WhatsApp Accounts Almost Completely Unprotected


Recommended Posts

WhatsApp accounts almost completely unprotected

Tests performed by The H's associates at heise Security have found that popular texting alternative WhatsApp is easily hacked using freely available tools. Anyone using WhatsApp on a public Wi-Fi network risks having their data sniffed and their account used to send and receive messages. Once hacked, there is no way to restore account security ? attackers will be able to continue to use the hacked account at their discretion.

Over the last week the lack of security inherent in WhatsApp's authentication has gradually become clear. Researchers have discovered that the client uses an internally generated password to log on to the server; this password is generated on Android devices from the device's serial number (IMEI) and on iOS devices from the MAC address of the Wi-Fi interface. The problem with this is that the information is anything other than secret ? the IMEI can often be found on stickers inside of Android phones (usually under the battery) and can also be obtained using a shortcut key combination or by any app.

Source and more.

Considering the age of this article (14th September) I'm assuming this isn't news to anyone? I couldn't find a thread about it though, so figured I'd post to be sure.

Now read that myself, however i was aware Whatsapp is very insecure.

Another interesting article from May this year: WhatsAppSniffer Shames WhatsApp's Plaintext, Unprotected Chat Transfer Protocol, Shows Off Just How Much Can Be Sniffed.

It looks like that was finally patched in August: WhatsApp no longer sends plain text

WhatsApp appear to be threating legal action over people creating tools that exploit the service: http://www.h-online....rs-1716912.html ... why not just secure it then surly such tools will be useless?!

WhatsApp appear to be threating legal action over people creating tools that exploit the service: http://www.h-online....rs-1716912.html ... why not just secure it then surly such tools will be useless?!

Because it is a lot easier to sue instead of improving your own stuff. :D

A certain other company is also famous for this. ;)

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Dude, it's a .reg away from a permanent modification. If you're a power user, look it up and keep the .reg and stop being a crybaby expecting MS to include customization for everything on a generalist OS. The default is what's the best UX for the majority of the userbase, non techie people.
    • Logitech MX Creative Console is down to the lowest price by Taras Buria Having a Stream Deck-like device next to your keyboard could be a massive productivity boost. It lets you map specific actions and shortcuts to speed things up, and Logitech has such a device for you with a big 20% discount. Right now, you can save $40 on the Logitech MX Creative Console. The MX Creative Console is an unconventional accessory that consists of two modules. One module has nine customizable buttons, with each having a built-in display for mapping. You can assign apps, shortcuts, actions, or something else. There are nine buttons, plus two more for switching between "pages" of actions. The second module has no displays. Instead, there is a big twisting knob and a small roller for precise adjustments in creative apps like Photoshop, Illustrator, Affinity, and more. There are four additional buttons as well. The MX Creative Console is available in two colors: Graphite and Pale Gray. Both are now 20% off, saving you $40. Just keep in mind that the MX Creative Console requires the Logitech Options+ app, which is only available on Windows and macOS. By the way, each unit comes with three months of Adobe Creative Cloud. Logitech MX Creative Console Graphite - $159.99 | 20% off on Amazon Logitech MX Creative Console Pale Gray - $159.99 | 20% off on Amazon This Amazon deal is US-specific and not available in other regions unless specified. This is a first-party seller link (at the time of article publishing); ensure that you also purchase from a first-party seller link only. If you don't like it or want to look at more options, check out the previous deals that we have covered, OR you can also visit Amazon US deals page. Get Prime (SNAP), Prime Video, Audible Plus or Kindle / Music Unlimited. Free for 30 days. As an Amazon Associate, we earn from qualifying purchases.
    • Because someone else reported theirs was unusable, genius. But being a Linux user you should be used to that. Next time you think you have a "gotcha", check first.
    • Studio MDHR reveals Cuphead sequel and an 8-bit platformer spin-off by Pulasthi Ariyasinghe Studio MDHR has been rather silent about its next major gaming project since the release of Cuphead back in 2017. However, that ended today during the Summer Game Fest presentation, with the studio revealing not one but two project announcements. First, the studio confirmed that it is currently in the middle of developing a brand-new Cuphead game, bringing back the iconic characters for another adventure. Just like the last game, this is slated to be a fully hand-animated endeavor. This also means there isn't a release date attached to it yet. “Craftsmanship is at the heart of everything we do here at Studio MDHR,” says co-founder Chad Moldenhauer. “When it came time to peel back the curtain and share a little bit about what we’ve been up to, we couldn’t imagine a more fun way to do so than with today’s Special Bulletin. The studio is working on this new Cuphead with help from Toronto’s Stop Motion Department and Continue Agency. At the same time, Studio MDHR also revealed that another part of the team has been working on a different Cuphead installment. Dubbed the Mighty Cuphead Adventure, this is taking a different art direction to the original. "In true Studio MDHR fashion, this game goes beyond just taking inspiration from the classics of the 1980s… it is actually built with technology of the era," the studio explained. "That's right: Mighty Cuphead Adventure is programmed in assembly language and designed with the exacting specifications of the Sega Master System home gaming console in mind." Aside from releasing on PC and modern consoles, Mighty Cuphead Adventure will even be playable on the 1985-released Sega Master System. A release date has not been announced just yet.
    • Any decent ITSM will A) have a web form that allows a user to raise a ticket, if you're writing an email you can write a ticket. B) Monitor a mailbox and auto-generate tickets based on inbound mails for those users that really can't get their heads around the concept that if you have an issue you go to support.mycompany.com and fill in the box. From your description you're having users email the desk, and then having a human read each one and manually raise a ticket on behalf of the user.
  • Recent Achievements

    • Mentor
      grik went up a rank
      Mentor
    • Dedicated
      JKR earned a badge
      Dedicated
    • One Year In
      CHUNWEI earned a badge
      One Year In
    • Conversation Starter
      FBSPL earned a badge
      Conversation Starter
    • Week One Done
      I2D earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      481
    2. 2
      PsYcHoKiLLa
      272
    3. 3
      Skyfrog
      78
    4. 4
      Steven P.
      67
    5. 5
      +Edouard
      61
  • Tell a friend

    Love Neowin? Tell a friend!