Google Admits Hangouts Conversations Can Be Wiretapped

Google Admits Hangouts Conversations Can Be Wiretapped
Advertisement
In the post-Snowden world, end-to-end encryption (E2EE) has been a topic of concern with respect to various services that involve communication. While WhatsApp late last year added end-to-end encryption to its messaging service, there are still a few services that have still do not feature the same, which makes them susceptible to interception.

Google at a recent Reddit AUA (Ask Us Anything) session when detailing the current status of its role in assisting the US government in surveillance, disclosed it does encrypt Hangouts conversations but remained unclear on the use of end-to-end encryption. It later, separately clarified that Hangouts does not use end-to-end encryption.

Google's Richard Salgado, Director for Law Enforcement and Information Security, and David Lieber, Senior Privacy Policy Counsel, were representing the firm at the Reddit AUA. During the AUA session, Christopher Soghoian, Principal Technologist at the American Civil Liberties Union, asked, "Why has Google refused to be transparent about its ability to provide wiretaps for Hangouts? Given Google's rather impressive track record regarding surveillance transparency, the total secrecy regarding the company's surveillance capabilities for this product is quite unusual."

Salgado replied saying Hangouts conversations are encrypted. He said, "Hangouts are encrypted in transit, and we're continuing to extend and strengthen encryption across more services."

Google later confirmed to Motherboard that Hangouts doesn't use end-to-end encryption. Without E2EE, it is possible for Google to intercept conversations when requested by law enforcement agencies and governments. With its current implementation however, of encryption in transit, ISPs and telecom operators will not be able to intercept conversations. Google specified to Motherboard that the 'Off the Record' feature only keeps messages out of chat history, but the messages are otherwise indistinguishable from regular, on the record ones.

E2EE is employed to protect communication between two parties (originating party and intended recipient) without being intercepted or read by third parties, including the company offering the service.The data is encrypted by the originating party, and can only be decrypted by the recipient.

The Mountain View giant in the recent past revealed that worldwide government requests for user data rose 150 percent over five years. The company however is unclear how many of these requests were for Hangouts.

It's worth noting that Apple's iOS 8 features built-in encryption that prevents the company itself from accessing data on the devices without the owner's consent or passcode. Apple's iMessage and FaceTime video chat service also feature end-to-end encryption.

Comments

For the latest tech news and reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel. If you want to know everything about top influencers, follow our in-house Who'sThat360 on Instagram and YouTube.

Ketan Pratap
Ketan Pratap is the editor at Gadgets 360 - with over 12 years of experience covering the technology domain. With a breadth and depth of knowledge in the field, he's done extensive work across news, features, reviews, and opinion pieces. But what's truly inspiring about Ketan is how he spends his free time. He's often found gazing at snow-capped mountains from over 20,000 feet while sitting on the hood of his car, taking in the breathtaking beauty of nature. His passion for the great ...More
Can Sense8 Bring Out the Best of the Wachowskis?
iPhone 6s and iPhone 6s Plus Tipped to Feature 2GB RAM, Force Touch
Facebook Gadgets360 Twitter Share Tweet Snapchat LinkedIn Reddit Comment google-newsGoogle News

Advertisement

Follow Us
© Copyright Red Pixels Ventures Limited 2024. All rights reserved.
Trending Products »
Latest Tech News »