upvote
> There are 3 billion users of FB/WhatsApp/Instagram combined

Is there tho? I have Facebook account but don't use it in any meaningful way. I'm certainly not feeding it any new data. I'm curious to know what percentage of that 3 billion are zombie accounts like mine.

reply
There almost certainly is. I think on HN people aren’t really aware that they don’t represent the median internet user super well. I would wager if you were to tally every late millennial and zoomer across the west, Instagram usage would probably be near 90%. Facebook usage among older people is also still absolutely rampant, at least anecdotally. Not to mention WhatsApp usage which is huge everywhere but the US seemingly
reply
The population of the west who fit into zoomer near millennials wouldn't even be close to 500m. Maybe if we add threads bots we could get closer. Most of the accounts are bots/fake/not used anymore.

90% of zoomers don't have an account, most rarely use it and don't add more than a few photos for social proof.

reply
> The population of the west who fit into zoomer near millennials wouldn't even be close to 500m.

There are many people of all ages not in the west from very populous nations who use Insta, FB and WhatsApp.

I’ve learned that US usage patterns are not representative of rest of world.

More saliently, HN users’ conception of others’ usage patterns are absolutely not representative.

reply
This. The metric is "monthly active users" but people prefer that other metric "I don't use it, I don't seen anyone using it in front of me, so nobody uses it".
reply
Instagram seems like their most engaged property. FB seems to be devolving into groups + marketplace, and WhatsApp gets a lot of play but I don't think it's the best ad serving/bot surface. I don't think Insta alone can carry the company long term, and while I can see group moderation bots, marketplace agents and insta content assistants being popular, I don't think Meta has an entre into running people's lives the way Google does.
reply
For anyone who has school age kids, WhatsApp usage is pretty huge in the US as well.
reply
I'll take that wager! Before you look at any real statistics, how does $1000 sound?
reply
Who knows for sure, but Meta's own financial disclosures[1] report over 3.6 billion "Family Daily Actice People (DAP), which represents the de-duplicated number of people who log into at least one of Meta's core properties (Facebook, Instagram, Messenger, or WhatsApp) daily.

At even 1% of that figure, that's a heck of a lot of people.

1. https://investor.atmeta.com/investor-news/press-release-deta...

reply
I placed an ad on Facebook as an experiment just to see what the conversion rate would be.

It's for real estate so you can't select age ranges.

The view count grouped by age (highest views to lowest) was:

- 65 to 75

- 55 to 65

- 45 to 55

And almost all women.

In other words, there are a LOT of older women on FB.

reply
Outside of US/Canada and a handful of countries with their own chat apps like China, WhatsApp is like... THE global method of internet communication.
reply
India is 1bn-something people and they're pretty much all on WhatsApp
reply
Yes, of course. Wikipedia has a quick summary of the most popular networks ranked by monthly active users. Facebook is #1 and Meta owns three of the top five. https://en.wikipedia.org/wiki/List_of_most_popular_social_pl...
reply
Those are self-reported numbers from 2023. Besides most likely being highly inflated, I think Facebook is on the decline.
reply
Well, perhaps. But to the same extent that all the other social networks' usage numbers would also be highly inflated.
reply
That’s delusional, mate. Sorry.
reply
facebook is everything except on the decline, HN bubble is the only place anywhere where this is being thrown around without any rhyme/reason
reply
> Is there tho?

Yes.

> I'm curious to know what percentage

A fraction of one.

Same with most topics that HN considers sensitive, such as privacy concerns. >99% of people just don't give a shit.

reply
Almost everyone in south asia, Latam, and Africa with a smartphone uses whatsapp daily. I mean the penetration rate is actually crazy. In my latam country 92% of internet users are whatsapp users. In india, the figure is 97%.

So how many billions is that before throwing in IG and FB?

reply
You're probably a techie so statistically an anomaly.

Also WhatsApp is absolutely huge around the world and wherever I go it doesn't seem like it's slowing down.

reply
FB Marketplace is great.
reply
I actually despise Marketplace compared to the Craigslist days. Unfortunately it seems to be where everyone moved.

