Kebawah DYMM Raja Isteri Berkenan Berangkat Ke Majlis Berbedak           >>           Kerja Ada Kaitannya Dengan Hari Akhirat           >>           UPPA Terus Barigakan Khidmat Bantu Solat Pesakit           >>           Jepun Tinjau Peluang Kerjasama Bidang Pendidikan           >>           Mesyuarat Ad-Hoc Bincangkan Perkembangan ADI           >>           Two Men Arrested At Liverpool-Roma Match For Suspicion Of Attempted Murder           >>           Roma 'Made It Easy' For Liverpool To Build Lead - Eusebio Di Francesco           >>           Promoting I-Bantu Solat           >>           Meek Mill Released From Prison, Attends Sixers Game Vs. Heat           >>           Sources: WR Prospect Antonio Callaway Tested Positive For Marijuana At Combine           >>          














+673 222-0178 [Office Hour]

+673 223-6740 [Fax]


Upcoming Events

Prayer Times

The prayer times for Brunei-Muara and Temburong districts. For Tutong add 1 minute and for Belait add 3 minutes.


: 04:41AM


: 04:51AM


: 06:10AM


: 06:33AM


: 12:19PM


: 03:34PM


: 06:26PM


: 07:37PM


The Business Directory



Security & Privacy

  Home > Security & Privacy

Whatsapp Servers Can Be Compromised To Add People To Private Groups

Dado Ruvic / Reuters


 January 11th, 2018  |  10:20 AM  |   1231 views



It's a narrow flaw, but a significant one.


Messaging service Whatsapp made headlines in 2016 when it introduced end-to-end encryption to every message sent through the service, whether text, photo or video. Clearly security is a priority for the company. That's why it's so surprising that researchers have discovered a significant security flaw: Anyone in control of a Whatsapp server can add people to a private group with minimal effort, as reported by Wired.


The findings will be presented Wednesday at the Real World Crypto conference in Zurich. A group of researchers from Ruhr University probed multiple messaging apps for security flaws. They didn't have any major findings with Signal and Threema. Whatsapp was a different story, which you can read in the paper they published on the topic.


"The confidentiality of the group is broken as soon as the uninvited member can obtain all the new messages and read them," Paul Rösler, one of the paper's coauthors, told Wired. End-to-end security protection doesn't mean nearly as much when someone at the company can simply drop a new person into a private chat anytime they want. While usually, the administrator of a group is the only one who can invite a new person to a private chat, there isn't a mechanism currently in place to authenticate that invitation. Once a person is invited, old messages will remain encrypted, but new ones will be available to the new member.


Now, it's important to note the limits of this security flaw: Whoever was exploiting it would have to be in control of the messaging app's servers. But if a server is indeed compromised, it's not good news. WhatsApp noted to Wired that a notification would go out to all members if someone new were added to a group, so it's not possible to add someone to a private chat and keep it a secret, but the fact that the possibility exists isn't great in terms of security.



courtesy of ENGADGET

by Swapna Krishna


If you have any stories or news that you would like to share with the global online community, please feel free to share it with us by contacting us directly at pr@brudirect.com


Related News

Man Slashed To Death, Boy Seriously Injured In Lahad Datu

 2018-04-25 09:58:00

#Metoo Japan: What Happened When Women Broke Their Silence

 2018-04-25 09:20:49

The $7 Trillion Debt Pile Looming Large Over Chinese Households

 2018-04-25 09:54:35