Saturday, 22 September, 2018

WhatsApp security loophole can add uninvited members to your groups

Creepy hackers could secretly eavesdrop on your private WhatsApp group chats, experts claim WhatsApp 'bug' raises questions over group message privacy
Troy Mann | 11 January, 2018, 15:26

However, doing so leaves traces as this operation is listed in the graphical user interface and the WhatsApp server can thus use the fact that it can stealthily reorder and drop messages in the group.

The researchers presented their findings at the Real World Cryptosecurity conference in Zurich on Wednesday (10 January), Wired reports. The obvious examples that come to mind are hackers who manage to gain access to WhatsApp servers or a government successfully pressuring WhatsApp to give it access to targeted group chats.

"If someone hacks the WhatsApp server, they can obviously alter the group membership".

As per a report on Wired, German Researchers from the Ruhr University Bochum described a series of flaws in encrypted messaging apps such as WhatsApp, Signal and Threema. All group members are deemed administrators, and can thus add a new group member by sending an encrypted group management message to the other participants.

On the surface level, WhatsApp, which is owned by Facebook, looks to have a pretty big security flaw. "Only an administrator of a WhatsApp group can invite new members, but WhatsApp doesn't use any authentication mechanism for that invitation that its own servers can't spoof", the report said.

"The phone of every participant in the group then automatically shares secret keys with that new member, giving him or her full access to any future messages", the report added. "If I hear there's end-to-end encryption for both groups and two-party communications, that means adding of new members should be protected against". While usually, the administrator of a group is the only one who can invite a new person to a private chat, there isn't a mechanism now in place to authenticate that invitation.

Zuma sets up state capture inquiry
The sources all agreed that it was now a matter of when, and not if, Zuma stepped down. Zuma said he was taking "further legal advice" on his appeal.


SA loses out on new Toyota-Mazda factory, AP source says
If Wednesday afternoon's announcement wasn't official enough, it's now received the President Trump tweet stamp of approval. The Huntsville-Madison County Chamber of Commerce, as well as leaders from multiple municipalities, joined the event.


Canada convinced Trump will pull out of free trade deal
Kansas City Southern fell as much as 4.6% after the report, its biggest loss in more than eight months. The next round of NAFTA talks - the sixth so far - will be held in Montreal from January 23 to 28.


WhatsApp representatives told Wired there would be no fixes as a result of the research and that notifications of new chat additions are warning enough.

While, the group and the chats themselves have a layer of end-to-end encryption, the servers that the chats run on don't. We built WhatsApp so group messages can not be sent to a hidden user.

He rounded up the conversation by saying - "In sum, the clear notifications and multiple ways of checking who is in your group prevents silent eavesdropping". In such a case, it is impossible for them to share details with enforcement agencies that they themselves can not access.

In January past year, the Guardian newspaper reported that WhatsApp was vulnerable to interception, sparking concern over the app that marketed itself as a privacy leader.

But, as it turns out, the Signal protocol does not check whether the message was sent by an actual member of the group, meaning that anyone outside the group can send the message and, consequently, add a new user to the group.

Facebook's Chief Security Officer Alex Stamos wrote on Twitter that the bug is not effective because WhatsApp users are notified when new members join conversations.

Recommended

  • The Original Game Boy Is Making A Comeback

    The Original Game Boy Is Making A Comeback

    Gizmodo reports that Hyperkin is creating a version of the original Game Boy that will cater to all of your early-2000s kid needs. The peripheral manufacturer is now working on an updated version of the classic Game Boy tentatively called the Ultra Game Boy .
    Willie Nelson Forced to Cancel Shows For Health Issues

    Willie Nelson Forced to Cancel Shows For Health Issues

    Lukas continued: 'If you have tickets, please the venue for a refund and we hope to see you on the road again soon'. As Entertainment Weekly notes, this isn't the first time of late that Nelson has cancelled shows due to his health.
    Motorola Has Announced Two New Moto Mods - CES 2018