Craigslist had no accounts or login wall. Postings were chronological with a map. Simple email for communication rather than FB messenger.

reply
I should clarify that what I mean is that it's very useful for buying and selling. Where I live, at least, it's more active than Kijiji or Craigslist ever were.
reply
I’m sure there is a percentage of accounts that are zombie but there’s no doubt that Meta has an absolute shit-ton of daily users. All else aside, in most countries outside the US WhatsApp is the primary messaging medium.
reply
WhatsApp is end-to-end encrypted, so I'm not trusting Meta with much, and it's the only way I can reach quite a lot of people. A lot of people I know trust them begrudgingly (primarily with Instagram, because all of their friends are on it as well).

People don't need to love a company to use its products. The perceived benefit merely needs to be bigger than the perceived cost.

reply
WhatsApp is E2EE, but Meta controls both ends. Instead of reading your plaintext on the server, they read it on the client. Not that tricky.

I presume the hardest part would be avoiding detection via decompilation and other reverse engineering techniques. Not familiar with that space (can anyone here shed some light?), but it seems likely that an entity with Meta’s resources would be able to figure that out.

E2EE probably protects well against bulk data collection (traffic analysis would sniff out sending 2x volume of data pretty quickly). But something more subtle and targeted, smuggled out in various fields of various protocols, would be hard to detect.

reply
They only need to get caught doing it once to have a gigantic lawsuit on their hands. They could possibly pull it off very selectively, but doing it in a dragnet fashion seems incredibly risky.
reply
What grounds would the lawsuit be based on? I can’t imagine that slurping any kind of data would be inconsistent with their EULA.

The only risk would be the reputational damage. And as far as their bottom line is concerned, the impact of that would be negligible—how many of WhatsApp’s billion(?) users know that it’s supposed to be E2EE, let alone are under the illusion that Meta doesn’t have access to their data?

reply
Publicly stating to not have access to message contents yet doing otherwise, i.e. outright deception, doesn't seem like something you can EULA your way out of in most jurisdictions.

Beyond that, the GDPR and similar laws also impose limits as to what you can EULA away even without being deceptive about it.

reply
My suspicion is that things like URL previews, or when the app calls a handler to open a link (YouTube, browser), are still monitored.

So e.g. opening a link to an Amazon product that a friend sent makes you a target for ads in that category.

It's a suspicion, they'd probably argue their EULA allows this. The typical "we have to monitor links for dangerous content" is always the standard bullshit.

reply
This is indeed a common vector of privacy leaks on either the recipient side (to the sender, in this case, if they operate the target of the link for which a preview is being rendered) or to the platform provider (if the preview is rendered server-side). But last time I checked, in WhatsApp, URL previews are rendered exclusively on the sender side and then sent as (E2E encrypted) media to the recipient.
reply
This assumes completely techo-rational actors that continuously monitor cost-benefit analysis, other alternatives and switch products when one outweights the others.

This is even further away from the reality where people have breakdowns because their app icon moved location and is not in the usual spot.

The average person is optimizing towards energy use minimization by default because life is already hard enough with plans, kids, etc.

Use incentives and we will arrive at closer truths than by claims and expressions.

reply
People have breakdowns because they are left without mobile reception for a few hours. Indeed this IS happening and I would expect people soon to have breakdowns, because they lack access to AI.
reply
Slightly different lens, same outcome: It's there, it lets people do what they want to do with acceptable effort/other negative consequences, so they use it.
reply
> WhatsApp is end-to-end encrypted,

- Meta data of your messages is not encrypted so meta can make a graph of who you talk to and when

- backups are not encrypted by default so plaintext of your private chats can be obtained

- even if you enable encryption for backups all it takes is for the other person in your private convo (or a person in a group chat) to not enable it for your messages to be available in plaintext

reply
> - backups are not encrypted by default so plaintext of your private chats can be obtained

Yes, but importantly not by Meta themselves.

> - Meta data of your messages is not encrypted so meta can make a graph of who you talk to and when

Fair enough and worth mentioning. I'm personally fine with it.

> - even if you enable encryption for backups all it takes is for the other person in your private convo (or a person in a group chat) to not enable it for your messages to be available in plaintext

Yes, but how would you prevent that even in principle? I can't control what the people I'm messaging do with their copy of my messages. As long as there isn't unnecessary non-repudiation (e.g. by the sender cryptographically signing all outbound messages, which the Signal protocol intentionally avoids), I think this is fair as well.

