~/talk

Building private products

on YouTube 19m
Talkat Product @Scale Spring 2022 · on Wednesday, 2022-04-27· [security, privacy-and-compliance]

speaker

name:Aleksander Bello
linkedin:aleksanderbello

resources

video:https://youtu.be/wSzQA7zWtGE
slides:none on file

summary

WhatsApp runs on 2 billion users sending 100 billion messages a day and claims privacy as a product feature. It ships end-to-end encryption using the Signal protocol and built end-to-end encrypted backups by storing backup keys in server-side HSMs + OPAQUE so WhatsApp can facilitate restores without learning keys. It prototypes privacy tokens to prove relationships to the server without storing interaction graphs. Workarounds include Rust, fuzzing and static analysis for client memory safety; challenges are payload bloat, multi-device token sync and usability of key recovery.

AI-written summary · about

chapters (6)

  1. 0:00Introduction
  2. 2:36WhatsApp privacy principles
  3. 7:56End-to-end encrypted backups
  4. 11:53Privacy tokens for access
  5. 15:54Security foundation for privacy
  6. 18:27Future directions

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.