    Motorola Has Announced Two New Moto Mods - CES 2018

    The Livermorium Slider Keyboard provides users with a full QWERTY keyboard, and a screen which can tilt upwards 60-degrees. Moto , the sub-brand of Lenovo , is putting all its efforts in expanding its Moto Mods portfolio.
  • Here's the proof of Hrithik Roshan being the best babysitter

    Here's the proof of Hrithik Roshan being the best babysitter

    Sussanne took to Instagram to share a photograph, and wrote: "Forever and always you stay the sunshine in my life. Meanwhile, Hrithik will be seen as Patna-based mathematician Anand Kumar in a biopic titled Super 30 .
    India to play 2 T20Is in Ireland on June 27 and 29

    India to play 2 T20Is in Ireland on June 27 and 29

    Virat Kohli's men will play three T20s, three ODIs and five Tests against England, ahead of the ICC Cricket World Cup in 2019. India will tour Ireland for two T20 Internationals in June before the full series in England from July to September.
    Margot Robbie's story about meeting Barack Obama on her honeymoon is hilarious

    Margot Robbie's story about meeting Barack Obama on her honeymoon is hilarious

    She revealed insider details of how she ran into Degeneres and former United States president Barack Obama under embarrassing circumstances on her honeymoon.
  • Darrell Bevell acknowledged 'challenges' in final press conference of season

    Darrell Bevell acknowledged 'challenges' in final press conference of season

    Under Bevell, the Seahawks also set a club record with 6,012 total yards in 2014 and broke that a year later with 6,058. He's seen as a favorite of Pete Carroll , which makes this news even more surprising.
    Slick roads possible for Wednesday morning commute

    Slick roads possible for Wednesday morning commute

    Persisting winds will add an extra bite to the returning cold, forcing wind chills back into the all-too-familiar single-digits. The combination of rain, melting snow and ice jams could lead to some flooding so that's something we'll need to watch closely.
    Buffett Offers Hint at Next Berkshire Hathaway Leader

    Buffett Offers Hint at Next Berkshire Hathaway Leader

    The company increased the number of directors comprising the entire Board of Directors from twelve to fourteen. Buffett said the move isn't due to any looming concerns , saying he's in "remarkably good health".
  • Study links longer sleep to healthier diet

    Study links longer sleep to healthier diet

    Over the next week, participants wore motion sensors to bed and kept diaries detailing their sleep patterns and daily diets . These extended sleep patterns were associated with an average reduction in the intake of of 10 grams a day.
    Almost  100 immigrants missing at sea off western Libyan coast: Libyan navy

    Almost 100 immigrants missing at sea off western Libyan coast: Libyan navy

    The boat sank off the city of Khoms, around 100 kilometres (60 miles) east of the Libyan capital, Kacem said. Under heavy pressure from Italy, some Libyan armed factions have blocked smuggling since last summer.
    Jimmy Iovine To Leave Apple In August

    Jimmy Iovine To Leave Apple In August

    According to Iovine, he has no interest or intent on parting ways with Apple when August arrives. "I am in the band", Iovine said. Apple Music has nearly no exclusive content, and all the major streaming services are essentially the same.

Trump Upbeat On Opening Broader Talks With North Korea To Defuse Tensions Trump Upbeat On Opening Broader Talks With North Korea To Defuse Tensions South Korea said Wednesday the United States is open to talks with North Korea "at appropriate times" if Pyongyang agrees. But Mr Moon ruled this out yesterday, saying Seoul would keep pace with the global community on the issue of sanctions.

Missing UPenn Student Blaze Bernstein Found Dead in California Park Missing UPenn Student Blaze Bernstein Found Dead in California Park Authorities declined to release additional information about Bernstein's cause death, saying their investigation was ongoing. Bernstein's father, Gideon Bernstein, had worked with friends of the family to conduct independent drone operations.

