Home » Tech

WhatsApp Flaw Compromises Security Of Encrypted Group Chats

14 January, 2018, 00:12 | Author: Lloyd Doyle
  • WhatsApp Flaw Compromises Security Of Encrypted Group Chats

Essentially, anyone who controls WhatsApp's servers could easily add new unidentified people into WhatsApp groups without the permission of the group administrator despite the administrator having full access to adding and removing members.

A flaw in popular encrypted chat programs WhatsApp, Threema and Signal theoretically allows nearly anyone to control important servers, bypass encryption and add themselves to group chats.

After German cryptographers reported flaws that makes it possible to infiltrate WhatsApp's private group chats without admin permission, the Facebook-owned messaging platform said on Thursday its end-to-end encryption is impeccable and its over one billion users are at no data breach risk.

As you know, only the administrator of a WhatsApp group can add/remove members. The impostor could also block messages, like questions or requests.

WhatsApp representative said that if this would happen and someone would add new people to group chat, members would be warned about it. Entering the group, however, leaves traces, since this operation is listed in the graphical user interface. "He can cache all the message and then decide which get sent to whom and which not", Mr. Roster added.

"Additionally the WhatsApp server can forward these messages to the members individually such that a subtly chosen combination of messages can help it to cover the traces". This is claimed to indicate that your name has been mentioned four times in that specific WhatsApp group.


In a statement to Wired, WhatsApp said it had looked into the problem.

This means that an attacker can add someone to a conversation and read all future messages sent in the chat (past messages are still hidden). WhatsApp is also testing a new "Quick Switch" feature to let users shift from voice call to video. "And if not, the value of encryption is very little".

The best way for Sun readers to stay safe from this exploit is to always be mindful of who else is in your WhatsApp group. This is where researchers are paid to report hack able flaws in the company's software.

Researchers Paul Rosler, Christian Mainka, and Jorg Schwenk from Ruhr University Bochum in Germany analyzed instant messaging apps and their end-to-end security. That person manages the addition and removal of members, setting group policy and deleting the group chats itself.

For Threema, the researchers found even smaller bugs: An attacker who controls the server can replay messages or add users back into a group who have been removed.

Once the unidentified person has been injected into the group, the other members would receive a message informing them that a new member has been added, seemingly at the behest of the group admin. We say so as it is common for us to mute large groups that will result in skipping important conversations and messages.

Recommended:

  • 7.6M Earthquake Shakes Country of Honduras

    7.6M Earthquake Shakes Country of Honduras

    Other than cracks in some buildings in the region, no other damage or injuries were reported. The tsunami warning were in effect for two hours and then the advisories were withdrawn.
    GoPro Kills Its Karma Drone, Lays Off 250

    GoPro Kills Its Karma Drone, Lays Off 250

    Woodman told CNBC that he would consider a sale or partnership with another company, though no names were mentioned. Chief executive officer Nicholas Woodman will reduce his 2018 cash compensation to $1.
    TMZ: 'Coach' Star Jerry Van Dyke Dead at 86

    TMZ: 'Coach' Star Jerry Van Dyke Dead at 86

    It's said that the actor's health has been on the decline since being involved in a serious auto accident about two-years ago. Jerry Van Dyke made his mark as both a stand-up comedian and as an actor in a fascinating career spanning decades of work.
  • NFL Announces 2018 London Schedule

    NFL Announces 2018 London Schedule

    The NFL has scheduled arguably its most impressive slate of London games yet in an announcement at Tottenham's new stadium. The league is now more than a decade into playing regular-season games in London after kicking off the series in 2007.
    ZBB Sings National Anthem During NCAA Matchup

    ZBB Sings National Anthem During NCAA Matchup

    The President had previously condemned the action of some athletes who chose to kneel during the national anthem before NFL games. He has even changed the banner image on his Twitter account to a photograph of him standing during the anthem before the game.
    Who Is Har Gobind Khorana? Google Doodle Honors Indian-American Biochemist

    Who Is Har Gobind Khorana? Google Doodle Honors Indian-American Biochemist

    He joined the faculty of the Massachusetts Institute of Technology in 1970, where he would remain until his retirement in 2007. Khorana received scholarships to attend Punjab University where he earned his Bachelor's and Master's degrees .
  • At least 8 people dead after mudslides hit fire-ravaged California community

