Technology
WhatsApp fixed a lethal security flaw that would crash the app
Imagine the app that is your communication lifeline unexpectedly and repeatedly dying.
The research arm of Check Point Security announced Tuesday that it found a WhatsApp vulnerability that could have caused frustrating and potentially disastrous functionality for users. The firm alerted WhatsApp to the problem in August, and it is now fixed.
Using group chat, Check Point was able to create an exploit that would repeatedly crash the app. WhatsApp wouldn’t work again until the app was uninstalled, reinstalled, and the offending group chat was deleted. Here’s a video demo of how it works.
To most users, the bug might sound like just a frustrating experience. But the researchers pointed out to Fast Company that for users like activists or dissidents, it could be especially harmful: The bug has the potential to interrupt communication, and would require deletion of chat logs, multimedia, and contacts in group chats. That scenario is a real possibility, considering WhatsApp is a favored communication tool, especially internationally, since it has end-to-end encryption.
WhatsApp recently made changes to group chats to make them more secure and less susceptible to being a channel for spreading false and dangerous information. Before April of this year, anyone could add you to a group chat. Now, if you enable the setting, anyone can “invite” you to join a chat — but you have to accept or deny the invitation. Still, if you don’t have your privacy specifically set to disallow group adding, anyone can simply add you to a group; groups can contain up to 256 people.
WhatsApp has been the target of vulnerability exploits before. This spring, attackers started manipulating WhatsApp to totally take control over users’ phones using Pegasus spyware. And in 2018, Check Point discovered that it could manipulate the sender names and text of forwarded messages, which enabled the spread of fake news.
Facebook-owned WhatsApp has been taking action itself to combat fake news on WhatsApp by restricting the forwarding functionality. Despite fixes meant to make WhatsApp a tool for non-malicious communication, the work of these researchers show that the “secure” messaging platform is far from air tight.
Humanoid robots are learning to fall well
London’s first defense tech hackathon brings Ukraine war closer to the city’s startups
Mark Zuckerberg has found a new sense of style. Why?
TikTok faces a ban in the US, Tesla profits drop and healthcare data leaks
What’s on the far side of the moon? Not darkness.
NASA’s Voyager is in hostile territory. It’s ‘dodging bullets.’
How to watch ‘The Idea of You’: Release date, streaming deals
How Rubrik’s IPO paid off big for Greylock VC Asheem Chandna
Photo-sharing community EyeEm will license users’ photos to train AI if they don’t delete them
Thoma Bravo to take UK cybersecurity company Darktrace private in $5B deal
API startup Noname Security nears $500M deal to sell itself to Akamai
NASA discovered bacteria that wouldn’t die. Now it’s boosting sunscreen.
US think tank Heritage Foundation hit by cyberattack
How to watch ‘Argylle’: When and where is it streaming?
Tesla drops prices, Meta confirms Llama 3 release, and Apple allows emulators in the App Store
Tesla layoffs hit high performers, some departments slashed, sources say
Meta to close Threads in Turkey to comply with injunction prohibiting data-sharing with Instagram
TechCrunch Mobility: Cruise robotaxis return and Ford’s BlueCruise comes under scrutiny
Former top SpaceX exec Tom Ochinero sets up new VC firm, filings reveal
Consumer Financial Protection Bureau fines BloomTech for false claims
Humanoid robots are learning to fall well
London’s first defense tech hackathon brings Ukraine war closer to the city’s startups
Mark Zuckerberg has found a new sense of style. Why?
TikTok faces a ban in the US, Tesla profits drop and healthcare data leaks
What’s on the far side of the moon? Not darkness.
NASA’s Voyager is in hostile territory. It’s ‘dodging bullets.’
How to watch ‘The Idea of You’: Release date, streaming deals
How Rubrik’s IPO paid off big for Greylock VC Asheem Chandna
Photo-sharing community EyeEm will license users’ photos to train AI if they don’t delete them
Thoma Bravo to take UK cybersecurity company Darktrace private in $5B deal
-
Business6 days agoUnitedHealth says Change hackers stole health data on ‘substantial proportion of people in America’
-
Business5 days agoTesla’s new growth plan is centered around mysterious cheaper models
-
Business7 days agoMood.camera is an iOS app that feels like using a retro analog camera
-
Business4 days agoXaira, an AI drug discovery startup, launches with a massive $1B, says it’s ‘ready’ to start developing drugs
-
Business5 days agoUK probes Amazon and Microsoft over AI partnerships with Mistral, Anthropic, and Inflection
-
Entertainment7 days agoFurious Watcher fans are blasting it as ‘greedy’ over paid subscription service
-
Business6 days agoTwo widow founders launch DayNew, a social platform for people dealing with grief and trauma
-
Entertainment5 days agoTesla’s in trouble. Is Elon Musk the problem?
