A study confirms that WhatsApp has a long memory and keeps dates and call times. Privacy at risk, especially if the data collected goes to increase the amount of information already in Facebook's possession
Researchers from the universities of Brno and New Haven have analyzed the cryptographic methods used by WhatsApp, reaching the point of intercepting the data that the application has send to servers:called number, time, duration of the conversation and IP addresses.
More information than a normal telephone operator collects. Since phone calls via WhatsApp exploit Voice over IP (VoIP) it is also possible to collect a series of metadata that, as the researchers point out, combined with the collected data, can have forensic validity.
So far the news may leave you indifferent, because it confirms what was already easily conceivable.
Exists for a triple risk to privacy. The first linked to the eventuality that data can be used against you by the authorities, but this is a concern for the few. The amount of information gathered by WhatsApp ends up in the hands of Facebook that you know almost everything about you.
The third, perhaps more subtle, than if a group of researchers succeeded in circumvent the encryption used by WhatsApp, means that you can do it. Of course, not for everyone, but apparently the FunXMPP protocol used for message exchange and the Opus codec, used instead for the voice, are not entirely inviolable.
For the research a Android terminal but the two universities have already announced that they want to replicate it using smartphones with other operating systems. The two universities encourage other work groups to apply the results of the study to better define the forensic potential of the data collected.