Cathcart: Let me be very clear: We cannot read your messages, we cannot listen to your calls. When you send your location over WhatsApp, we do not know where you are.
DER SPIEGEL: But you do save data about your users like the device ID, the phone model, the WhatsApp user name, the phone book and thereby also the numbers of all their contacts, right?
DER SPIEGEL: Apple has recently introduced privacy labels that resemble nutritional labels about what kind of data an app collects and what it doesn’t. Why don’t you do something similar?
DER SPIEGEL: A new German law, if passed, would mean that WhatsApp would have to hand over account data to law enforcement. Do you hand over data about your customers to government agencies?
The documents claim that investigators are still unaware of what’s in his WhatsApp, Signal, Wickr, and ProtonMail logs. More importantly, what was the Swash Buckler up to?
WikiLeaks: Here’s how the CIA hacks your phones, TVs and PCs
The organization released thousands of documents it claims show how the US spy agency can crack open devices from Apple, Samsung, Google and Microsoft.
Apple, Google and Motorola declined to comment on WikiLeaks’ claims. Samsung didn’t respond to a request for comment.
“The CIA/Wikileaks story today is about getting malware onto phones, none of the exploits are in Signal or break Signal Protocol encryption,” said Moxie Marlinspike, the founder of Signal. “This story isn’t about Signal or WhatsApp, but to the extent that it is, we see it as confirmation that what we’re doing is working.”
Telegram said on its website that the problem lies with operating systems and not encrypted messaging apps and that naming specific encrypted services is “misleading.” WhatsApp declined to comment.
The reason staffers chose Confide over other secure messaging apps, like Signal, is that Confide erases messages as soon as they’re read.
Other secure messengers, like Signal, do not wipe read messages — meaning they could be intercepted if someone gains access to a phone where the messages have not been explicitly deleted.