WhatsApp Security Flaw Lets Hackers Enter Any Group Unnoticed

12 January, 2018, 03:25 | Author: Sherri Guerrero
  • Creepy hackers could secretly eavesdrop on your private WhatsApp group chats, experts claim

Moxie Marlinspike from Signal, upon whose open-source security protocol WhatsApp is built upon argued - "That If someone hacks the WhatsApp server, they can obviously alter the group membership" but if they do add themselves to a group then, "The attacker will not see any past messages to the group; those were e2e encrypted with keys the attacker doesn't have and all group members will see that the attacker has joined". The impostor could also block messages, like questions or requests. That immediately limits the potential of the exploit to employees, sophisticated hackers or governments who can convince the firm to give them access - but the risk is still there, and rather negates the value of WhatsApp's encryption.

As noted cryptographer and Johns Hopkins University professor Matthew Green explained, the vulnerability stems from the fact that the WhatsApp server plays a significant role in group management, and that group management messages are not end-to-end encrypted or signed. "The confidentiality of the group is broken as soon as the uninvited member can obtain all the new messages and read them", Paul Rosler, one of the Ruhr University researchers quoted.

"Additionally the WhatsApp server can forward these messages to the members individually such that a subtly chosen combination of messages can help it to cover the traces".

Facebook's Chief Security Officer Alex Stamos responded to the report on Twitter, saying, "Read the Wired article today about WhatsApp - scary headline!" "Existing members are notified when new people are added to a WhatsApp group". "We built WhatsApp so group messages can not be sent to a hidden user". As a result, any potential flaw that impacts WhatsApp's privacy is cause for concern.

'The content of messages sent in WhatsApp groups remain protected by end-to-end encryption'.

San Diego's flu season: 91 dead, more than 10000 cases
If you've contracted the virus , clean hands regularly, cover your mouth when you cough or sneeze, and avoid sharing germs. That number, is almost double the 11 flu-related deaths reported around the same time previous year in the state.


Giants to hire Matt Patricia as head coach?
On top of that, the New York Daily News is reporting that "all signs point" to Patricia signing with the Giants over the Lions. Leonard said Patricia is expected to be named as the next coach of the Giants , replacing the fired Ben McAdoo.


Ally Sheedy Slams James Franco After His Controversial Golden Globes Win
At one point during the news cycle, he tweeted, "I HOPE PARENTS KEEP THEIR TEENS AWAY FROM ME". I knew a story was being worked on by some reporters, but these folks got impatient.


But Facebook-owned WhatsApp says the problem isn't as bad as the researchers are making out. However, this is a security hole that can not be excused, claims the report. However, with Signal, an impostor would need to control the Signal server, and would need to know the Group ID and the phone number of one member, researchers said in the paper. This allows the server controller to add a new group person without the group admin's knowledge.

That seems to be enough for them at the moment, especially because a fix for the flaw could end up breaking the convenient "group invite link" feature.

German cryptographers claim that the flaw makes it easy for anyone to infiltrate private group chat without the permission of the group admin. WhatsApp, however, has turned down the claim.

The goal of having an end-to-end encryption is to stop trusting the intermediate servers in such a way that even the company or the server that transmits the data can decrypt the messages or abuse the centralized position.

Recommended:

  • TCL Make Hisense Look Second Rate AT CES 2018

    TCL Make Hisense Look Second Rate AT CES 2018

    CES 2018 has mostly been about TVs and displays with companies introducing new and interesting innovations in the lineup. Like the upcoming soundbar, both TV lines feature Roku OS and Roku Connect , making for some strong synergy.
    Flu-Related Deaths Reported In Tarrant County

    Flu-Related Deaths Reported In Tarrant County

    It says one adult between the ages of 50 to 64 died at some point between October first through December 30th. There have been 3,854 total flu-associated hospitalizations in OH since flu season began last October.
    Razer Project Linda turns your Razer Phone into an Android laptop

    Razer Project Linda turns your Razer Phone into an Android laptop

    Making its debut through the event this week, the company has brought forward a brand-new concept laptop called Project Linda . For more information on Razer's Project Linda concept and to register for announcements, visit razerzone.com/projectlinda .
  • CMS Issues Guidance on Medicaid Work Requirements

    CMS Issues Guidance on Medicaid Work Requirements

    The work requirements "could have negative implications on many who are working or exempt from the requirements". But states traditionally can seek federal waivers to test new ideas for the program.
    Twitch announces exclusive Overwatch League livestreaming deal

    Twitch announces exclusive Overwatch League livestreaming deal

    The deal is not a surprise considering that Twitch and Blizzard have a long history of collaborating for esports events. Aside from the hundreds of new skins added to Overwatch , a slew of minor bugfixes have been pushed to the game.
    Acer's Swift 7 Announced in CES 2018

