Slashdot Mirror

← Back to Stories (view on slashdot.org)

Encrypted WhatsApp Message Recovered From Westminster Terrorist's Phone (indiatimes.com)

Posted by EditorDavid on from the no-more-secrets dept.

Bruce66423 brings word that a terrorist's WhatsApp message has been decrypted "using techniques that 'cannot be disclosed for security reasons', though 'sources said they now have the technical expertise to repeat the process in future.'" The Economic Times reports: U.K. security services have managed to decode the last message sent out by Khalid Masood before he rammed his high-speed car into pedestrians on Westminster Bridge and stabbed to death a police officer at the gates of Parliament on March 22. The access to Masood's message was achieved by what has been described by security sources as a use of "human and technical intelligence"...

The issue of WhatsApp's encrypted service, which is closed to anyone besides the sender and recipient, had come under criticism soon after the attack. "It's completely unacceptable. There should be no place for terrorists to hide. We need to make sure that organisations like WhatsApp, and there are plenty of others like that, don't provide a secret place for terrorists to communicate with each other," U.K. home secretary Amber Rudd had said.
Security sources say the message showed the victim's motive was military action in Muslim countries, while the article adds that though ISIS claimed responsibility for the attack, "no evidence has emerged to back this up."

16 of 143 comments (clear)

  1. Bullshit. by Frosty+Piss · · Score: 5, Insightful

    The claim is dubious. Why would they inform all the Terrorists that they can decrypt WhatsApp with ease? They wouldn't. The reason for the "disclosure" is to influence Terrorists to use some other - perhaps less secure - means of communication because they CAN NOT decrypt WhatsApp.

    --
    If you want news from today, you have to come back tomorrow.
    1. Re: Bullshit. by Anonymous Coward · · Score: 2, Insightful

      "Using a chat program to hide " doesn't even make logical sense.

    2. Re:Bullshit. by thewolfkin · · Score: 4, Insightful

      This isn't a fucking TV drama, it is more important to get the psychological leverage over the terrorist groups who are reminded they can't use tech to hide. It is also more important to remind the public that terrorists can't do that.

      no it isn't. If anything the past experience with government agencies is that they'll exploit the heck out of security holes they can find and use that to get whomever they want to get. Heck that was the whole point of Snowden. There's no incentive or historical trend of governmental agencies effectively shouting out that they've found a way to see through the door. Instead they keep looking through the door gathering and using intelligence until someone notices.

      at best this suggests that "Oh we're so strong we cracked WhatsApp" but it does so completely at the cost of their loophole. It's a silly stunt that's only effective if they have a backup in place.

      --
      Just another second banana
    3. Re:Bullshit. by Impy+the+Impiuos+Imp · · Score: 4, Insightful

      It's ironic that, if this kind of encryption existed during the US revolutionary war, the King of England would have outlawed it, and therefore the Founding Fathers would have included it as a right in the First Amendment. Government is the problem in the long run, the bigger picture, regardless of any short-term benefits.

      --
      (-1: Post disagrees with my already-settled worldview) is not a valid mod option.
    4. Re:Bullshit. by Impy+the+Impiuos+Imp · · Score: 5, Insightful

      Indeed, every time some politician in the West decries encryption for some teeny-tiny, transitory problem like terrorism, billions around the world's hearts sink a little more into despair as their governments break encryption using the same techniques precisely to catch political opposition.

      Says the oppressed in China, Russia, Turkey, "Well, our nightmare continues but damn, we are glad you wern't hampered too much gleaning a useless iota of information on that guy who is one trillionth the plague on your society our governments are on ours."

      --
      (-1: Post disagrees with my already-settled worldview) is not a valid mod option.
    5. Re:Bullshit. by 110010001000 · · Score: 5, Insightful

      How do you know that is what WhatsApp uses? It is closed source. They could be doing anything, no matter what they CLAIM they are using. They could be sending all of your messages directly to the NSA. Why do people trust closed source apps?

    6. Re:Bullshit. by thegarbz · · Score: 3, Insightful

      Why do you trust open source apps? No really, do you read all the code and then compile it yourself?

      Just because something leaves an audit trail doesn't make it impervious to fraud.

    7. Re:Bullshit. by thegarbz · · Score: 3, Insightful

      The terrorist groups don't hide behind tech, they broadcast it out in the open.

      What a load of garbage. Terrorist groups most definitely do hide behind tech and generally do so quite well. What they do out in the open is lay claim their successful attack.

    8. Re:Bullshit. by markdavis · · Score: 3, Insightful

      >"Why do you trust open source apps? No really, do you read all the code and then compile it yourself?"

      At least it is POSSIBLE. With closed source, it is absolutely impossible for the end user to know what the program is doing. It means watchdog organizations can audit it and anyone can verify it. I don't look at much of my open source code, but you can bet someone is, and all it takes is one person to blow the whistle. And someone can compile it and compare the hashsum on distributed binaries to ensure it hasn't been tampered with downstream.

