Saturday, 21 April, 2018

WhatsApp group chats can be infiltrated without admin permission

Creepy hackers could secretly eavesdrop on your private WhatsApp group chats, experts claim WhatsApp 'bug' raises questions over group message privacy
Terence Owen | 11 January, 2018, 15:26

Computer researchers have discovered a set of flaws in WhatsApp that could allow uninvited individulals into private group chats. However, doing so leaves traces as this operation is listed in the graphical user interface and the WhatsApp server can thus use the fact that it can stealthily reorder and drop messages in the group.

The researchers detailed the findings at the Real World Crypto security conference in Zurich on Wednesday, according to Wired.

German cryptographers claim that the flaw makes it easy for anyone to infiltrate private group chat without the permission of the group admin. WhatsApp, however, has turned down the claim.

All WhatsApp conversations are end-to-end encrypted, which means no outside party is allowed to snoop on a chat. WhatsApp incidentally relies on the Signal protocol for its end-to-end encryption.

A WhatsApp backdoor that could allow someone to plant moles into group conversations has been revealed by security researchers, raising questions over the security of users' conversations.

Researchers advise messaging services to address the issue by simply adding an authentication mechanism to ensure that the "signed" group management messages come only from the group administrator. "I think it would be better if the server didn't have metadata visibility into group membership, but that's a largely unsolved problem, and it's unrelated to confidentiality of group messages", he added.

Isaiah Thomas fined for flagrant foul on Andrew Wiggins
Thomas was issued a flagrant 2 and was ejected from the remainder of the game which at that point had already been a blowout. Thomas blamed his performance on rust, claiming that so much time off made it hard to step back in an dominate right away.

They found that anyone with control over WhatsApp's servers can add people to private group chats, including staff, hackers and governments who legally demand access.

The paper is now available online. However, the researchers noted it would be possible for anyone with access to the server to cover their tracks in a number of ways. According to the paper, investigation into "end-to-end protected group communications" has gained only little attention. We built WhatsApp so group messages can not be sent to a hidden user.

A WhatsApp spokesperson said to the Wired that "no one can secretly add a new member to a group and a notification does go through that a new, unknown member has joined the group".

WhatsApp began end-to-end encryption for conversations two years ago.

After an initial story was published by Wired Facebook's chief security officer, Alex Stamos tweeted that it was not possible to access WhatsApp group chats. "An attacker who compromises the Telegram server can, undetected, recover every message that was sent in the past and receive all messages transmitted in the future without anyone receiving any notification at all". However, this potential gap in security should serve as a reminder for businesses and users to keep a close eye on their encryption services and their cryptographic keys, ' he adds.

For additional security, users can easily verify the security code of other group members. This does not mean that the remaining members of the group won't know that a new one has joined.

Recommended

  • Ultra Game Boy handheld console in the works

    Ultra Game Boy handheld console in the works

    Stereo audio is another big feature on the Ultra GB, which was implemented with Chiptune musicians in mind. Nintendo has spent the last couple of years manufacturing miniaturized versions of classic games consoles.
    MLB Agent Jason Wood Under Investigation for Allegedly Filming Clients in Shower

    MLB Agent Jason Wood Under Investigation for Allegedly Filming Clients in Shower

    Benintendi, a former teammate of Tate Matheny in Boston's minor-league system, has spent part of the past two offseasons in St. Some players have already fired CSE and have hired new representation or are looking to do so in the near future.
    Tesla starts Solar Roof production in Buffalo

    Tesla starts Solar Roof production in Buffalo

    They were first presented in October 2016, while the United States company started taking orders at the beginning of May 2017. New York City has invested $750 million to support the construction of the 1.2 million square foot factory in Buffalo.
  • City seeks billions in damages from largest fossil fuel companies

    City seeks billions in damages from largest fossil fuel companies

    Philanthropies have included the Wallace Global Fund and the Rockefeller Brothers Fund, notable because the late John D. The New York City (NYC) has announced its plan to divest pension funds of $5bn from fossil fuels reserve owners.
    Latest Rumours on Lucas Moura, Paulo Dybala

    Latest Rumours on Lucas Moura, Paulo Dybala

    However, the arrival of Neymar and Kylian Mbappe has reshaped the Parisians' attack, and Moura has been left out in the cold. A Paris Saint-Germain star has reportedly agreed to join Manchester United in this transfer window.
    James Damore Sues Google on Behalf of White Men

    James Damore Sues Google on Behalf of White Men

    Now, Damore is suing Google for what he alleges is the company's discrimination against white male conservatives. Dhillon said she expects dozens of other conservative Google staffers to join the class-action suit.
  • Ford Faces Class-Action Lawsuit For F-Series Super Duty Diesel Emissions

    Ford Faces Class-Action Lawsuit For F-Series Super Duty Diesel Emissions

    The Stuttgart, Germany-based supplier has denied any wrongdoing in those suits. Hagens Berman is no stranger to pursuing automakers over diesel emissions.
    Display Fingerprint Scanner In Vivo Phone Is Magical

    Display Fingerprint Scanner In Vivo Phone Is Magical

    The 6-inch phone doesn't have an official name yet, although it looks and feels very much like a near-final smartphone. Vivo's working smartphone is yet to be produced and Synaptics Clear ID sensor has already begun their mass production.
    Mostly Cloudy And Warmer Today, Showers Possible By Tonight

