The Lily LaBeau Archivespast few months have not been good to WhatsApp users. Unfortunately, that doesn't look like it's about to change any time soon.
The Facebook-owned messaging app acknowledged and patched a major vulnerability that gave hackers the ability to access files on a victim's computer. All you had to do to fall prey to this attack was click a disguised link preview sent via the messaging app. In other words, it would have been an easy mistake for users to make.
Importantly, this did not affect every single WhatsApp user. Rather, a WhatsApp user had to have the iOS version of the messaging app paired to either a PC or MacOS WhatsApp desktop app.
"A vulnerability in WhatsApp Desktop when paired with WhatsApp for iPhone allows cross-site scripting and local file reading," reads the Facebook bug report. "Exploiting the vulnerability requires the victim to click a link preview from a specially crafted text message."
In a Feb. 4 blog post, the security researcher who discovered and disclosed the vulnerability detailed his process and noted that WhatsApp should really get its shit together.
"It is 2020," wrote Gal Weizman, "no product should be allowing a full read from the file system and potentially a [remote code execution] from a single message."
Patrick Wardle, a security researcher at Jamf and founder of Objective-See, told Mashable over Twitter direct message that "often desktop versions of apps aren't as well audited or well written ...and thus often open to attacks."
He added that this specific specific bug "was likely rather trivial to exploit," but cautioned against people freaking out.
"[Still]," wrote Wardle, "a super neat bug, and had the potential to impact lots of users (I use WhatsApp desktop), so definitely happy a security researcher uncovered it and that FB patched it quickly."
We reached out to Facebook in an effort to determine how many people were vulnerable to this exploit and how many, if any, were actually affectedby it. We've received no response as of press time.
Notably, WhatsApp vulnerabilities can have serious consequences. Just this past month, a security firm hired by Amazon CEO Jeff Bezos claimed in a report that the CEO's phone may have been hacked following the receipt of a malicious WhatsApp message. And while Bezos will be fine, people with less power and resources who fall victim to similar attacks may not fare as well.
Facebook is aware of this, but suggests at least some of the blame should lie elsewhere. Following the news of Bezos' hacked phone, the company's vice president of Europe, the Middle East and Africa, Nicola Mendelsohn, suggested to Bloombergthat Apple is the real problem here.
"One of the things that it highlights is actually some of the potential underlying vulnerabilities that exist on the actual operating systems on phones," Mendelsohn told the publication. "From a WhatsApp perspective, from a Facebook perspective, the thing that we care about the most, the thing that we invest in is making sure that the information that people have with us is safe and secure."
SEE ALSO: Mic on Bezos' hacked phone possibly compromised for months
Which, yeah, great. Making sure WhatsApp information is "safe and secure" sounds great, but perhaps that should include not allowing malicious texts that let hackers access victims' computers? Sounds like a good place to start.
Or, if that's too much, maybe Facebook should start recommending Signal.
UPDATE: Feb. 5, 2020, 2:02 p.m. PST:This story has been updated with comment from Patrick Wardle.
Topics Cybersecurity Facebook WhatsApp
A Typical Wall Street Republican
On Not Thinking Like a Writer, and Other News by Sadie Stein
Happy Birthday, Sharon Olds by Sadie Stein
Fasten Your Seatbelts, It’s Our Winter Issue by Sadie Stein
New MIT report reveals energy costs of AI tools like ChatGPT
Kimchi and Turkey by Michael Croley
Well, This Is Depressing, and Other News by Sadie Stein
Mad Money, and Other News by Sadie Stein
Best tablet deal: Save $45 on Amazon Fire HD 10 tablet
This Is the Way We Wash Our Clothes by Sadie Stein
Robin Triumphant
The Price of the Ticket by M.J. Moore
Doris Lessing, 1919–2013 by Sadie Stein
The Literary World by Sadie Stein
The Amazon Book Sale is coming April 23 through 28
Recapping Dante: Canto 9, or Dial V for Virgil by Alexander Aciman
The Mail Room by Sam Sweet
Recapping Dante: Canto 9, or Dial V for Virgil by Alexander Aciman
Best robot vacuum deal: Eufy Omni C20 robot vacuum and mop $300 off at Amazon
The Mail Room by Sam Sweet
Signal update means disappearing messages no longer remain on MacOS'Battlefield' players discover hidden secret that teases next game'Black dot of death' Unicode bug can crash Messages on iPhoneA man spilled a soda in a public toilet and his shame went viralHow to see Jupiter shining bright in the night sky TuesdayMicrosoft finally launches dark theme for File ExplorerJohn Legend will be the voice of some Google Assistant queriesA kid made a resume for Groot and it's highly accurateLeak hints at iPhone SE 2 with notch just like iPhone XHow to see Jupiter shining bright in the night sky TuesdayExtreme 2016 Arctic heat wave stoked by climate change and low sea iceReview: BitDefender Box 2 is a Wi30 things Netflix would have to do to make me cancel my accountA kid made a resume for Groot and it's highly accurateGoogle wants to hook us on its AI instead of Android phonesReview: BitDefender Box 2 is a WiDeadpool's 'no spoilers' letter is as hilariously brutal as you'd expectHere's why you shouldn't (always) laugh at dogs in strollersGmail Smart Compose basically writes your emails for you12 tons of liquid milk chocolate spill onto Polish highway Visual Magicians in the Hills of Connecticut by Robert Pranzatelli In Praise of Travel, Particularly on Horseback by Antoine Compagnon Redux: The One Who Outlives All the Cowards by The Paris Review Beach Life by The Paris Review Other People’s Photographs by Lucy Sante Modernism’s Debt to Black Women by Cody Delistraty There Are No Small Fascisms: An Interview with Dasa Drndic Philippe Petit, Artist of Life by Paul Auster Books Only a Mother Could Love by The Paris Review A Space for Bette Howland by Honor Moore Redux: Disappointment Is Oily by The Paris Review Somehow I Became Respectable by John Waters Feminize Your Canon: Olivia Manning Writers’ Fridges: Kristen Arnett by Kristen Arnett Welcoming Our New Digital Director, Craig Morgan Teicher by The Paris Review Poetry Rx: Then the Letting Go by Claire Schwartz The Ideal Place to Disappear: An Interview with Julia Phillips by Jennifer Wilson The Royally Radical Life of Margaret Cavendish by Michael Robbins The Start of Summer by Nina MacLaughlin Poetry Is a Volley between the Living and the Dead by Craig Morgan Teicher
2.7028s , 10132.5625 kb
Copyright © 2025 Powered by 【Lily LaBeau Archives】,Wisdom Convergence Information Network