Can someone listen to my WhatsApp calls

The uproar over leaked WhatsApp messages of some Bollywood actors may have a couple of unintended positive effects. It has led to a focus on the concept of data privacy, and it may lead to questions being asked about overreach by investigative agencies.

WhatsApp messages are encrypted end-to-end, meaning they can only be read on the devices of sender and recipient [in the case of a group, on all devices of members]. The service provider cannot read the message; nor can anybody who intercepts it.

However, this doesnt necessarily make WhatsApp totally secure. WhatsApp creates a backup for the last seven days of activity on the handset. It also does backups on Google drive, by default, at specified intervals unless the user chooses never for backup. A backup is convenient if you change handsets, but it can also be retrieved and read easily. In addition, it is possible to retrieve a deleted WhatsApp message, given access to the handset.

WhatsApp servers also store metadata that is, records of messages and calls. Hence, although the content is not available, it is possible to check every users connections. The police can, and do, build cases around metadata.

Apart from physical access to handsets, metadata and backups are two common ways in which private communications can be broken. If you wish to strengthen WhatsApp privacy, delete existing WhatsApp backups and dont take WhatsApp backups on Google. If you must, create a new Google account purely for WhatsApp backup and access that account for nothing else.

Government agencies can seize handsets and personal computers [PCs] of citizens, access their email accounts, etcetera, to collect data as evidence. Apart from covert surveillance, in any police case or IT survey, handsets and hard drives of PCs are seized, cloned and searched for hidden, encrypted and deleted files.

But private citizens and private entities are not supposed to access or publish private data. Nor is data and other material collected as potential evidence supposed to be released in public. Such leaks may lead to evidence being tampered with and it may also cause prejudice against the accused persons, regardless of their guilt or innocence.

If the WhatsApp messages of the Bollywood actors in question are authentic, they may have been collected by the Narcotics Control Bureau and leaked to the news channels. Or, they may have been acquired illegally by the channels. Either way, legal liability rests on government officers or the channels concerned.

There is, however, a legal grey area here. There is no specific legislation outlining illegalities in terms of breach of data privacy and punishments, although privacy is a fundamental right according to a 2017 Supreme Court judgment. The draft data privacy protection legislation, which has not yet been passed, allows the government to secretly snoop on private citizens for a wide range of purposes.

And even though evidence and material is not supposed to be released, it is unlikely anybody will be punished for the leaks. Remember the Nira Radia tapes? Some 5,000-odd hours of wiretaps of many conversations were collected as evidence and leaked into public domain in 2010. No government officer was ever called to account for that massive breach of privacy. This leak is likely to be similar in terms of no official response.

> Signal is strongly recommended, both by the European Commission and American whistleblower Edward Snowden. It has end-to-end encryption. Messages can be set to auto-delete within 5 seconds [or a day, or a week] after being read. Signal does not store metadata, and it does not keep cloud backups. Access requires a passkey, which means it isnt that easy to open Signal even with physical access to the handset. Signal does do encrypted backups on the handset its your choice to delete, or keep these.> Similarly, consider using Protonmail as a super-secret email ID. [Vijay Mallyas personal email is proton.] Proton has many more layers of protection than Gmail, and it throws in a free VPN. The servers are located in Switzerland, which has good privacy laws.> Its important to use strong passwords on the phone and emails. For greater security, use an IM [instant messenger] that offers end-to-end encryption and doesnt collect metadata.

Video liên quan