WhatsApp group chats can be infiltrated without admin permission

12 January, 2018, 03:29 | Author: Shannon Newton
  • German researchers said that anyone who controls the app's servers could insert new people into private group chats without needing admin permission

The team of cryptographers at Ruhr University in Bochum, Germany, found a set of security weaknesses in the messaging app that together allow anyone controlling the WhatsApp server to insert other parties into a private group thread without getting permission from the administrator who controls the group.

Here's how WhatsApp group messaging works: membership is maintained by the server. The big draw to the app for many is that it has an encrypted group chat feature, so you don't need to worry that someone is listening in on what you are saying.

In response to the study, Facebook, which owns WhatsApp, has said it won't fix the problem, and that group chats "remain protected" by the app's encryption. "It's why we collect very little information and all messages sent on WhatsApp are end-to-end encrypted", the spokesperson added.

Late Night Hosts Mock Trump for Botching National Anthem
Donald Trump during the national anthem at the College Football Playoff National Championship in Atlanta on January 8, 2018. The president, flanked by military members, stood near the 40-yard line with his hand on his heart as the anthem played.

According to the researchers, in a pairwise communication, where only two users communicate with each other, the server has a limited role to pay, but in a group conversation, the role of servers increases to merge the entire process and it is here where the problem of vulnerability kicks in.

The WhatsApp attack on group chats takes advantage of a bug.

"If someone hacks the WhatsApp server, they can obviously alter the group membership".

New York Assemblywoman Indicted On 11 Counts of Fraud, Witness Tampering
Between July 2015 and January 2017, Harris committed a almost identical scheme-but this time as a sitting Assemblywoman. Her lawyer, Joel Cohen, declined to comment prior to her arraignment, which was expected to occur within hours.

"While our investigation focuses on three major instant messaging applications, our methodology and the underlying model is of generic objective and can be applied to other secure group instant messaging protocols as well", researchers concluded in the paper. The research claims that anyone who controls the server can add any uninvited member in any private chat without the permission of the group admin. As a result, any potential flaw that impacts WhatsApp's privacy is cause for concern. Only the administrator of a WhatsApp group can invite new members, but WhatsApp doesn't use any authentication mechanism for that invitation that its own servers can't spoof. "Existing members are notified when new people are added to a WhatsApp group".

In response to the study, which was first reported by Wired, Facebook's Chief Security Officer Alex Stamos wrote on Twitter: 'Read the Wired article today about WhatsApp - scary headline! In such a case, it is impossible for them to share details with enforcement agencies that they themselves can not access. "There is no way to suppress this message".

The idea behind encryption is to muddle your messages so only you and the recipient can read texts you send.

Abbeville Police Department issues statement after teacher arrest
It was then that the skirmished happened, in what appeared to be a hallway, while the cameras rolled. I don't care if the performance targets are met - you're making our jobs even more hard .

"In contrast, Telegram does no encryption at all for group messages, even though it advertises itself as an encrypted messenger, and even though Telegram users think that group chats are somehow secure. It could even prevent any administrator's attempt to remove the eavesdropper from the group if discovered", Rösler said.

Recommended:

  • New Sony Phones Arrive In The US With Active Fingerprint Sensors

    New Sony Phones Arrive In The US With Active Fingerprint Sensors

    Quick charging is also supported to give you hours of power with just minutes of charging (requires Quick Charger UCH12W). The Xperia XA2 and XA2 Ultra have very similar features but there are some big differences between the devices.
    The alligator's awesome  ability to survive freezing temperatures

    The alligator's awesome ability to survive freezing temperatures

    Since they're cold-blooded, they rely on the sun to warm them up which increases their body temperature. North Carolina is the furthest north the alligator species would travel.
    Virat Kohli defends Rohit Sharma's selection, says current form was the reason

    Virat Kohli defends Rohit Sharma's selection, says current form was the reason

    The versatile actress Anushka Sharma recently tied to knot to Indian skipper Virat Kohli in a hush-hush ceremony in Italy. Those who are trolling Anushka over this have no idea maybe that a year ago Virat hit centuries after centuries.
  • Panthers fire O-coordinator Mike Shula, QBs coach Ken Dorsey

    Panthers fire O-coordinator Mike Shula, QBs coach Ken Dorsey

    CHARLOTTE, N.C. - Carolina Panthers quarterback Cam Newton will have a new offensive coordinator and position coach in 2018. The news comes one day after coach Ron Rivera had seemed to give his entire coaching staff an endorsement.
    WIU Earns USNews & World Report Best Online Program Ranking

    WIU Earns USNews & World Report Best Online Program Ranking

    News' Best Online MBA Program rankings, once again achieving the highest ranking of any online MBA program in Mississippi. The MSU College of Business' Distance MBA program remains one of the best in the country at No. 22 in U.S.
    All-electric concept vehicle to debut at CES 2018

    All-electric concept vehicle to debut at CES 2018

    A 150 kW (201 hp) receives energy from a 64 kWh lithium-polymer battery pack, which has a claimed driving range of 383 km. Kia hasn't given any specific timeline on when the Niro EV will go into production, but we expect a late 2018 arrival.
  • Bafta Film Awards 2018: who missed out on a nomination?

