Messenger can warn you about sketchy links without knowing what you clicked

Meta has introduced an innovative feature within its Messenger application known as Advanced Browsing Protection (ABP), designed to enhance user safety by identifying and alerting individuals to potentially harmful websites encountered during chats. This proactive measure addresses the growing concern over malicious sites that may attempt to steal passwords, harvest personal information, or deploy malware.

Enhanced Safety Measures

In its standard configuration, Messenger employs Safe Browsing, which utilizes on-device models to scrutinize malicious links shared in conversations. However, the introduction of ABP marks a significant advancement, utilizing a constantly updated watchlist that encompasses millions of additional potentially harmful websites. As Meta elaborated in a recent blog post, this enhancement aims to provide users with an even greater level of protection.

Given that Messenger operates with end-to-end encryption, the challenge lies in the fact that Meta cannot access the content of messages or links within chats. This limitation complicates traditional server-side link scanning, which typically requires access to the unencrypted URL. To navigate this issue, Advanced Browsing Protection employs sophisticated cryptography and secure computing techniques, enabling link verification without exposing them to Meta’s systems in a readable format.

How it Works

When a user clicks on a link, Messenger must ascertain whether the destination is listed on a blocklist. Due to the encryption protocols, the app cannot transmit the plain URL to a server. Instead, it utilizes a privacy-preserving query system grounded in private information retrieval techniques.

  • The client transforms the URL into a bucket identifier based on predefined grouping rules.
  • It generates blinded cryptographic queries for various components of the link, effectively concealing the original address.
  • These encrypted queries are then dispatched to the server.

The server responds with encrypted data corresponding to the identified bucket. The device subsequently decrypts this response locally and conducts the final comparison on-device. Should the link correspond to an entry on the blocklist, Messenger promptly displays a warning before allowing access to the site.

Managing Advanced Browsing Protection

For users interested in activating or deactivating Advanced Browsing Protection, the process is straightforward. Within the Messenger app, navigate to the menu and select Settings. From there, tap on Privacy & safety and choose Safe browsing located in the Security section. On the Safe browsing screen, users will find the option for Advanced browsing protection, where they can enable or disable this feature as desired. If this setting is not visible, it may be necessary to update the Messenger app to access the latest features.

AppWizard
Messenger can warn you about sketchy links without knowing what you clicked