    Mostly Cloudy And Warmer Today, Showers Possible By Tonight

    They warn the timing of the shift in temperatures will be important, "as a freeze is possible immediately following heavy rain". Breezy, with a light and variable wind becoming north northwest 11 to 16 miles per hour in the afternoon.
  • Mobile to offer new BOGO deals and savings

    Mobile to offer new BOGO deals and savings

    T-Mobile is pitching the deal as get a free iPhone 8 with the purchase of another eligible iPhone. Even better, there's something for everyone - new AND existing customers.
    At least 50 migrants feared drowned after ships capsized off Libyan coast

    At least 50 migrants feared drowned after ships capsized off Libyan coast

    Photo Migrants were taken to a naval base in Tripoli , Libya , on Tuesday after being rescued by the country's coast guard. Some 21,663 migrants arrived in Spain as of December 28 past year , while 1,067 landed in Cyprus, preliminary figures show.
    Jay Bruce Agrees to Three-Year Deal to Return to Mets

    Jay Bruce Agrees to Three-Year Deal to Return to Mets

    While signing Anthony Swarzak was a big improvement, the Mets still need help in their pen. "I enjoyed my time in NY ", he said. Bruce will be paid $10 million in 2018, and $14.5 million in 2019 and 2020, according to one person familiar with the deal.

Ford Edge ST is Ford's Performance SUV Ford Edge ST is Ford's Performance SUV Ford will also fit the auto standard with AvanceTrac with Roll Stability Control, Curve Control, and 911 Assist. SYNC with AppLinkā„¢, an enhanced voice-recognition communications and entertainment system, is also standard.

Overwatch League-Twitch Deal Worth At Least $90M Overwatch League-Twitch Deal Worth At Least $90M People from all over the globe can now watch the matches between their favorite teams as they unfold from Twitch. That deal is exclusive on joint tech-development and commercialization, not competition coverage.

Rakesh Roshan gives best birthday gift to son Hrithik, announces Krrish 4 Rakesh Roshan gives best birthday gift to son Hrithik, announces Krrish 4 On the occasion of Hrithik Roshan's birthday his father took to twitter and announced the release date of highly waited Krrish 4 . HRFC Odisha, founded by Pranay Kumar Nayak of Khordha, has been celebrating Hrithik's birthday for the last five years.

Discovery Channel Headquarters to Leave Silver Spring Discovery Channel Headquarters to Leave Silver Spring Discovery opened its headquarters in Montgomery County in 2003. "It's a lot of families here that are being upended". Discovery Communications is planning to move its headquarters out of downtown Silver Spring.

New Update From CD Projekt Red and Cyberpunk 2077 New Update From CD Projekt Red and Cyberpunk 2077 The tweet itself doesn't actually have much in the way of new information. "Recently, the Twitter account posted "*beep*". When it was first announced, the developer said that it would feature a single-player story and multiplayer.

Meghan Markle has deleted all of her social media accounts Meghan Markle has deleted all of her social media accounts Meghan is ushering in a new, more relaxed royal protocol (it helps that she's technically marrying the "spare"). Markle curbed her posting the moment news broke that she and Harry were dating in November 2016.

State capture inquiry: Mkhwebane differs with Madonsela on terms of reference State capture inquiry: Mkhwebane differs with Madonsela on terms of reference The party says the president's conduct in delaying the appointment of the commission would have prevailed had it not been of mounting public pressure.

Aussies complete 4-0 series win at SCG Aussies complete 4-0 series win at SCG Australia were dominant in their Ashes win over England , and are now ahead of the Black Caps in the ICC test rankings. Australia captain Steve Smith averaged 137 in the series.

Light rain and much warmer today! Light rain and much warmer today! Temperatures this morning were in the teens (above zero) and this afternoon will be more seasonable with highs into near 30. Any snow will transition to a brief period of sleet and freezing rain and then finally to a cold rain during the afternoon.

Eazy Ends H&M Partnership Following 'Racially Insensitive' Ad Eazy Ends H&M Partnership Following 'Racially Insensitive' Ad Following The Weeknd's announcement that he is ending his partnership with H&M, rapper G-Eazy has also cut ties with the company. Following the wave of backlash from the ad, H&M responded by apologizing, pulling the photo and removing the product from sale.

Pak minor girl raped, murdered; protests break out Pak minor girl raped, murdered; protests break out The 7-year-old girl was staying with her aunt while her parents were in Saudi Arabia to perform the umrah pilgrimage. According to reports , at least 12 children have been sexually assaulted and killed in the past two years in Kasur .

Browns add Packers execs Wolf, Highsmith to front office Browns add Packers execs Wolf, Highsmith to front office The Packers earned 10 trips to the playoffs in Wolf's 14 seasons, seven NFC North division titles and a victory in Super Bowl XLV. He's never worked for any organization outside of Green Bay, though he did have internships with the Atlanta Falcons.

Irish to host giants India in T20 matches Irish to host giants India in T20 matches In the one T20I these two teams have played together, India came out on top, and won the match by eight wickets. Ford added: "The matches will be played in front of a huge audience, both at the games and live on television".

U.S. issues fresh travel advisory to its citizens U.S.  issues fresh travel advisory to its citizens An American UN monitor was found dead in the DRC's Central Kasai region past year along with a Swedish counterpart. Now every country has a travel advisory based on this system, which has replaced all the previous such advisories.

Sevilla To Report Manchester United To UEFA Over Ticket Price Increase Sevilla To Report Manchester United To UEFA Over Ticket Price Increase Sevilla and Manchester United have engaged in a war of words over tickets after the English club hiked up their prices to match what their own fans must pay in Spain .