Hackers can figure out when you go to sleep via a WhatsApp flaw

By Christian de Looper Published October 10, 2017

WhatsApp is a great way to connect with your friends and family around the world, but it turns out it may also be a great way for a hacker or stalker to keep tabs on when two people are communicating. That’s thanks to a new flaw discovered in the app by software engineer Rob Heaton, who was able to exploit the flaw by creating a Chrome extension with a minimal four lines of code.

The flaw came about because of the fact that as part of WhatsApp, your “online” status — whether you’re online or not — can be checked by any of your contacts. What that means is that when you go offline and then come back online to read a message, that action is being logged. Those online and offline actions from both participants in the conversation can then be correlated to identify when two people are messaging each other.

Recommended Videos

The code could even be tweaked to correlate more than two people messaging each other, and while that would require a little more code, the principle remains the same. Using the data collected, Heaton was even able to identify when users were going to sleep by seeing their first and last “online” statuses for the day.

Unfortunately, there’s really nothing you can do to prevent hackers from being able to spy on you in this manner. Using WhatsApp, you can set the app to show your “last seen” statuses to either everyone, only contacts, or no one, but no such feature exists for your online status, leaving things somewhat open.

Heaton went on to note that it would be pretty easy for this information to be collected on a mass scale, then sold to companies for the purpose of advertising. For example, people with strange sleeping patterns might be good candidates for sleeping pill advertisements.

While this is certainly a privacy issue, it’s not clear if WhatsApp will ever make a fix. The online status feature has been a part of WhatsApp since its inception, and the company may not want to change it. Still, it would be pretty easy to allow users to choose who sees their online status, as they can with their “last seen” status.

Christian de Looper

Former Digital Trends Contributor

Christian de Looper is a long-time freelance writer who has covered every facet of the consumer tech and electric vehicle…

Topics

Phones

This new technology could make spotting fake products easier for everyone

Your smartphone could soon tell you if the product you bought is fake

The new system combines three technologies into a single printable label.

Counterfeit goods are becoming increasingly sophisticated, forcing brands to rely on expensive authentication systems that often require specialized scanners or proprietary hardware. Researchers now believe a smartphone could do much of that work instead. A team has developed a new printing system that creates responsive anti-counterfeit labels that are more durable, easier to mass-produce, and can be verified using nothing more than a phone. The research was published in the International Journal of Materials and Product Technology.

At first glance, the technology looks like another incremental improvement in product security. In reality, it addresses one of the biggest limitations of anti-counterfeit systems today: accessibility. If authentication only works with expensive equipment, it becomes difficult to deploy at scale. By enabling smartphone-based verification, the technology could make counterfeit detection practical for manufacturers, retailers, and even consumers.

Phones

Apple’s iPhone Air could serve as the blueprint for its 20th anniversary iPhone

Fresh leaks suggest Apple's 20th anniversary iPhone will combine an Air-inspired frame.

iPhone Air Featured

The iPhone Air is often dismissed as an experiment that didn’t achieve the same success as Apple’s other products.

However, a fresh leak suggests Apple may view the slim iPhone differently, treating its design language as something that could eventually make its way into the mainstream lineup.

Phones

Sunbird relaunches its iMessage app for Android, three years after a privacy scandal shut it down

Sunbird returns to Android with fixed encryption and an AI assistant on the way.

sunbird-imessage-app-relaunch-2026

Sunbird's blue bubble dream for Android users is making another attempt, and this time the company insists it's actually earned your trust. Sunbird Messaging, the app that lets Android users join iMessage conversations without the green bubble stigma, is now available on the Google Play Store after sitting dormant since 2023.

Back then, security researchers discovered the app was sending Apple ID credentials over unencrypted connections and quietly logging user messages through a debugging tool, despite Sunbird's public claims of full end-to-end encryption. The fallout forced both Sunbird and its Nothing Phone partnership to shut down almost overnight.