Dominic Williams, founder of Dfinity, has drawn attention to privacy concerns at WhatsApp after a former Meta employee filed a lawsuit alleging systemic security flaws. Williams tweeted that 1,500 Meta engineers had unrestricted access to WhatsApp messages, including private photos, and argued that this highlights the urgent need for foolproof decentralised encryption, such as the vetKeys system used on the Internet Computer.
The remarks came in response to a lawsuit filed by Attaullah Baig, WhatsApp’s former head of security, who claims he faced retaliation after raising cybersecurity issues with Meta’s leadership, including CEO Mark Zuckerberg. Baig alleges that during his time at the company he discovered security gaps that violated federal laws and breached obligations from a 2020 Federal Trade Commission privacy settlement.
According to the lawsuit, approximately 1,500 WhatsApp engineers could move or access sensitive user data without leaving an audit trail, creating a potential regulatory and privacy risk. Baig said he reported these risks multiple times, only to face negative performance feedback shortly afterwards. He later escalated his concerns to the Securities and Exchange Commission and directly to Zuckerberg, but claims the issues were not addressed.
Meta has denied the allegations, stating that Baig’s role and ranking were overstated and calling his claims distorted. The company maintains that its privacy record is strong and that it has a dedicated team working on security. Baig later filed a complaint with the Occupational Safety and Health Administration regarding alleged retaliation, which Meta says was dismissed. He was ultimately let go in February during a broader round of layoffs.
Williams’ comments have sparked renewed discussion about the value of decentralised encryption and the need to minimise centralised control over sensitive data. By highlighting these concerns, Williams frames the lawsuit as an example of broader challenges in safeguarding digital communications in large tech companies.
For Williams, decentralised solutions like the Internet Computer’s vetKeys could provide a safeguard against unrestricted internal access to personal data, offering users a more secure and auditable way to protect private information. The ex-Meta case underscores ongoing tensions between corporate security practices, regulatory compliance, and employee whistleblowers, while emphasising the potential of decentralised systems to strengthen privacy protections.
Dear Reader,
Ledger Life is an independent platform dedicated to covering the Internet Computer (ICP) ecosystem and beyond. We focus on real stories, builder updates, project launches, and the quiet innovations that often get missed.
We’re not backed by sponsors. We rely on readers like you.
If you find value in what we publish—whether it’s deep dives into dApps, explainers on decentralised tech, or just keeping track of what’s moving in Web3—please consider making a donation. It helps us cover costs, stay consistent, and remain truly independent.
Your support goes a long way.
🧠 ICP Principal: ins6i-d53ug-zxmgh-qvum3-r3pvl-ufcvu-bdyon-ovzdy-d26k3-lgq2v-3qe
🧾 ICP Address: f8deb966878f8b83204b251d5d799e0345ea72b8e62e8cf9da8d8830e1b3b05f
🪙 BTC Wallet: bc1pp5kuez9r2atdmrp4jmu6fxersny4uhnaxyrxau4dg7365je8sy2q9zff6p
Every contribution helps keep the lights on, the stories flowing, and the crypto clutter out.
Thank you for reading, sharing, and being part of this experiment in decentralised media.
—Team Ledger Life
Community Discussion