    9. Re:Bullshit. by TheOuterLinux · · Score: 4, Insightful

      WhatsApp is owned by Facebook. It's encryption is a joke when the right people are asked nicely, hence the "using techniques that 'cannot be disclosed for security reasons.' What they mean is they can't tell you how they did it because it would look REALLY bad if people realized how stupid it is to put your faith in a company that specializes in profiling and biometric data collection; https://www.whatsapp.com/faq/g.... If you're using WhatsApp on Google anything (Android, Chrome, etc.), you're in even worse shape because it's Google for Christ's sake. Remember Dirty COW? Google waited until after the election to fix it while every other Linux-based OS did months ahead of them.

      But anyway, Facebook also invests huge amounts of money into cloud computing and AI. That combination one day will make all encryption and anonymity useless because we will all be digitally fingerprinted whether you have an account or not, especially if quantum computing advances, and you can assume your government will get a copy, just like they get copies of your DNA when you fall for the "fun and easy" TV advertised "ancestry" services. This "profile" is going to replace social security numbers. If you want real encryption (at least for now), use Signal (similar to Telegram but better) or a Tox client (similar to OpenVPN but for messaging). More importantly, use your brain. Both are free and open source and support text, talk, video, and file sharing. I would never use anything that important that I couldn't look at the code for. If you could look at WhatsApp's source code, I think security researchers would be horrified. And, Facebook gets caught spying on their mobile app all the time, so I don't see how WhatsApp would be any different. And just because a lot of people use it, doesn't make it the best. Matter of fact, that would make more of a target.

      Some of the above links are kind of old, but note the ISP one. Legally, your internet service provider in the U.S. can sell your browsing information. Because of this, intelligence agencies can just purchase your data for cheap rather than getting a warrant and paying a government employee to waste their time. I'm mentioning ISP because Facebook has been trying for over a year now to bring the Internet to all kinds of places. They would become an "Internet Service Provider." In any case, if the app has an advertisement, you can be tracked.

      The real note to take away from this is to realize data can be created and never destroyed and don't put anything on the internet you don't want found. I wish people would realize privacy settings are a joke; they only protect you from the average person. Anytime you see "convenient" or "secure" for a service, just assume it's complete BS because your government doesn't have the time or resources to actually physically search and seize everyone so they have software for it, contrary to "Martial Law" conspiracies; cloud computing makes it easier.

      And since this news regarding terrorism, do you know why it was so hard to find Osama? It's because so far as we know, the most technologically advanced thing he ever personally used was a kidney dialysis machine or the Cold War weapons the U.S. gave him. The wor

  2. idiot by ooloorie · · Score: 5, Insightful

    "It's completely unacceptable. There should be no place for terrorists to hide. We need to make sure that organisations like WhatsApp, and there are plenty of others like that, don't provide a secret place for terrorists to communicate with each other,"

    It is completely unacceptable that history majors like Amber Rudd, who evidently has not the slightest understanding of technology, end up in positions like Home Secretary. or "Secretary of State for Energy and Climate Change". Rudd seems to be an object lesson in how money and political connections trump competency and skill.

    1. Re:idiot by matbury6017 · · Score: 3, Insightful

      OK, let's play with Rudd's statement for a little while. Since any weakening of internet security applies to everyone who uses the internet, not just the people Rudd would like it to affect, how substituting the keyword "terrorist" for something else and see how it sounds then?

      "It's completely unacceptable. There should be no place for [PLACEHOLDER] to hide. We need to make sure that organisations like WhatsApp, and there are plenty of others like that, don't provide a secret place for [PLACEHOLDER] to communicate with each other,"

      Investment bankers? Grassroots political organisers? MI5 and MI6 agents? Any more ideas?

  3. Encrypt Everything! by Murdoch5 · · Score: 5, Insightful

    Regardless if the claim is true or not, all your data and messaging should be encrypted at all times PERIOD! I will gladly accept terror acts for the right to have my data protected and safely stored. Across all my computers and my phone, everything is encrypted when possible, including my emails, which are sent from a encrypted provider, my SMS messages, which are sent encrypted and almost everything else I do. Encryption is a right to not have your data / personal information exposed and one that must be protected, even if that means acts of terror are untracable / untrackable.

    1. Re: Encrypt Everything! by Anonymous Coward · · Score: 2, Insightful

      Since you asked...

      A. I don't. But the more of my data that is encrypted, the less noticeable data that I critically need to be encrypted will be to would-be eavesdroppers. No sense in drawing any further attention to the occasions when I really do require it. Plus if I am always using it, then I don't have to especially remember to do anything out of the ordinary when I do actually need it.

      B. Anything that requires some security against malicious eavesdroppers who might use the information to cause harm to myself if others. If it is technically feasible for the Feds to decrypt it, no matter how benign they may claim to be (and there is some cause to he sceptical of that already), then so can someone with much more nefarious intentions.

  4. If there's no place for terrorists to hide by HalAtWork · · Score: 5, Insightful

    If there's no place for terrorists to hide then there's no place for *anyone* to hide, and that is unacceptable considering how valuable it is to hide from oppression or the abusers of the system used to ensure there are no hiding spots, those who operate the system are disproportionately advantaged and with access comes the capability of concealing themselves, censoring, framing content and concealing context, etc.

    This idea is ridiculous and imbalanced off the bat.

    --
    Twinstiq, game news
    1. Re:If there's no place for terrorists to hide by gweihir · · Score: 1, Insightful

      Alternatively, she just asked knowingly for full-blown Fascism. I really would not rule that out anymore. George Orwell seems to have had the number of the British political class.

      --
      Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.