Linked List: March 29, 2024

Friday, 29 March 2024

Meta Used Its Onavo VPN to Snoop on Users’ Encrypted Snapchat Traffic 

Lorenzo Franceschi-Bicchierai, reporting for TechCrunch:

“Whenever someone asks a question about Snapchat, the answer is usually that because their traffic is encrypted we have no analytics about them,” Meta chief executive Mark Zuckerberg wrote in an email dated June 9, 2016, which was published as part of the lawsuit. “Given how quickly they’re growing, it seems important to figure out a new way to get reliable analytics about them. Perhaps we need to do panels or write custom software. You should figure out how to do this.”

Facebook’s engineers solution was to use Onavo, a VPN-like service that Facebook acquired in 2013. In 2019, Facebook shut down Onavo after a TechCrunch investigation revealed that Facebook had been secretly paying teenagers to use Onavo so the company could access all of their web activity.

After Zuckerberg’s email, the Onavo team took on the project and a month later proposed a solution: so-called kits that can be installed on iOS and Android that intercept traffic for specific subdomains, “allowing us to read what would otherwise be encrypted traffic so we can measure in-app usage,” read an email from July 2016. “This is a ‘man-in-the-middle’ approach.” [...]

Later, according to the court documents, Facebook expanded the program to Amazon and YouTube. Inside Facebook, there wasn’t a consensus on whether Project Ghostbusters was a good idea. Some employees, including Jay Parikh, Facebook’s then-head of infrastructure engineering, and Pedro Canahuati, the then-head of security engineering, expressed their concern. “I can’t think of a good argument for why this is okay. No security person is ever comfortable with this, no matter what consent we get from the general public. The general public just doesn’t know how this stuff works,” Canahuati wrote in an email, included in the court documents.

There’s the Facebook we know and love.

In 2018 Apple removed Onavo from the App Store, but the fact that Facebook was using Onavo in this way was known a year earlier.

WhatsApp: The World’s Default Communication App 

Pranav Dixit, writing for Engadget:

“WhatsApp is kind of like a media platform and kind of like a messaging platform, but it’s also not quite those things,” Surya Mattu, a researcher at Princeton who runs the university’s Digital Witness Lab, which studies how information flows through WhatsApp, told Engadget. “It has the scale of a social media platform, but it doesn’t have the traditional problems of one because there are no recommendations and no social graph.”

Indeed, WhatsApp’s scale dwarfs nearly every social network and messaging app out there. In 2020, WhatsApp announced it had more than two billion users around the world. It’s bigger than iMessage (1.3 billion users), TikTok (1 billion), Telegram (800 million), Snap (400 million) and Signal (40 million.) It stands head and shoulders above fellow Meta platform Instagram, which captures around 1.4 billion users. The only thing bigger than WhatsApp is Facebook itself, with more than three billion users .

WhatsApp has become the world’s default communications platform. Ten years after it was acquired, its growth shows no sign of stopping. Even in the US, it is finally beginning to break through the green and blue bubble battles and is reportedly one of Meta’s fastest-growing services. As Meta CEO Mark Zuckerberg told the New York Times last year, WhatsApp is the “next chapter” for the company.

Anecdotally, I’m seeing more American usage of WhatsApp too. Putting aside the (deeply misguided, IMO) antitrust arguments about iMessage, Apple’s decade ago decision to eschew an iMessage client for Android might be proven to have been a mistake the old-fashioned way: through market forces.

Evan Gershkovich’s Stolen Year in a Russian Jail 

Eliot Brown, writing for The Wall Street Journal:

Evan Gershkovich was supposed to be with his friends in Berlin the first week of April 2023.

The Wall Street Journal Russia correspondent was set to stay in an Airbnb in the edgy Neukölln neighborhood, a base to explore the city’s cobble-lined streets with his tightknit crew of journalist pals exiled there from Moscow. He was going to drink coffee in hipster cafes and chat into the night over glasses of beer.

It was the start of his stolen year.

Russian authorities detained Evan in Yekaterinburg on March 29, 2023, and threw him into a jail cell in Moscow. He was a fully accredited journalist on a reporting trip and was detained on an allegation of espionage, which he, his employer and the U.S. government vociferously deny.

Kudos to the Journal for putting together a huge package to raise awareness of Gershkovich’s unjust incarceration. Tons of coverage online, but man, sometimes print design can do things that otherwise can’t be expressed. What a statement today’s front page makes.