LA, what are you waiting for ?? ;-)

      --
      Religous speak to God. Insane are spoken to by God. When all shut up, one can finally hear Shostakovich in peace
  4. No profit in it by EzInKy · · Score: 5, Insightful

    Any business depends on profit to survive, and there is no profit to be had in providing privacy...and certainly not privacy without a fee. A fee of course means a method of payment, and every method of payment is traceable to some extent. Even totally volunteer systems are no guarantee of privacy, as governments are certain to be the first to volunteer.

    --
    Time is what keeps everything from happening all at once.
  5. Re:When are you going to believe me? by TapeCutter · · Score: 3, Funny

    We won't know, unless we rearrange the house!

    Nice try, but it's still your turn to do the dishes.

    --
    And did you exchange a walk on part in the war for a lead role in a cage? - Pink Floyd.
  6. Re:Surprise by Anonymous Coward · · Score: 5, Insightful

    "He’s a guy that we’ll track for the rest of his life and he’ll have no idea we’ll be watching him," the same Whisper executive said.

    Pro-tip: The people who scream the loudest about privacy and anonymity, but won't show you their source: these are the honeypots. And agent provocateurs. If someone's pushing you to do something for no good reason, perhaps you should ignore them.

  7. Whisper's already denied this by Chas · · Score: 4, Informative

    http://www.washingtonpost.com/blogs/style-blog/wp/2014/10/16/secret-sharing-app-whisper-to-the-guardian-you-published-a-pack-of-vicious-lies-about-us/

    Whisper, darling child of the online anonymity surge, is going to war with the Guardian over a story saying the app tracks the identities and locations of some users.

    Launched two years ago, Whisper says it’s the “safest place on the internet,” a social networking app that lets people anonymously share short messages — “whispers” — supposedly detached from any identifiable information.

    But in a lengthy takedown published Thursday, the Guardian claims otherwise, saying Whisper uses a handful of tools to subvert its own claims of privacy and anonymity. Whisper, according to the Guardian report, tracks newsworthy users and uses roundabout methods of finding out the locations of users who decline to share it; the company then shares that information with third parties, including the U.S. government, the Guardian reported.

    The outlet also said the app changed its privacy policy after it was made aware that the Guardian’s story would run.

    All of these claims, Whisper officials said, are patently false.

    Whisper’s editor-in-chief, Neetzan Zimmerman, went into attack mode immediately after the story was published, saying it was a “pack of vicious lies” and that “the Guardian made a mistake posting that story and they will regret it.”

    Reached by phone, Zimmerman categorically denied the basis of the story, saying that while certain degrees of tracking (such as a city of location) are possible through simply connecting to the Internet, the methods the Guardian described are “either outright false or misguided or misinformed.”

    “Clearly, their intention was for absolutely no reason to write a hit piece about us and try to scare away our users,” Zimmerman said, sounding irate at times.

    The Guardian story describes techniques that Whisper allegedly uses to find “newsworthy” users, such as those who work at Yahoo and Disney, or on Capitol Hill. It also says there is a technical backdoor that allows Whisper to pinpoint the location of users who have declined to share their location with the app, and that Zimmerman and another executive had requested staff to exploit it.

    But Zimmerman, fuming at the accusations, said such backdoors are “technically impossible.”

    “That is false, that is 100 percent false,” he said. “That was never said by anyone. I have no idea where that quote came from. I have no idea what they’re talking about. I have never, ever, ever asked anybody in my life, and would never ask anybody, for information on a user who opted out of user location. That cannot be overemphasized. That is a 100 percent lie.”

    He added that no change was made to the app’s privacy policy as a response to the Guardian’s story. (Still, my colleague Brian Fung noted that any changes to a privacy policy may invite inquiry from the FTC.)

    Whisper employees can, however, search for keywords (analogous to a Twitter search) to find users and their “whispers” that may be interesting to some of its media partners, including BuzzFeed, which publishes an ongoing series of posts that highlight interesting or newsworthy messages on the service.

    A BuzzFeed spokesman told Valleywag on Thursday: “We’re taking a break from our partnership until Whisper clarifies to us and its users the policy on user location and privacy.”

    Zimmerman also said the Guardian has had a months-long partnership with Whisper that used the very techniques the article decries.

    “There are at least three Guardian stories written off Whisper, and two of which we

    --


    Chas - The one, the only.
    THANK GOD!!!
  8. Re:If you want to be sure your words are not overh by The+Ickle+Jones · · Score: 3, Insightful

    There is no explicit constitutional right to privacy. Look for it all you want: you won't find it.

    There doesn't need to be. The constitution is a whitelist of things the government can do, not a blacklist of things it can't.

    Your baggage will be searched at the airport, in one example, because the "right" to privacy that you think you have is unreasonable against the danger you might pose to the other passengers.

    We're supposed to be 'the land of the free and the home of the brave.' Free and brave people would not sacrifice fundamental liberties and allow worthless government thugs to search everyone at airports in the name of safety.

    So while the courts may often be complicit in the crimes against the American people, that by no means means that their interpretation of the constitution is the correct one. Often, they ignore the spirit of the constitution and even sometimes the words themselves in favor of letting the government do as it pleases. Were the spirit of the constitution considered, the government wouldn't be able to get just any information about you just because it's stored by some third party, and no individual with a brain would ever think that them doing this is a good thing.

    I'm just stating the way the law is.

    Which is pretty useless, because most people criticize the way the law is or criticize judges' interpretations of it. But it looks more like you're stating what others think the law is, which is even more useless, since those people are often hated for promoting police states.