Hacker Newsnew | past | comments | ask | show | jobs | submit | snowmobile's commentslogin

You can communicate via SMS with users of WhatsApp too genius. Do you think it's encrypted in any way?


Sorry to be "that guy", because I don't know the details of how WhatsApp does E2EE, but in any proper (as in secure and private) implementation the only thing that should matter is whether the client follows the spec? You might as well ask, how does $browser work with HTTPS?


The only thing that matter is whether you trust the app or not.

- If it is proprietary, you just have to blindly trust it (as is the case with WhatsApp currently: they say it is end-to-end encrypted, but you can't verify).

- If it is open source, then some people will want to understand how it works before they trust it. Other will either blindly trust (like for proprietary software) or trust that persons they trust understood how it works and were convinced.

> You might as well ask, how does $browser work with HTTPS?

Well, exactly. I am interested in how the WhatsApp interop works just as I am interested in how HTTPS works.


I think the suspicion is based on this app being offered in a region whose government is hostile to privacy and this implementation being connected with the strong nativist bent in Europe.

The "spec" is not relevant in any way because we have no idea what else is going on. Why was it relevant that these operators must specifically be in the EU? Everyone is just complying with the global spec...but the app provider must be in Europe...okay.


> Why was it relevant that these operators must specifically be in the EU

The integration is only possible because the EU forced Meta's hand. The law only applies to massive digital empires with gatekeeper levels of control.

I don't think the EU would mind at all if Meta would permit American companies to interoperate with them. Meta won't just permit it, they have to protect their WhatsApp Business money machine of course.

That's also why the feature is only available to EU numbers. Not because BirdyChat hates Australians, but because WhatsApp won't permit them to send messages to numbers from those countries.


> region whose government is hostile to privacy

Which government?


EU. I don't think it is any better at the national level however.


The EU is not a government. It's a loose economic confederation. And national European governments vary wildly in their positions on this.


It isn't an "economic confederation". It has a parliament, an executive, a judiciary, and a civil service. I would read the wiki page on the European Union.


The EU parliament can't propose laws, unlike any parliament in the world.

The executive is formed out of national government heads of state, which can veto everything.

Its judiciary and actually all 3 branches are strictly limited in their powers to powers delegated to them (which are weaker than the US Articles of Confederation).

The civil service is covered by the comments above.

In technical terms it is a government, in real life is is strictly limited, albeit growing. No country could operate with the "government" the EU has. France has several million government employees for about 70 million people while the EU has at most 50 000 workers for 450 million citizens).

This is a very complicated topic and I don't really apreciate the condescension inherent in sending me to Wikipedia.


Call it what you want but the fact remains that they can write a lot of laws the member countries must follow, for better or worse. GDPR, Chat Control, etc.


I can confirm that you don't know.

I can count 3 mistakes here:

1- The client isn't the only thing that matters (There's servers)

2- The client doesn't follow a spec in WhatsApp, there is no spec as it's a private non-interoperable system.

3- Browsers and HTTPS work with an entirely different encryption model, TLS is asymmetric, certificate based and domain based. TLS may be used in Whatsapp to some extent, but it's not the main encryption tool.


Wrong, wrong and wrong. If an app does real E2EE (not "marketing E2EE"), then the servers should have no control over the encryption. Otherwise it's not end-to-end, by definition. Regarding the "private non-interoperable system", the whole point of TFA is that EU made them open it up. See https://engineering.fb.com/2024/03/06/security/whatsapp-mess... Your last "point" is irrelevant because I never claimed anything about the similarity between encryption models. Have you ever heard of a "simile"?


Well, yes. But one could think of a world in which WhatsApp has its own internal protocol and to bolt on third-party support they just decide to represent third party clients as “virtual clients” on the server side, which would be the easiest way to make it work while not having E2EE support. Especially since the feature only exists for legal compliance purposes.

(This is not the case, apparently.)


That's not what OP is asking, he's asking how do you have two separate e2e encrypted apps that can interact.


By following the same protocol... This has been done for ages. PGP and GPG for example.


Yep. And apparently the answer is they both use the Signal Protocol.