    Acer's Swift 7 Announced in CES 2018

    Acer also rolled out its Chromebook 11, which will support Google Play for Android apps and two USB 3.1 Type-C Gen 1 ports. The Nitro 5's chassis features a top cover with elegant laser texturing that brings bold refinement to the gaming laptop.
  • Gregg Popovich confirms Kawhi Leonard has

    Gregg Popovich confirms Kawhi Leonard has "partial tear" in shoulder

    Despite numerous injuries, the Spurs are 27-14 and now in third place in the Western Conference standings. This setback adds to Kawhi's frustrations this year after he missed the first 27 games of the campaign.
    Freezing rain, measurable snow Wednesday, Thursday

    Freezing rain, measurable snow Wednesday, Thursday

    THURSDAY: The warming trend continues for Thursday, with a high temperature of 64 degrees, and the chance for a few rain showers. SATURDAY: Snow showers will develop and linger into Saturday, with much colder temperatures returning.
    Teacher handcuffed after questioning superintendent's $38000 raise during school meeting

    Teacher handcuffed after questioning superintendent's $38000 raise during school meeting

    Hargrave later raises her hand and when called on again asks a question about the issue of teacher salaries and pay raises. Her comments prompted board president Anthony Fontana to rule Hargrave out of order during the meeting, KATC reported .
  • Super Mario Odyssey to get free 'Luigi's Balloon World' add-on

    Super Mario Odyssey to get free 'Luigi's Balloon World' add-on

    In "Hide It", you have 30 seconds from Luigi's spawned spot in each Kingdom to hide a balloon in the most hard spot you can think. An update next month for Super Mario Odyssey will bring some new cool add-on features to the game , Nintendo announced Tuesday.
    3 injured in fire atop NY's Trump Tower

    3 injured in fire atop NY's Trump Tower

    One person sustained a serious and possibly life-threatening injury, while another had a minor injury. Fire officials said the fire was contained to the roof and never entered the building.
    BlackBerry Motion hits the United States  as Keyone get a Bronze Edition

    BlackBerry Motion hits the United States as Keyone get a Bronze Edition

    This means customers can expect to see at least two new BlackBerry smartphones from us later this year". The Motion launched in Q4 of previous year but initially skipped the United States market.


Popular

Nintendo Announces Mario Tennis Aces for Nintendo Switch
REUTERS/Kim Kyung-HoonAn event guest plays with the Nintendo Switch in Tokyo, Japan during its announcement on January 13, 2017. She's a Japanese hacker with an LED digital mask that changes colors/expressions depending on what's going on in the game.

The Weeknd Drops H&M After Racist Ad
At the time of writing, the hoodie is still available on the H&M site , although the photo featuring the child has been removed. Though H&M issued an apology, R&B hitmaker The Weeknd announced on Twitter that he would no longer work with the company.

Keith Urban, Nicole Kidman Turn 2018 Golden Globes Into Date Night
But Kidman also shares two other children - Connor, 22, and Isabella, 25 - whom she adopted with her ex-husband Tom Cruise . Kidman won Best Actress in a Limited TV Series for her role in " Big Little Lies ".

Single cigarette leads to daily habit for two thirds who try it
Prof Hajek added that it doesn't seem to be the case that e-cigarettes are as addictive as conventional cigarettes. The research selected asked respondents whether they'd ever tried a cigarette and ever smoked daily.

No deal in place for Gerrit Cole
The Astros would hope that Cole bounces back to his form from 2013-2016 when he had a 3.23 ERA over 579 1/3 innings of work. Passan did note that "generally, this sort of thing winds up with a deal being consummated".

Feinstein Releases Fusion GPS Founder's Testimony on Trump Dossier
Democrats on the committee said they were not consulted ahead of the Republicans' referral to the Department of Justice. In a statement, Fusion GPS commended Feinstein "for her courage" in releasing the document.

All-electric Kia Niro unveiled at CES 2018
The interactive display panel which replaced the grille, meanwhile, can be used to flash up messages. For Kia, the concept vehicle unveiled this week at CES in Las Vegas is called the Niro EV Concept .

Arsenal Ready to Return for Lemar, Gunners 4/1 to Seal Deal
Lemar is one of the best young midfielders in Europe and will certainly enhance the quality of the current Liverpool midfield. Jardim said , " We do not typically sell players in the winter transfer window ".

HP's new Spectre x360 15 is for creatives who crave more power
This new series of processors is designed for use within integrated systems, such as AIOs, notebooks and NUCs. This implies titles like Vermintide 2 would now be able to be played in high-determination in a hurry.

Pink to perform US national anthem at Super Bowl
The charismatic multi-talented superstar will take the Super Bowl halftime show stage the third time in his career on February 4. The NFL and NBC have revealed that Pink will perform the song during pregame festivities at U.S.