FacebookInstagramTwitterContact

 

Kebawah DYMM Raja Isteri Berkenan Berangkat Ke Majlis Berbedak           >>           Kerja Ada Kaitannya Dengan Hari Akhirat           >>           UPPA Terus Barigakan Khidmat Bantu Solat Pesakit           >>           Jepun Tinjau Peluang Kerjasama Bidang Pendidikan           >>           Mesyuarat Ad-Hoc Bincangkan Perkembangan ADI           >>           Two Men Arrested At Liverpool-Roma Match For Suspicion Of Attempted Murder           >>           Roma 'Made It Easy' For Liverpool To Build Lead - Eusebio Di Francesco           >>           Promoting I-Bantu Solat           >>           Meek Mill Released From Prison, Attends Sixers Game Vs. Heat           >>           Sources: WR Prospect Antonio Callaway Tested Positive For Marijuana At Combine           >>          

 

SHARE THIS ARTICLE




REACH US


GENERAL INQUIRY

admin@brudirect.com

 

ADVERTISING

marketing@brudirect.com

 

PRESS RELEASE

pr@brudirect.com

 

HOTLINE

+673 222-0178 [Office Hour]

+673 223-6740 [Fax]

 



Upcoming Events





Prayer Times


The prayer times for Brunei-Muara and Temburong districts. For Tutong add 1 minute and for Belait add 3 minutes.


Imsak

: 04:41AM

Subuh

: 04:51AM

Syuruk

: 06:10AM

Doha

: 06:33AM

Zohor

: 12:19PM

Asar

: 03:34PM

Maghrib

: 06:26PM

Isyak

: 07:37PM

 



The Business Directory


 

 



Security & Privacy


  Home > Security & Privacy


Whatsapp Servers Can Be Compromised To Add People To Private Groups


Dado Ruvic / Reuters

 


 January 11th, 2018  |  10:20 AM  |   1231 views

ENGADGET.COM

 

It's a narrow flaw, but a significant one.

 

Messaging service Whatsapp made headlines in 2016 when it introduced end-to-end encryption to every message sent through the service, whether text, photo or video. Clearly security is a priority for the company. That's why it's so surprising that researchers have discovered a significant security flaw: Anyone in control of a Whatsapp server can add people to a private group with minimal effort, as reported by Wired.

 

The findings will be presented Wednesday at the Real World Crypto conference in Zurich. A group of researchers from Ruhr University probed multiple messaging apps for security flaws. They didn't have any major findings with Signal and Threema. Whatsapp was a different story, which you can read in the paper they published on the topic.

 

"The confidentiality of the group is broken as soon as the uninvited member can obtain all the new messages and read them," Paul Rösler, one of the paper's coauthors, told Wired. End-to-end security protection doesn't mean nearly as much when someone at the company can simply drop a new person into a private chat anytime they want. While usually, the administrator of a group is the only one who can invite a new person to a private chat, there isn't a mechanism currently in place to authenticate that invitation. Once a person is invited, old messages will remain encrypted, but new ones will be available to the new member.

 

Now, it's important to note the limits of this security flaw: Whoever was exploiting it would have to be in control of the messaging app's servers. But if a server is indeed compromised, it's not good news. WhatsApp noted to Wired that a notification would go out to all members if someone new were added to a group, so it's not possible to add someone to a private chat and keep it a secret, but the fact that the possibility exists isn't great in terms of security.

 


 

Source:
courtesy of ENGADGET

by Swapna Krishna

 

If you have any stories or news that you would like to share with the global online community, please feel free to share it with us by contacting us directly at pr@brudirect.com

 

Related News


Man Slashed To Death, Boy Seriously Injured In Lahad Datu

 2018-04-25 09:58:00

#Metoo Japan: What Happened When Women Broke Their Silence

 2018-04-25 09:20:49

The $7 Trillion Debt Pile Looming Large Over Chinese Households

 2018-04-25 09:54:35