A WhatsApp vulnerability allows you to spy on group conversations
A WhatsApp vulnerability allows you to spy on group conversations
The application is renewed with new functions to avoid Telegram competition
Despite the end-to-end encryption implemented in WhatsApp conversations, the application of the Facebook universe has an important security hole, according to a group of cryptography researchers from the Rühr University in Bochum (Germany).
These researchers have discovered a problem in WhatsApp through which it is possible to access without permission in a private group of the application through the falsification of the mechanism of verification of invitations from the servers of the app, if these are hacked.
Researchers at Rühr University in Bochum (RUB) have discovered flaws in the encryption process of applications such as Signal, Threema or WhatsApp, which, in the case of the latter, would allow anyone who is able to access their servers to introduce a person in a private group chat without the permission of your administrator.
According to the Wired portal, this vulnerability has its origin in a 'bug' of the application, which does not use any verification mechanism for invitations to groups that its own servers can not falsify.
In this way, if an attacker controls a WhatsApp server, you can use it to easily add a new member to the group without the intervention of the user who manages it.
In addition, German researchers have verified that from the server 'hacked' it is possible to block the appearance of messages such as, for example, warnings for the presence of an unwanted person in the conversation, or forge notifications to deceive the administrator and that he thinks that the intruder has been invited by another person in the group.
A spokesperson for WhatsApp has confirmed to the aforementioned portal the existence of this vulnerability, but has ensured that the addition of a person to a group can not be done secretly, since there always appears a notification that warns of the incorporation of a new user to the collective conversation.
New changes
The application's engineers are still working to prevent their big rival Telegram from eating ground and more users, although their leadership is incontestable, at least in Spain.
The new update of the platform allows you to listen to the audio notes before sending them, to check if it has been recorded correctly. For now, the beta update is available for Apple systems, although it will arrive in the coming weeks for phones equipped with Android.
A first step in the modification of the voice notes, but there is another great step demanded by the users of WhatsApp and that is the recording of audio in hands-free mode and without pressing any button.
Comments
Post a Comment