Julian Assange's Options To Get Out Of Ecuadorian Embassy Are Rapidly Narrowing Julian Assange's Options To Get Out Of Ecuadorian Embassy Are Rapidly Narrowing In 2016, a United Nations panel concluded that Julian Assange has been arbitrarily detained in violation of worldwide law. The rape allegation against the computer programmer had followed a Wikileaks conference in Stockholm in 2010.

Discovery announces it's moving its national headquarters to Knoxville Discovery announces it's moving its national headquarters  to Knoxville Planning for the space and location in NY is underway with an anticipated move to a new building by the second half of 2019. It moved its headquarters to Bethesda in 1991 and then to its current home in Silver Springs twelve years later.

State Department overhauls travel warning system for Americans overseas State Department overhauls travel warning system for Americans overseas The State Department's new, four-tier travel advisory system replaces the previous system of travel warnings and travel alerts. E - Time-limited Event: Short-term event, such as elections, sporting events, or other incidents that may pose safety risks.

Trump instructed lawyer to induce AG to remain on Russian Federation case Trump instructed lawyer to induce AG to remain on Russian Federation  case Trump paid tribute to Norway's use of hydropower, adding: "I wish we'd do some of that". We could have been very closed and it would have taken years.

Vivo Showcases Its In-Display Fingerprint Scanning Smartphone at CES 2018 Vivo Showcases Its In-Display Fingerprint Scanning Smartphone at CES 2018 Users can press the fingerprint graphic on the screen to perform unlocking, payment, and other operations. Samsung was rumored to be working on the same technology past year for the Galaxy S8 and S8+.

Lenovo Says Its Latest ThinkPad X1 Laptops Are "Bloatware Free" Lenovo Says Its Latest ThinkPad X1 Laptops Are Both the new X1 Carbon and X1 Yoga include eye-tracking software that can detect whether or not the user is looking at the PC. The ThinkPad X1 Carbon 6th gen will be available anytime in January 2018 at $1,709 (approximately Rs1,084,65) onwards.

Snow possible on Thursday; today's high, 54 Snow possible on Thursday; today's high, 54 They warn the timing of the shift in temperatures will be important, "as a freeze is possible immediately following heavy rain". Saturday against the Atlanta Falcons in Philadelphia, rain could be ending, but at least it will be warm, with a high of 54.

Australia seal Ashes with 4 nil win Australia seal Ashes with 4 nil win Smith's incredible series saw him make 687 runs - 242 more than the next best, Shaun Marsh - at an average of 137.40. The tourists were bowled out for 180, Australia winning by an innings and 123 runs to complete a 4-0 series triumph.

Steve Bannon walks back most explosive comments Steve Bannon walks back most explosive comments The book portrays a Trump campaign in disarray, and an administration in upheaval, during Trump's early months in office. He issued a statement praising the president's eldest son and says he regrets not having released it sooner.

OH at center of national fight over registered voter rights OH  at center of national fight over registered voter rights Democrats have accused Republicans of trying to suppress votes from minorities and poorer people who tend to vote for Democrats. The Ohio voting rights decision will be one of several voting rights cases heard by the Supreme Court during this term.

Beijing weighs slowing, halting purchases of US Treasuries Beijing weighs slowing, halting purchases of US Treasuries It isn't clear whether the officials' recommendations have been adopted. The S&P/ASX 200 index fell 0.5 per cent, or 29.1 points, to 6,067.60.

First clip released of Obama on Letterman's new Netflix show First clip released of Obama on Letterman's new Netflix show Says Obama, " Prince asks me to come up and dance [and] she pulls me up, which surprises me because she mocks my dancing". Friday's launch of "My First Guest" is the first of six monthly Letterman interview Netflix specials this year.

Millions in gems stolen in gun raid at Paris Ritz hotel Millions in gems stolen in gun raid at Paris Ritz hotel Mohammed al Fayed bought the hotel in 1979 and carried out major renovations to bring it back to its original popularity. French police said five thieves, some of them armed, entered the luxury hotel and stole goods worth "an important sum".