Facebook turns over mother and daughter’s chat history to police resulting in abortion charges

3 years ago by Jure Repinc to c/technology

Unencrypted chat history is a prime target for police

cross-posted from: https://lemmy.ml/post/1874605

A 17-year-old from Nebraska and her mother are facing criminal charges including performing an illegal abortion and concealing a dead body after police obtained the pair’s private chat history from Facebook, court documents published by Motherboard show.

load all comments
patch1 44 points 3 years ago

I thought messenger was end-to-end encrypted, at least according to Facebook. How were they able to hand over the chat logs? The messages should be encrypted with a key that is itself encrypted with user's password, which Facebook doesn't store.

What am I missing?

path: 0 1093459, hotness: undefined, score: 44, children: 12
Sophie 17 points 3 years ago

You’re not telling me Facebook LIED are you? No way I wouldn’t believe it /s

path: 0 1093459 1098034, hotness: undefined, score: 17, children: 2
patch1 8 points 3 years ago

Actually that page suggests that they can't access it. They'd never passed the security on it if that page was lying and they don't encrypt it. Clearly there must be some kind of mechanism they can use to decrypt it for law enforcement. The technicals of that are what I was actually interested in from my original comment.

EDIT: Oh my God I just figured it out. It's not enabled by default. You have to explicitly turn it on per conversation. That's terrible

path: 0 1093459 1098034 1106004, hotness: undefined, score: 8, children: 1
adibis 16 points 3 years ago

You're missing the fact that they lied to get users

path: 0 1093459 1094221, hotness: undefined, score: 16, children: 0
Xcf456 14 points 3 years ago

Presumably they maintain full access because they control both ends. The encrypted part would stop others intercepting messages. At least that's how I've always read it

Edit: I'm wrong, end to end does exclude even the app provider from seeing messages. So yeah, either not enabled or they lied

path: 0 1093459 1100498, hotness: undefined, score: 14, children: 0
EddieTee77 14 points 3 years ago

It's not enabled by default

path: 0 1093459 1096087, hotness: undefined, score: 14, children: 4
PrimaCora 7 points 3 years ago

And on the official app it isn't called end to end encryption or even a setting toggle. It's called secret chat and clicking on it opens a chat from the original chat. The only difference I see is a little lock icon where an emoji usually is.

path: 0 1093459 1096087 1097650, hotness: undefined, score: 7, children: 3
mexicancartel 6 points 3 years ago

To add to other replies, proprietary apps like messenger can also have backdoor access to your messenger app, where the messages are stored decrypted. I.e. maliciously taking the chat history from either ends of the end-to-end encryption.

path: 0 1093459 1107049, hotness: undefined, score: 6, children: 0
ghariksforge 4 points 3 years ago

End2End encryption is mostly a PR stunt. In practice it's not hard to go around it. For example:

  • going after unencrypted backups (such as in google drive)
  • compromising or seizing your device
  • forcing the app developer to leak the private keys
  • forcing you to turn over the information by threatenening you with not cooperating.

It reminds me of this XKCD: https://xkcd.com/538/

path: 0 1093459 1109844, hotness: undefined, score: 4, children: 0
technology
technology

@lemmy.ml

login for more options
43431
4151
1791

This is the official technology community of Lemmy.ml for all news related to creation and use of technology, and to facilitate civil, meaningful discussion around it.


Ask in DM before posting product reviews or ads. All such posts otherwise are subject to removal.


Rules:

1: All Lemmy rules apply

2: Do not post low effort posts

3: NEVER post naziped*gore stuff

4: Always post article URLs or their archived version URLs as sources, NOT screenshots. Help the blind users.

5: personal rants of Big Tech CEOs like Elon Musk are unwelcome (does not include posts about their companies affecting wide range of people)

6: no advertisement posts unless verified as legitimate and non-exploitative/non-consumerist

7: crypto related posts, unless essential, are disallowed

go to feed...