    Bafta Film Awards 2018: who missed out on a nomination?

    The Shape of Water received 12 nominations on Tuesday, the most of any film, including the coveted best film award. Sam Rockwell and Woody Harrelson both received nominations for supporting actor .
    Gas prices steady, poised for seasonal decline

    Gas prices steady, poised for seasonal decline

    West Texas Intermediate crude settled at a four-year high above $62 a barrel last week as global supply levels tightened. AAA Northeast said gas prices are up two cents in Rhode Island and up five cents in MA .
    Packers officially announce Brian Gutekunst as new GM

    Packers officially announce Brian Gutekunst as new GM

    Green Bay also lost offensive coordinator Edgar Bennett, quarterbacks coach Alex Van Pelt and receivers coach Luke Getsy. Gutekunst has been with the organization for almost two decades after being hired in 1998 by Hall of Famer Ron Wolf.
  • Lewandowski slams 'deep state' regulators for rejecting Perry coal plan

    Lewandowski slams 'deep state' regulators for rejecting Perry coal plan

    Murray dismissed the research, claiming that Rhodium Group is "certainly biased" and "shills for the renewable energy industry". He said the FERC order to seek more information about resilience was "only the first step" rather than a final one.
    Lenovo Mirage Solo with Daydream VR headset launched at CES 2018

    Lenovo Mirage Solo with Daydream VR headset launched at CES 2018

    Outside of that it appears as though the standalone and phone-based versions of Daydream VR will run the same software. The field of view isn't as wide as something like the PIMAX VR headset , but it's pretty respectable for Daydream.
    DJ cruises to Sentry Tournament of Champions title

    DJ cruises to Sentry Tournament of Champions title

    First I want to get to 20, then 30 and once there 40", he added. "And there were times when I putted well but couldn't sink them". Of that drive at the 12th he said:"I could see it until it landed, and I knew that it was on a good line.


Popular

How Seth Meyers Made Lemonade Out of Lemons at the Golden Globes
Said one source, "There's a rumor that the Hollywood Foreign Press Association is having Harvey come to apologize". Billy Eichner then cracked that Kevin Spacey said, "You lost me when you said 'of age'".

MLB Trade Rumors: Astros deal for Gerrit Cole is imminent
They already have five capable starters in Luis Severino, Masahiro Tanaka, Sonny Gray, CC Sabathia and Jordan Montgomery. He finished with a 2.60 ERA, 1.09 WHIP and 202 strikeouts in 32 starts and 208 innings, all of which were career bests.

Egypt Slams NYT Report About Jerusalem Position
The White House said Pence will address the need to combat terrorism and help persecuted religious minorities. Before Trump's announcement, Abbas was scheduled to meet with Pence in the biblical town of Bethlehem.

Arsenal and Liverpool get a major transfer boost for Ligue 1 star
The 22-year-old drilled into the roof of the net 10 minutes later, only to be denied a second goal by the linesman's flag for offside.

Prince Harry and Meghan Markle visit south London
Markle is grateful to everyone who has followed her social media accounts over the years", a royal source told ABC News. Markle, a Los Angeles native, also intends to become a United Kingdom citizen, a process which will take several years.

Israel announces travel ban on pro-Palestinian boycott advocates
According to reports past year , Hugh Lanning of PSC became the first British citizen to be refused entry to Israel under the law. One of the groups on the list whose leaders will be banned from entering Israel is the US-based Jewish Voice for Peace .

Two clubs make contact with West Brom over Jonny Evans transfer
Coquelin has had to make do with a role in the Gunners' second-string squad this season. As long as we don't have any agreement with anybody, I believe the best is not to talk.

HTC's Vive Pro makes your virtual world a whole lot clearer
The native VR video player Vive Video is now pulling in content from one of the world's largest ad-free open video platforms. There's no word on when the wireless adapter is going to be available, or how much it will cost.

South Korea, US suspend military exercises until after Winter Olympics
Chun Hae-sung is regarded as an expert at negotiating with North Korea, a policy expert who has occupied key positions in the Unification Ministry.

Lawsuit Alleges Google Managers Booed White Men at Company Meetings
Many companies in the tech world including Facebook , Tesla , Uber and Google have come under fire for discrimination and sexual harassment.