German security researchers say WhatsApp group chats not secure

German security researchers say WhatsApp group chats not secure

The only people who can get access to WhatsApp servers are staff and governments if they are taking some legal actions.

Now, a group of German cryptographers from Ruhr University shared its findings during the Real World Crypto security conference, which was held in Switzerland.

A security researcher at Signal, which licenses its rules of conduct to WhatsApp, said that the current design of he app is fair and that the report only sends a message to other people not to "build security into your products, because that makes you a target for researchers, even if you make the right decisions".

Currently, in order to remove an administrator, his fellow his needed to remove him from the group before adding him back as a regular member.

Here's how the researchers explained the bug on WhatsApp. Entering the group, however, leaves traces, since this operation is listed in the graphical user interface.

"If someone hacks the WhatsApp server, they can obviously alter the group membership".

WhatsApp

"Additionally the WhatsApp server can forward these messages to the members individually such that a subtly chosen combination of messages can help it to cover the traces".

But Facebook-owned WhatsApp says the problem isn't as bad as the researchers are making out.

In a statement to IANS on Thursday, a WhatsApp spokesperson said: "We've looked at this issue carefully". Accordingly, the server can just add a new member to an existing group without any interaction from the administrator.

Researchers reported an alleged security flaw for WhatsApp that supposedly violates privacy. "And if not, the value of encryption is very little", further added Paul Rosler. "Read the Wired article today about WhatsApp - scary headline!"

Researchers found in November that deleted messages were actually still on the device, and could easily be accessed through the app's Settings. "If I hear there's end-to-end encryption for both groups and two-party communications, the means adding of new members should be protected against". Once an attacker with server control accessed the conversation, he or she could also use it to selectively block any messages in the group, including those that ask questions, or provide warnings about the new entrant. If the administrator is watching closely, he or she could warn the group's intended members about the interloper and the spoofed invitation message. "For example, it would be interesting to analyze the group chat implementations of other Signal-based messaging protocols, such as Google's Allo, Wire, and Facebook Messenger, or even non Signal-based protocols similarly to our investigation of Threema".

Treasury releases withholding tables for new tax law
However, the situation has changed in recent times, with Swiss authorities showing greater willingness to cooperate with the IRS. For 2019, the IRS anticipates making further changes involving withholding. "We are very focused on cryptocurrencies", he said.

Related News:



Most liked

SpaceX scheduled to test fire Falcon Heavy rocket Thursday
SpaceX president and chief operating officer Gwynne Shotwell weighed in on the mystery in a statement emailed to Gizmodo. However, SpaceX made a decision to delay the launch to deal with some issues regarding the payload fairing (nose cone).

Canada Goes Toe-to-Toe With US Trade Policy
Put another way, Canada may be taking on the United States on behalf of the rest of the world, whether by default or construction. To view the full article, register now.

'Temperatures are forecast to fall rapidly': Icy conditions prompt special weather statement
Travellers were advised to be prepared for slippery driving conditions and to adjust travel plans appropriately. Snowfall amounts of 10 cm are likely for areas close to lake Superior with only a few cm of snow in other areas.

Coastal States Protest Trump's Offshore Drilling Plan
The decision to exclude Florida also has prompted other coastal states to ask the Trump administration for equal treatment. The Trump administration will take public comment on its proposals from January 16 through March 9.

Le'Veon Bell says he would sit out over franchise tag
Teams can tag a player between February 20 and March 6, after which they would have until July 16 to work out a long-term deal. Bell has wanted a massive contract, citing the desire to help all running backs in an era that has devalued the position.

More Than 200 People were Arrested in Clashes in Tunisia
The Ennahda party has called on the government to raise the minimum monthly wage of $143.17 and better provide for poor families. Properties were damaged, he said, including a branch of the Carrefour supermarket chain in a suburb of Tunis that was looted.

Nervous Trump Hints He Might Refuse To Meet With Mueller
Putin directed a multifaceted campaign using hacking and propaganda to try to sway the 2016 presidential election against Mr. Later that year, however, Flynn pleaded guilty and said he would cooperate with Mueller.

Israel approves more than 1100 new West Bank settlement homes, says NGO
For Palestinians, such payments are a key source of income for families who have in many cases lost their main breadwinner. Overall, the PA's payments to terrorists and their families now total about $300 million annually.

Ecuador fears for Assange, adopts him
Assange later taunted after Lasso's loss that he would "cordially invite Lasso to leave Ecuador within 30 days". What could happen to Julian Assange now? Two allegations - rape and molestation - are made against him.

Trump says interview with Russian Federation investigator 'unlikely'
At a press conference in the summer, Trump said he was "100%" willing to testify under oath about his conversations with James B. The special counsel's team of investigators has expressed interest in speaking with Trump, but no details have been worked out.

Astros acquire pitcher Gerrit Cole from Pirates
This trade increases Cole's upside in the wins department, but the move to the American League may offset those potential gains. As for the Pirates , a full rebuild could soon follow with stars Andrew McCutchen and Josh Harrison up next on the trade block.

Greta Gerwig Says She Regrets Working With Woody Allen
Farrow has since responded to Gerwig's statements, saying that her words "are deeply felt and appreciated". Gerwig has set the record straight regarding her past and future working relationship with Woody Allen .

Patricia to Giants? "All Signs" Point to 'Yes'
King said if the Giants decide to hire him, it could give Houston Texans Defensive Coordinator Mike Vrabel the Lions' gig. In 2005, he became assistant offensive line coach before he moved to coaching linebackers from 2006 to 2010.

Republican Rep. Darrell Issa Announces Retirement from Congress
Issa was first elected to the House in 2000, and served as chairman of the House Oversight Committee from 2011 to 2015. Issa is a longtime nemesis of the Democrats and then-President Barack Obama.

Arsenal exodus begins as La Liga side agree deal for Coquelin
The Frenchman has been at Arsenal since joining from Stade Lavallois as a 17-year-old in July 2008 following a successful trial. Instead of looking at others, those two guys that you should have signed up a long time ago are not secured yet'.