WhatsApp Flaw Compromises Security Of Encrypted Group Chats

Creepy hackers could secretly eavesdrop on your private WhatsApp group chats, experts claim

German researchers have claimed there is a way to infiltrate WhatsApp's group chats and listen on private messages, despite its end-to-end encryption.

"The confidentiality of the group is broken as soon as the uninvited member can obtain all the new messages and read them", Paul Rosler, one of the Ruhr University researchers, was quoted as saying.

Researchers from Germany's Ruhr University Bochum have unearthed an encryption flaw that makes it possible for group conversations to be compromised.

Reacting to the report, Facebook Chief Security Officer Alex Stamos tweeted: "Read the Wired article about WhatsApp - scary headline! But there is no [sic] a secret way into WhatsApp groups chats", he tweeted.

This is a big problem, because WhatsApp prides itself on end-to-end encryption for its messages.

But, as it turns out, the Signal protocol does not check whether the message was sent by an actual member of the group, meaning that anyone outside the group can send the message and, consequently, add a new user to the group.

The problem sits in WhatsApp's authentication mechanism for adding people to group chats.

Android Pay, Google Wallet, merge into single brand: Google Pay
By the way, you should begin seeing the Google Pay logo pop up at numerous brick and mortar stores in the coming weeks. Lastly, Instacart orders of at least $35 completed with Google Pay by January 16 score $10 markdowns.

A flaw in popular encrypted chat programs WhatsApp, Threema and Signal theoretically allows nearly anyone to control important servers, bypass encryption and add themselves to group chats.

While the exploits in Threema and Signal seemed to be relatively harmless, WhatsApp had far more significant gaps in security.

The design flaws "allows an attacker ... controlling some of the messages sent by the WhatsApp server, to become a member of the group or add other users to the group without any interaction of the other users", according to their research paper released earlier this month.

New additions to the group chat would be notified to all members of the chat just like normal. The application has been designed in such a way that the group messages can not be sent to any hidden user. "The main exception to this is former group members, who already know the group ID - and can now add themselves back to the group with impunity". Additionally, shared messages can be encrypted too. Since the group ID is a random 128-bit number (and is never revealed to non-group-members or even the server) that pretty much blocks the attack.

The objective of having an end-to-end encryption is to stop trusting the intermediate servers in such a way that even the company or the server that transmits the data can decrypt the messages or abuse the centralized position.

A WhatsApp spokesperson said to the Wired that "no one can secretly add a new member to a group and a notification does go through that a new, unknown member has joined the group". "It could even prevent any administrator's attempt to remove the eavesdropper from the group if discovered", Rösler said.

Related News:

  • Intel Announces 802.11ax Chipsets for Faster Wi-Fi

    Intel Announces 802.11ax Chipsets for Faster Wi-Fi

    This helps ensure optimal performance for devices, as well as low latency for applications like gaming, video and voice calls. In addition, the chipset is engineered to deliver enhanced throughput rates for a mix of small and large packet sizes.
    Brooklyn Assemblywoman Indicted on Fraud Charges

    Brooklyn Assemblywoman Indicted on Fraud Charges

    For example, Harris fraudulently applied for FEMA temporary housing assistance after Hurricane Sandy, according to investigators. The 57-year-old spent $10,000 of her ill-gotten gains on vacation getaways, reported the New York Daily News .
    Oil Price Toys With $62 Amid Iranian Friction, US Drilling Pullback

    Oil Price Toys With $62 Amid Iranian Friction, US Drilling Pullback

    United States explorers spent the final six weeks of 2017 in a virtual standstill, adding just as many rigs as they laid off. The price differential (spread) between WTI and Brent crude narrowed by almost a dime to $6.10 a barrel week over week.
  • FERC rejects Perry plan to boost coal, nuclear

    FERC rejects Perry plan to boost coal, nuclear

    He said the FERC order to seek more information about resilience was "only the first step" rather than a final one. As an independent body, FERC isn't required to follow policies suggested by Trump, Perry or the administration.
    Clemson named best online education program by US News

    Clemson named best online education program by US News

    These areas provide opportunities for faculty and students to build upon FAU's existing strengths in research and scholarship. News & World Report rankings compared the academic quality of more than 1,200 U.S. -based distance degree programs.
    HTC announces new Vive Pro VR headset with 3K resolution

    HTC announces new Vive Pro VR headset with 3K resolution

    Featuring Intel's WiGig technology, the unit operates in what HTC calls an "interference-free" 60Ghz band for better performance. This we do have a rough release date for, with worldwide release to customers in Q3 of this year.
  • Panthers offensive coordinator options for 2018

    Panthers offensive coordinator options for 2018

    He helped Newton and the Carolina offense reach the Super Bowl in 2015 before the Panthers lost to the Denver Broncos. He started to have second thoughts and chose to meet with interim general manager Marty Hurney about the decision.
    Golden Globes: Why stars are wearing Time's Up pins

    Golden Globes: Why stars are wearing Time's Up pins

    Meier, 31, shared a photo of herself in a floral gown prior to attending the award show on Sunday afternoon. Also not in black was Meher Tatna , the president of the Hollywood Foreign Press Association.
    Firefighter among 3 injured in Trump Tower rooftop fire Secret Service spotted