What's wrong with the name? Some cultural reference I'm not getting?


I couldn't work out what the hell the app is from the website, as the home page tells you it's a "New Home for Work Chat" and mentions "Still using personal chat apps for work conversations?" - so I'm guessing it's supposed to have some business focus, but the app name makes it sound like something you'd install for your kids. I can't imagine ever saying to someone "we need to discuss contract details, let's talk on BirdyChat".


The silly names for "work apps" has been a meme since at least 2022. https://x.com/gossipbabies/status/1487161069143576576


Yes, exactly.

It looks like it's focused on business but its name sounds childish. If I mentioned that in a corporate meeting people would just laugh at me, I don't think it helps their case.


It just sounds—let's say—too playful.

Specially if you go to the homepage and they're trying to market it as a work too.. If I went to my boss and tried to make the case that we should move all of our encrypted communication from Whatsapp to something called BirdyChat they would laugh at me and dismiss the idea.

That might just be me, not sure.


What would they think about a “Slack” at work


They would probably cut them some slack and buy it anyways.


Because a pun on "What's Up?" and "App" is so professional? Maybe I'm old but I remember a time when I though WhatsApp was an extremely silly name for a SMS replacement.


It's not just you.


Personally I hate the name because it reminds me of https://en.wikipedia.org/wiki/Birdy_Nam_Nam (whose work I like)


Twitter. Also it could mean penis (in some places).


Actually, the linked university page [1] does claim that the "cash rent equivalent" is $274 per acre. Surprising, but I suppose farmland isn't that expensive. But unfortunately their total budget per acre is $960, 90% higher than in the AI's "budget". Assuming that it can do everything as efficiently and cheaply as an experienced human farmer, such as harvesting all 5 acres in 14 hours of labor.

[1] https://www.extension.iastate.edu/agdm/crops/html/a1-20.html


I don't know anything about farming, but the budget seems extremely dubious. 1370 on the lease, 350 on "IoT sensors" and "soil testing" (why?), but only 800 on "Custom Operator", which I'm assuming is supposed to be the labor, for seven months (apr-oct). So that's an average budget of 114 dollars on labor per month. For minimum wage that buys you 15 hours of work. Is this all a big trolling attempt aimed at HN users?


Remember the website is entirely AI-built; it's not surprising it's promising a bunch of stuff it's not actually delivering.


I mean, it's probably worse to pretend to be an actual customer, rather than sending some random message. The AI's obviously never going to actually lease any land, so all its doing is convincingly wasting their time. At least landlords are often quite unsympathetic, so it's probably fine to waste their time a bit.


What do you mean? There's $1370 earmarked for the lease.


I mean, it hasn't even "decided" whether it's going for "Iowa, Texas or Cordoba, Argentina". Just look at the files in the repo, it's looking an awful lot like those AI transcripts where somebody's "discovered a new kind of physics". https://github.com/brightseth/proof-of-corn/blob/main/proof-...


Loving the soulless summary of "HN Concerns"


I mean, nobody needs LLMs to program. Being banned may be a blessing in disguise, like being cut off at a bar, or banned from a casino.


> How is thinking different from electricity?

...


> That 20ms is a smoking gun - it lines up perfectly with the mysterious pattern we saw earlier!

Speaking of smoking guns, anybody else reckon Claude overuses that term a lot? Seems anytime I give it some debugging question, it'll claim some random thing like a version number or whatever, is a "smoking gun"


Yes! While this post was written entirely by me, I wouldn't be surprised if I had "smoking gun" ready to go because I spent so much time debugging with Claude last night.


It's interesting how LLMs influence us, right? The opposite happened to me: I loved using em dashes, but AI ruined it for me.


I still love using emdashes, and people already thought I was a robot!

https://xkcd.com/3126/

Soon the Andy 3000 will finally be a reality...


That's a sweet ass—reference


I used to love using em dashes.

I still do - but I used to, too.


Hey wait, - isn't one! Did a human write this?


