 If you rely on encrypted messaging services, take note: German authorities have found a way to read messages on WhatsApp, Signal, and Telegram without breaking the services’ encryption. According to the Netzpolitik news site (you can select an English language version on most browsers), German law-enforcement and intelligence agencies exploit the services’ legitimate “linked device” features, which allow users to access their accounts from computers and other devices. Authorities can quietly connect a government-controlled computer to a targeted account after gaining physical access to a phone, obtaining a verification code through phishing, or intercepting an SMS code. Once connected, authorities can receive future messages and – depending on the service – access earlier messages, contacts, and other account information. In some cases, the linked device can even send messages in the user’s name. Users may remain unaware because encryption remains intact. The government does all this by simply placing itself at one of the authorized endpoints. German customs authorities reportedly tested this technique beginning in 2023 and made it a permanent investigative tool in 2025 after claiming significant successes against serious and organized crime. Its legal basis, even in surveillance-friendly Germany, remains disputed. There is little reason to believe the German government is the only one doing this. Cybernews warns that the technique uses readily available functions built into popular apps. Does the FBI have this capability? That might be a good question for someone in Congress to ask. Given this exposure, what can you do to protect your privacy? When you sign on to an encrypted account, take a few seconds to review the devices linked to your account. Immediately remove any you do not recognize. Strong encryption protects communications in transit. It cannot protect users when a government – or hacker – is secretly inside a seemingly authorized endpoint. Comments are closed.
|
Categories
All
|
RSS Feed