    Firefighter among 3 injured in Trump Tower rooftop fire Secret Service spotted

    It took about an hour to put out the fire at the building, which is located on Fifth Avenue in Manhattan. The fire department reported that the blaze burned on the roof of the building rather than inside it.
  • VP Pence Set for Middle East Tour, After Postponement Last Month

    VP Pence Set for Middle East Tour, After Postponement Last Month

    Kholi allegedly told the news hosts, " How is Jerusalem different from Ramallah, really? " according to the Times report. The statement also said that Pence would discuss the need to "assist persecuted religious minorities" during his trip.
    Incredible Footage Shows Alligators In USA Pushing Snouts Through Ice To Survive

    Incredible Footage Shows Alligators In USA Pushing Snouts Through Ice To Survive

    When the water or air temperatures are too low for them to be active, experts say these reptiles go into a "state of brumation". The alligators went into the water last week during the "bomb cyclone" that hit the East coast. "Pretty unbelievable . ...

    South Korea to unveil decision over 'comfort women' deal with Japan

    The Trump administration has agreed to delay joint military exercises with South Korea until after the Olympics. It's not my understanding that they're going to talk about anything further.


Most liked

Google Doodle celebrates 96th birth anniversary of Nobel Laureate Har Gobind Khorana
Fewer than five years later, Khorana made a second scientific breakthrough when he constructed the first synthetic gene. Khorana (who passed away in 2011) in a black and white sketch alongside another cartoon of him in a laboratory.

Bad Lip Reading Trolls Donald Trump At The National Championship Game
The president left the game shortly before halftime. "So unprecedented as far as I know", tweeted Vaughn Esham . They were joined on the field by President Donald Trump , who attended the game.

Pakistan vs New Zealand Second ODI Live Streaming
However, some splendid fifties by Shadab Khan and Hasan Ali rescued them as they managed to post a total of 246/9 on the board. Outside their cameos, and Mohammad Hafeez's 60 from 71 balls, New Zealand straitjacketed the visitors at the outset.

HP anticipates CES 2018 announcing two Chromebooks and a Chromebox
HP is readying two new Chromebooks to be shown at CES 2018 next before hitting markets in February 2018. Just like any other Chromebook it runs on ChromeOS and is now also compatible with Android apps.

Astros GM: 'Nothing imminent' in deal for Pirates RHP Cole
Pirates right-hander Gerrit Cole delivers a pitch during the first inning against the St. Cole turned heads in 2015 when he made the All-Star Game and posted sparkling numbers.

Razer's Project Linda is a prototype laptop shell for the Razer Phone
In some games, the Razer Phone's display could act as a second display for managing your character's gear and options. Razer has revealed a very unusual mix of laptop and mobile phone hardware in a bid to utilize its new Razer Phone .

The Shape of Water leads race for British Academy Awards
BAFTA also announced "Absolutely Fabulous" star Joanna Lumley as the next host of the film awards ceremony. Sam Rockwell and Woody Harrelson both received nominations for supporting actor .

Samsung Electronics posts biggest operating profit in 2017
Full-year sales were expected to amount to KRW 239.6 trillion, up 18.7 percent from KRW 201.9 trillion in 2016, Samsung said. The tech giant is expected to elaborate on the results in its finalized report, which will be delivered later this month.

Arsene Wenger: Arsenal can't compete with Man City on Jonny Evans
Arsenal are in dire need of defensive reinforcements following their humiliation at the hands of Nottingham Forest. It is also reported that Manchester City are sniffing around the 30-year-old centre half.

Kia Niro EV Concept Plugs Into CES
Kia says the current powertrain found here utilizes new production technology which will be applied to other near-future vehicles. Woong-chul Yang said: "Kia's connected cars will be both boundless and connected and offer a new kind of mobility experience".

President Oprah? After the Golden Globes, Some Have a 2020 Vision
DeMille Award at the 2018 Golden Globes, she told the audience that "everyone loves Oprah". Winfrey brought the typically rowdy crowd to silence and tears with her speech.

No thaw as Mass. gas prices rise higher
AAA Northeast says its weekly survey found that the average price of a gallon of regular unleaded gas grew to $2.53. Gas prices are on the rise in Rhode Island and MA after Thursday's storm.

Former UGA player Matt Stinchcomb elected to College Football Hall of Fame
But he learned Monday that he has already gained inclusion in the College Football Hall of Fame in December. His 21 career interceptions and 389 interception return yards still stand as Miami and Big East records.

Here's your early look at the Nokia 6 (2018)
Elsewhere, the speaker setup on-board the original Nokia 6 came with dual amplifiers and support for Dolby Atmos sound technology. The second-generation of the Nokia 6 is now up for pre-order in China, with no word quite yet on when or if it will hit the US.

Natalie Portman's Golden Globes speech was very candid about an uncomfortable truth
Ahead of last night's Golden Globes , she revealed: 'We are at $14.5million (£10.7million) after two weeks of raising money. "Here are all the male nominees", she said as Ron Howard began to list the nominees.