Serious question though, since AI seems to be so all capable and intelligent. Why wouldn't it be able to tell you the exact reason that I could tell you just by reading the title of this post on HN? It is failing even at the one thing it could probably do decently, is being a search engine.


Direct answers are often useless without building up context for them.


Reminds me of ethimology nerd's videos. He has some content about how LLMs will influence human language.


Some day in the future we will complain about AIs with a 2015 accent because that’s the last training data that wasn’t recursive.


The "maybe" of yesterday is the "you're absolutely right!" of tomorrow.


shouldn't it be "human language influences human language"?


ChatGPT too. And "lines up perfectly" when it doesnt actually line up with anything


Same with Gemini.


You can absolutely see this pattern in Gemini in 2026.

Btw, is the injection of "absolutely" and "in $YEAR" prevalent in other LLMs as well, or is it just in Gemini's dialect?


I've had gemini tell me "We are debugging this problem here in İstanbul" and talking about an istanbul evening, trying to give uplifting or familiar vibes while being creepy.

I think there was a setting about time and location which finally got rid of that behavior.


It's just Gemini. I'm guessing they changes the system prompt for the new year or something, but it's pretty annoying.


I chuckled out loud. It's funny cause it's true.


"You're so right, that nice catch lines up perfectly!"


It's not just a coincidence, it's the emergence of spurious statistical correlations when observations happen across sessions rather than within sessions.


You can add an M-dash, and we completed the bs-bingo. :)


Or the "Eureka! That's not just a smoking gun, it's a classic case of LLMspeak."

Grok, ChatGPT, and Claude all have these tics, and even the pro versions will use their signature phrases multiple times in an answer. I have to wonder if it's deliberate, to make detecting AI easier?


A computational necromancer has likely figured out a way to power a data center by making Archimedes spin in his grave very fast.



Without knowing how LLM's personality tuning works, I'd just hazard a guess that the excitability (tendency to use excided phrases) is turned up. "smoking gun" must be highly rated as a term of excitability. This should apply to other phrases like "outstanding!" or "good find!" "You're right!" etc.


I'm working on a little SRE agent to pre-load tickets with information to help our on-call and I'm already tired of Claude finding 'smoking guns'.


smoking gun, you're absolutely right, good question, em dash, "it isn't just foo, it's also bar", real honest truth, brutal truth, underscores the issue, delves into, more em dashes, <20 different hr/corporate/cringe phrases>.

It's nauseating.



It's what they read on The Internets when training, so don't expect them to generate new phrases, other than what they learned from it?


### The answer that fits everything (and what to do about it)


Maybe we need a real AI which creates new phrases and teaches the poor LLMs?

Looking back we already had similar problems, when we had to ask our colleagues, students, whomever "Did you get your proposed solution from the answers part or the questions part of a stackoverflow article?" :-0


cant wait for chatgpt to make me read about grandmas secret recipe and scroll through 6 ads to see the ingredients for my chicken teriyaki dinner


That's the point though, it doesn't reflect human usage of the word. If delve were so commonly used by humans too, we wouldn't be discussing how it's overused by LLMs.


Come on...haven't we all had to deal with the crazy smart lead who was loaded with those same types of annoying tics?

Considering what these LLMs bring to the table, I think a little tolerance for their cringe phrases is in order.


You might see certain phrases and mdashes ;-) rather often, because … these programs are trained on data written by people (or Microsoft's spelling correction) which overused them in the last n years? So what should these poor LLMs generate instead?


At this I'm just so glad that "you're absolutely right!" phase is over.


They love clichés, and hate repeating the same words for something (repetition penalty) so they'll say something like "cause" then it's a "smoking gun" then it's something else


I don't think claude has even once used this in my conversations (Claude Desktop, Claude Code, Voice conversations...) Sycophancy, yes absolutely!

Maybe it has something to do with your profile/memories?


It's a smoking gun of Claude usage.


Yes, it’s kind of a corpus delicti. ;)


I see it from GPT5 too a lot


> Speaking of smoking guns

Oh shoot! A shooting.

So the TL;DR of this post is: don't change this setting unless you know what you're doing.


Chastise it with a reminder that you're using smokeless powder.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: