WhatsApp LLC

O WhatsApp é um caso de risco e responsabilidade porque um serviço de mensagens conhecido por criptografia de ponta a ponta teve que confrontar um limite de confiança diferente: o endpoint, a pilha de chamadas e a infraestrutura da plataforma que poderiam ser abusadas. O registro público em torno do CVE-2019-3568, o litígio do WhatsApp contra o NSO Group e documentação mostram que a criptografia sozinha não responde à questão da responsabilidade.

WhatsApp is a risk and accountability case because a messaging service known for end-to-end encryption had to confront a different trust boundary: the endpoint, the call stack, and the platform infrastructure that could be abused before a message was ever read. The public record around CVE-2019-3568, WhatsApp's litigation against NSO Group, later court rulings, and public-interest documentation shows that encryption alone cannot answer the accountability question. The question is who had control over exploit repair, user notice, infrastructure abuse, commercial spyware deterrence, and evidence that a platform can defend high-risk users against targeted intrusion.