Noob answer? No, because the other party will likely store them in unsafe manner and send it through Facebook Messenger to that Aunt of theirs.
As far as anyone knows WhatsApp uses secure end to end encryption. So only your device and the other person’s device has access to the picture.
The only downside is that WhatsApp is a closed source program, so it isn’t verifiable that the encryption is correctly implemented.
Also, even now, your message could be thousand times encrypted - Google drive backups are not. At least by default. Don’t know anything about iOS, but probably same.
First off, it sounds like congratulations are in order! A new life is always cause for celebration! I hope you, your spouse and your new child are doing well.
Short answer to your question: NO! DO NOT SEND ANY SENSITIVE DATA (INCLUDING PHOTOS) VIA ANY PATH, OR SERVICE YOU DO NOT FULLY CONTROL!!!
Long answer: While What’sApp, Meta and the like, are not known to be quite as… proactive as Google in cracking down on child pornography there is the very real risk that any data you send via any service may be scanned via a ML algorithm and flagged. What happens next depends on the particular service. Not sure about WhatsApp, but in the case of Google, once your account is flagged, your entire account is forwarded to Law Enforcement. As you are just sending pictures of your new arrival (Congrats again!), odds are that the officer assigned will take one look at it and clear you. All good, so far, right? Yea, not so much. You might not be going to jail but when Google locks down an account, they do not reactivate it, regardless of what law enforcement might decide, and as they are a private company, suing them to get your accounts reactivated is a lost cause. They are allowed to decide whom they want as a customer so long as their standard is applied evenly and doesn’t target certain protected groups.
No service you use should ever be allowed to see anything important to you. Ever.
If you can, I would self host a cloud service like NextCloud out of your own home to share files freely, although an GPG encrypted email would work. Your current email provider is fine, although use a third party email client that supports encryption, like Thunderbird. and much as I like ProtonMail’s stance on privacy, I would still use a separate encryption method for anything truly sensitive.
I know I sound like a privacy nutjob, but seriously. When the consequences of a false allegation are that high, you should recognize the threat and act accordingly. I use Google, TikTok, iCloud and others, but if the subject matter is anything much more consequential than the weather, then it doesn’t touch their servers. It’s not so much paranoia as it is threat mitigation. Google and Apple’s services are incredibly useful, but if you depend on them too much, the loss of them could hurt, alot.
Like I said most of the other services don’t have quite the reputation for uncalled for lockouts but here are a few news articles I came up with on a quick search:
-
https://www.nytimes.com/2022/08/21/technology/google-surveillance-toddler-photo.html (Paywalled)
-
https://www.theverge.com/2014/8/5/5970141/how-google-scans-your-gmail-for-child-porn
-
https://www.npr.org/2021/08/06/1025402725/apple-iphone-for-child-sexual-abuse-privacy
If your interested in learning more about self-hosting services out of you home you might check these out as a starting point:
-
https://github.com/awesome-selfhosted/awesome-selfhosted (Non-exhaustive list of services)
-
https://selfhosted.show/ (Podcast focused of self hosting services)
-
https://www.howtogeek.com/846979/heres-why-self-hosting-a-server-is-worth-the-effort/
Yeah, I hear ya, but good luck getting your whole family, including elderly relatives, to use something you do control…
It’s a losing battle. You can share pics by a secure channel and they’ll just repost it all over the place anyway.
No pics for them then.
If you’re wanting to be safe I wouldn’t be using WhatsApp at all
No. Never use a messenger for those things, that is legally allowed in most nations. They advertise e2e-encryption and stuff, but also need to comply to governments.
Remember e. G. The reason telegram’s owner was kicked out of his own country because he didn’t comply to leaving a backdoor for the gov? And how it’s, in some nations, one of the only few messenger left that can be used to express a free opinion without “dissapearing” after?
With your pics you’ll train AI-models for free at best.
I would never ever share personal stuff over some mega-corpo’s “free” thing.
but also need to comply to governments.
I dont know about every country, but as far i know in germany at least you only need to disclose the information you actually have. Eg: if you dont have the encryption keys, the government cant do shit with the encrypted messages they habe
So, correct me if im not right, but a messenger could be privacy respecting and legal at the same time
What do you mean by safe?
By safe I mean about privacy, if there’s possibility that someone can “intercept” the photos of the child. Sorry if I didn’t explain it well
In computer security it always depends on your thread model. WhatsApp is supposed to be end-to-end-encrypted, so nobody can intercept your messages. However: Once someone flags a message as inappropriate, this gets circumvented and messages get forwarded to Meta. This is only supposed to happen if it’s flagged. So unlikely in a family group. I trust this actually works the way Meta tells us, though I can’t be sure because I haven’t dissected the app and this may change in the future. And there is lawful intercept.
Mind that people can download or screenshot messages and forward them or do whatever they like with the pictures.
And another thing: If you have Sync enabled, Google Photos will sync pictures you take with their cloud servers and it’ll end up there.
And Apple does the same with their iCloud.As far as I know both platforms automatically scan pictures to help fight crime and child exploitation. We aren’t allowed to know how those algorithms work in detail. I doubt a toddler in clothes or wrapped in a blanket will trigger the automatism. They claim a ‘high level of accuracy’. But people generally advise not to take pictures of children without clothes with a smartphone. Bad incidents have already happened.Edit: Apple seems to have pushed for cloud scanning initially, but currently that doesn’t happen any more. They have some on device filters as far as I understand.
