Free messaging App, WhatsApp’s decision to activate end-to-end encryption for messages starting Tuesday has once again raked up the privacy and cyber security concerns. The messaging service, owned by Facebook, has close to billion users across the globe. According to Whatsapp, the new security feature will encrypt all types of data that can only be read or viewed by the users it was meant for.
While some data activists and international civil society organisations welcomed the move, there are apprehensions surrounding the latest move aimed at protecting citizen’s privacy.
“It is still too early to say if this feature is foolproof enough to protect the data being sent across,” said Kiran Chandra, General Secretary, Free Software Movement of India.
“As per WhatsApp service agreement, content would not be stored with them but they do not talk about metadata that they might have access to. Also, the company might have the encryption keys. The best way to make this feature trustworthy is to make the source code of WhatsApp open to public scrutiny. This way, users will know if there are any backdoors to this App or if it is vulnerable to bugs.” Mr. Chandra said that there will always be doubts regarding the claims of WhatsApp considering it is a part of Facebook, which allegedly was aiding security agencies in the United States as per whistleblower Edward Snowden’s revelations.
Amidst the raging debate, the local police officials are a hassled lot due to the latest development.
“It is a big challenge for us,” said P. Raju, Inspector, Cyber Crimes, Hyderabad Police. “In a month, we get at least seven cases related to WhatsApp service. Since the messages are encrypted and do not even reach the servers, it is tough for us to retrieve data. We cannot even trace the origins of objectionable content.”
City-based cyber security consultant, Vikas Jain felt that the new initiative of WhatsApp has little or no benefit for common people.
“This feature really helps cyber criminals who are aware of how to exploit it. The government agencies will not be able to read data unless they have the physical device with them. They cannot snoop on the conversations of individuals who are under surveillance,” he said.
It is still too early to say if this feature is foolproof to protect the data being sent across
Kiran Chandra,General Secretary, Free Software Movement of India.
