Hackers may be able to access private WhatsApp conversations

whatsapp
WhatsApp
Private conversations beware! Despite end-to-end encryption now being commonplace in WhatApp conversations, German cryptographers have discovered a minor flaw in WhatsApp’s security that could lead to private conversations being gatecrashed by uninvited hackers, bypassing the usual chat admin invitations.

In their paper, More is Less: On the End-to-End Security of Group Chats in Signal, WhatsApp, and Threema, presented to other enthusiasts at the Real World Crypto Symposium in Zurich, Switzerland, the team warned that WhatsApp has no security measures to stop invitations being spoofed from their own servers, leaving a hole that could leave millions of conversations at risk of being snooped on.

But it’s not all bad news. Essentially, the hacker would need to be in control of WhatsApp’s main chat servers — a fairly tall order — and only then would they be able to bypass the group’s administrator and insert users into any conversation. However, anyone who did manage to achieve this would then have near limitless power within the chat, being able to selectively block message visibility from accounts, and even block users from participating in the chat.

However, Facebook-owned WhatsApp doesn’t seem to be too worried about the potential hole in its security. A WhatsApp spokesperson (speaking to Wired) admitted that the flaw was real, but pointed out that there was no way that the added user could be hidden and receive messages from the group. WhatsApp has built-in security measures that stop hidden users from being able to participate in group chats, and anyone who wanted to snoop on a particular chat would find their cover quickly blown when the client announced their arrival to everyone in the chat, making it an inefficient way to spy on users. What’s more, disabling the flaw would likely break the “Group Invite Link” feature that many group chats enjoy — implying that the security issue likely stems from this particular feature.

However, Matthew Green of Johns Hopkins University called WhatsApp’s response “dumb,, likening it to leaving a bank’s vault open and relying on a single security camera to deter criminals. If any really sensitive information was stored in that group chat, then the hacker would have access to it, making WhatsApp’s lauded encryption useless.

WhatsApp has been in the news multiple times for reasons of security. After making all messages sent on its platform fully encrypted in 2016, the chat company has faced criticism from U.K. lawmakers, while action taken by Brazil was of a more serious nature.

Computing

Nvidia’s flagship RTX 2080 Ti graphics cards are failing. Or are they?

Nvidia's RTX 2080 Ti Founders Edition may be the main cause for the worst problems associated with the new-generation high-end cards. All evidence suggests that partner cards aren't experiencing any common issues.
Smart Home

Brew it fast, hot, and flavorful with our favorite coffee makers

Whether you're looking for a simple coffee maker to get you through the morning or a high-end brewer that will impress your taste buds and your friends, you'll find some of the best coffee makers around on this list.
Computing

Our favorite Windows apps will help you get the most out of your new PC

Not sure what apps you should be downloading for your newfangled Windows device? Here are the best Windows apps, whether you need something to speed up your machine or access your Netflix queue. Check out our categories and favorite picks.
Computing

Want to set up your own virtual private network? Here's how

Take a look at our walkthrough for creating a virtual private network and why it is beneficial for more than just increased privacy and security. We go step by step, detailing how to set up a VPN in both MacOS and in Windows 10.
Photography

Golf ball-sized Lume Cube Air is a pocketable LED for photos and video

Off-camera lighting for smartphones and GoPros just got even smaller. Meet the Lume Cube Air, a smaller portable LED light designed for photos and videos that weighs only about two ounces.
Mobile

Best Google Pixel 3 XL screen protectors

It's tough to find good screen protectors, but the 6.3-inch OLED screen in the Google Pixel 3 XL definitely demands to be protected from scratches and impact damage. We've picked out the best options and included insight into the downsides.
Mobile

Taking shots in the dark with Night Sight, the Pixel’s newest photo feature

The Google Pixel range has always been the home of some of the mobile world's best phone cameras. That performance is now getting even better with the introduction of the low-light Night Sight mode.
Mobile

Pocket Casts adds more cross-sync, curation, and Siri Shortcuts

Pocket Casts is a pocket staple for many podcast fanatics. But it's about to get even better with the introduction Pocket Casts 7.0 that adds intelligent curation, Siri Shortcuts support, and a streamlined UI.
Product Review

Mediocre battery and a big notch slight Google's otherwise perfect Pixel phone

Google’s Pixel 3 XL has two big flaws: The gigantic notch on the front, and mediocre battery life. That being said, this is the best Android experience you can find in a smartphone today.
Mobile

Upcoming Galaxy S10 may support 8K video and have Neural Processing Unit

While we still may be months away from an announcement, there's no doubt about it: Samsung is working hard on its successor to the Galaxy S9. Here's everything we know about the upcoming Samsung Galaxy S10.
Music

Here's our head-to-head comparison of Pandora and Spotify

Which music streaming platform is best for you? We pit Spotify versus Pandora, two mighty streaming services with on-demand music and massive catalogs, comparing every facet of the two services to help you decide which is best.
Mobile

Netflix is testing a cheap mobile-only subscription tier in some markets

Netflix is trying to reach potential subscribers in emerging markets. To that end, the company has begun rolling out a cheaper, mobile-only subscription tier, which comes at around $4 per month -- half the price of the Basic subscription…
Mobile

Samsung will reportedly announce its folding smartphone at MWC in February

Samsung has been showcasing bendable display tech for a few years and now a folding smartphone might finally arrive. The Galaxy X, or perhaps the Galaxy F, may be the company's first example. Here's everything we know about it.
Mobile

Check out 30 of the best iPhone games you need to be playing

The iPhone has some of our favorite games available for any mobile platform. Here are the best iPhone games for every big-name genre, whether you're into puzzles, strategy, or something else entirely.