As far as I know both platforms automatically scan pictures to help fight crime and child exploitation.
Apple doesn’t. They should but they don’t. They came up with a really clever system that would do the actual scanning on your device immediately before uploading to iCloud, so their servers would never need to analyze your photos, but people went insane after they announced the plan.
Oh. I didn’t know that. I don’t use Apple products and just read the news, I must have missed how the story turned out, so thanks for the info.
Technically I suppose it doesn’t make a huge difference. It still gets scanned by Apple software. And sent to them if it’s deemed conspicuous. And the algorithm on a device is probably limited by processing power and energy budget. So it might even be less accurate. But this is just my speculation. I think all of that is more of a marketing stunt. This way the provider reduces cost, they don’t need additional servers to filter the messages and in the end it doesn’t really matter where exactly the content is processed if it’s a continuous chain like in the Apple ecosystem.
The last story I linked about the dad being incriminated for sending the doctor a picture would play out the same way, regardless.
Edit: I googled it and it seems the story with Apple has changed multiple times. The last article I read says they don’t even do on-device scanning. Just a ‘nude filter’. Whatever that is. I’m cautious around cloud services anyways. And all of that might change and also affect old pictures. We just avoided mandatory content filtering in the EU and upload filters and things like that are debated regularly. Also the US has updated their laws regarding internet crime and prevention of child exploitation in the last years. I’m generally unsure where we’re headed with this.
The proposal was only for photos stored on iCloud. Apple has a legitimate interest in not wanting to actually host abuse material on their servers. The plan was also calibrated for one in one trillion false positives (it would require multiple matches before an account could be flagged), followed by a manual review by an employee before reporting to authorities. It was so very carefully designed.
Do you happen to know a good source for information on this? I don’t want to highjack this discission, since it’s not that closely related to the original subject… But I’d be interested in more technical information. Most news articles seem to be a bit biased and I get it, both privacy and protection of children are sensible topics and there are feelings envolved.
One in a trillion sounds like a probability of a hash collision. So that would be just checking if they already have the specific image in their database. It’ll trigger if someone downloaded an already existing image and not detect new images taken with a camera. I’m somewhat fine with that.
And I was under the impression that iPhones connected to the iCloud sync the pictures per default? So “only for photos stored on iCloud” would practically mean every image you take, unless you deliberately changed the settings on your iPhone?
No , but they will get the meta data. But image should be secure. But then your recepient download it , upload it to Google cloud and so on
You can delete or alter the metadata with multiple available EXIF editor apps.
Yea GOS camera does it automatically as well. I was thinking of the message data. Size , time, contacts etc
I feel out of the loop here. What’s so secretive about a photo of a newborn?
Because the child might not want pictures of themselves on the internet. Its a right to privacy thing, at least here in the EU.
Some people just don’t want pictures of their kids all on the internet. It could be seen as borderline paranoia by some people but I think everyone has the right to the level of privacy that they want.
Also CSAM detection algorithms are known to misfire on occasion (it’s hard to impossible to tell apart a picture of a naked child sent for porn purposes and one not send for that) and people want to avoid any false allegations of that if at all possible.
Yeah, babies are cute and all, but they all look the same for the first few weeks. If Everyone just had a standard library of like 20 or so pictures of newborn babies and everyone just picked one and shaired it instead of pictures of their kid no one would notice.
Safe?
Yeah, safe in the sense that it would be difficult for someone to intercept and steal/alter. That doesn’t prevent whomever your sending it to saving it an insecure manner.
But there’s one REALLY important variable here/ nobody wants to steal a picture of your kid. Nobody cares.
Signal with a view once message is better than a lot of the available options. Also maybe threema, simplex or session but Signal is more popular nowadays.
You could hand deliver them in a sealed envelope but it won’t stop the recipient scanning them then sharing them on messenger, texts etc.
You’d need to consider where and how they get shared beyond the person you send them to, to then decide which level of privacy is appropriate. Ultimately, even though others don’t recommend WhatsApp (nor would I) - it’s maybe the best option in this case. Accessibility, ease of sharing just no guarantees on the encryption because the source is behind closed doors.
It depends on if you trust Meta. Generally speaking there is end-to-end encryption in WhatsApp, which means only you and the person you chat with can decrypt your messages / media (source). I believe there are some weak spots in group chats, mostly caused by users themselves. Not sure about the new Community function but I’d be careful with what I share there.
Some parties like Apple have decided to scan photos from your device for illegal material (edit: after backlash they dropped this for now, my bad). If using an app like WhatsApp I’d personally be aware that something like that might happen in the future as well. I’d not be surprised if some employees might (temporarily) be able to access more data than widely assumed, for debugging reasons in case of bugs.
Personally I take the risk for pragmatic reasons, but it doesn’t hurt to be a bit cautious / aware.
Some parties like Apple have decided to scan photos from your device for illegal material.
No they haven’t, they aren’t, and they never even discussed scanning your messages like that. There’s a communication safety feature available to enable in parental controls so that if a child’s phone locally recognizes (using machine learning) that they received or are about to send a nude photo, the receiving photo is blurred and they’re given information about making safe choices and then allowed to continue or not.