    At least 8 people dead after mudslides hit fire-ravaged California community

    Winfrey posted a video on Instagram showing her wading through almost knee-deep mud on her Montecito property. Some undamaged businesses closed as they lacked water, gas and other supplies to operate.
    Oprah Winfrey claims lifetime Golden Globe, calls for 'a new day'

    Oprah Winfrey claims lifetime Golden Globe, calls for 'a new day'

    Some of Winfrey's close friends have reportedly been urging her to run, CNN reported . You are too mean and unrelatable .
    #BillsMafia invades Jacksonville for first playoff game in 18 years

    #BillsMafia invades Jacksonville for first playoff game in 18 years

    Jacksonville Jaguars running back Leonard Fournette rushed 21 times for 57 yards in a victory over the Bills on Sunday. But receiver Kelvin Benjamin was called for offensive pass interference in the end zone.
  • Camila Cabello Says Fifth Harmony's 2017 VMA Performance Was 'Petty'

    Camila Cabello Says Fifth Harmony's 2017 VMA Performance Was 'Petty'

    As you can imagine, it was tough for her to watch, which she did live on TV as it aired at home in her living room with her mom. It seems like Camila Cabello's record label didn't actually have a lot of faith in her breakout hit, " Havana ".
    Urgent appeal for blood donors in Corby

    Urgent appeal for blood donors in Corby

    Power Red donors give a concentrated dose of red blood cells during a single donation, allowing them to maximize their impact. Many donors have planned to take part in the day's collection with an appointment, but walk-ins also will be taken on Monday.
    CNN's Jake Tapper shuts down contentious interview with Trump aide Stephen Miller

    CNN's Jake Tapper shuts down contentious interview with Trump aide Stephen Miller

    After a relatively calm start to the segment, things took off when Miller began lashing out and at both host Jake Tapper and CNN . Tapper on Sunday cut off his interview with Miller, as the two sparred about Trump and the news network.


Popular

Michael Wolff Tells Stephen Colbert He's Surprised by Success of Trump Book
I'm offering-and this was totally mystifying to people in the White House-I'm offering a book'. He said Miller wanted to be given a platform to spruik his own agenda, "facts be dammed".

Syrian PM Praises Iran for Foiling US-Israeli-Saudi Plot
The White House also called for an immediate release of all political prisoners in Iran as civil unrest in the country continues. "They damaged us during these days, they know there will be some sort of retaliation", he said, the Times reported.

Pats DC Matt Patricia reportedly prefers Giants head coaching job
All signs pointed to Patricia taking over in Detroit, where he interviewed with during New England's postseason bye week. That being said, head coaching searches have a way of settling in even as top candidates remain active in the playoffs.

Australia's green turtle may become extinct, say report
The research includes the study of two genetically different population of turtles on the reef. It affects the temperature-dependent sex determination (TSD).

Huawei Mate 10 Pro Won't Be Sold In The US Through AT&T
This follows closely on news that AT&T would cancel its own launch of the Mate 10 Pro for similar reasons. The award will be presented during the CES show in Las Vegas from 9 to 12 January 2018.

Netanyahu tiptoes around United States threat to cut off Palestinian aid
Relief and Works Agency (UNRWA) over what he called the Palestinians' unwillingness to talk peace with Israel. In June, Netanyahu said he had raised the issue with Washington's United Nations envoy Nikki Haley.

NFL, NFLPA to investigate Panthers' concussion evaluation of Cam Newton
He led a touchdown march that got Carolina within one score, but their next and final possession ended with a turnover on downs. He was taken to the sideline medical tent for evaluation for a concussion and cleared after missing only one play.

Princess Charlotte starts nursery - see sweet portraits taken by mum Kate
And, according to the Kensington Palace Instagram account, it was the Duchess of Cambridge who captured this memorable moment. Looks like the toddler princess enjoys horses as much as her great grandmother, Queen Elizabeth II .

Trump calls himself "a very stable genius", slams Michael Wolff
Even before the book , mental health professionals, Democrats and even some Republican legislators raised concerns about Trump. White House officials and Trump's high-profile supporters have launched an effort to raise doubts about Wolff's credibility.

MI stores in new round of Sears & Kmart closings
The move means Kmart will have three Louisiana stores: 7000 Veterans Blvd. and 2940 Veterans Blvd.in Metairie and in Lake Charles. Sears never relocated to the thriving Christiana Mall area, although it later opened a store to the north in Concord Mall.