I do agree that e.g. vanishing chats with a short timeout/"view only once" images should probably not be included in backups, though; last time I checked, I think they were.

reply
> Yes, but importantly not by Meta themselves.

Don’t they save backups to Meta? Even if not, they can read whatever’s (unencrypted) on your phone if they really want to.

reply
They currently go on iCloud on iOS and Google Drive on Android. There are rumors about a first-party backup service, which would obviously change that calculus, but nothing concrete yet.
reply
I've read that if you give FB/IG/WA access to all files/photos, and you have GPS metadata for photos (I do, hey it's useful to know where I took a pic), it can trawl that data to see where you've been and when...

So now Android strips location info when sharing an image to an app. A filter layer between filesystem and app, to add complexity to the whole system...

reply
WhatsApp / Meta is also on both sides of the E2EE.
reply
Sure, but so is every security researcher in the world if they want to be, and they only need to get caught shipping exfiltration logic once.
reply
> so is every security researcher in the world if they want to be

Most security researchers lack Meta's history:

- Testing emotional manipulation features on thousands of users non-consensually

- Adding spyware on underage users

- Intercept a rival app's traffic

- Allowing harm to teen mental health

And most importantly, most security researchers lack the money and power to fend off the legal consequences of these acts.

reply
> Most security researchers lack Meta's history: [...]

Why would you assume that security researchers don't know about these? If anything, wouldn't all the bad press and scandals make WhatsApp a more likely target of scrutiny?

> And most importantly, most security researchers lack the money and power to fend off the legal consequences of these acts.

Yes, security research is generally expensive, but do you have any evidence for Meta taking legal steps against it and making it actively harder? I remember e.g. the controversy around WhatsApp re-encrypting unconfirmed outbound messages to a new key; this was revealed by security researchers and widely discussed. (Not that they're making it easier by providing source code for WhatsApp's cryptography or a debug interface to validate what's actually going on in the client, but neither does e.g. iMessage.)

In fact, there's a relatively absurd lawsuit against Meta on WhatsApp encryption going on right now, and these claims are widely being repeated all over social media.

reply
I meant to say that most researchers have engaged in the unethical actions that Meta has.

It's not that Meta is making it harder to report them but the fact that reporting them does not meaningfully disincentivise Meta from carrying on with their unethical behaviour (i.e. it is not an effective deterrent).

reply
Being unethical is, for better or worse, not automatically illegal. Saying that your product provides end-to-end encryption and you can't access message content and then intentionally shipping a backdoor (for your own benefit and not, say, that of a government that compels you to do this) would very likely be.
reply
someone's questioning that claim legally: https://www.pcmag.com/news/lawsuit-alleges-that-whatsapp-has...
reply
And has a verdict been reached? Otherwise, people are pursuing all kinds of outlandish claims legally.
reply
I work there. The claims made in this article are just blatantly false, and so obviously so to any employee I'm not sure how this hasn't been thrown out.
reply
I agree, it should be rediculously easy to demo it's real e2e capabilities. to everyones benefit
reply
Honestly I am in that camp, but Facebook is kind of a special case for me. I don't really care about giving Google or Microsoft or OpenAI or Anthropic all of my personal data, but Facebook is a bridge slightly too far.
reply
One thing they could try eating is glue on their pizza, helps the cheese stick to the toppings
reply
This comment is one of the most dystopian things I've read on this site.
reply
>My elderly parents would absolutely love if someone would just tell them what to do and eat every day

I guess a lot of the AI enthusiasts are already pushing the "I automated my daily life decisions to this awesome AI. I now have more time and more brain power left to be productive!" angle.

reply
I think the phrasing is a little extreme. Rather than “tell them what to eat” I’d say something like “everyone wishes they had a personal assistant”.

I could do a lot better at meal planning than I do. I rotate between relatively few dishes. An AI that finds recipes and automatically adds the ingredients to my shopping could be interesting. Technically it’s “telling me what to eat” but it’s not like I’m taking orders from it.

reply