The The Sex Files A Dark XXX Parodypast few months have not been good to WhatsApp users. Unfortunately, that doesn't look like it's about to change any time soon.
The Facebook-owned messaging app acknowledged and patched a major vulnerability that gave hackers the ability to access files on a victim's computer. All you had to do to fall prey to this attack was click a disguised link preview sent via the messaging app. In other words, it would have been an easy mistake for users to make.
Importantly, this did not affect every single WhatsApp user. Rather, a WhatsApp user had to have the iOS version of the messaging app paired to either a PC or MacOS WhatsApp desktop app.
"A vulnerability in WhatsApp Desktop when paired with WhatsApp for iPhone allows cross-site scripting and local file reading," reads the Facebook bug report. "Exploiting the vulnerability requires the victim to click a link preview from a specially crafted text message."
In a Feb. 4 blog post, the security researcher who discovered and disclosed the vulnerability detailed his process and noted that WhatsApp should really get its shit together.
"It is 2020," wrote Gal Weizman, "no product should be allowing a full read from the file system and potentially a [remote code execution] from a single message."
Patrick Wardle, a security researcher at Jamf and founder of Objective-See, told Mashable over Twitter direct message that "often desktop versions of apps aren't as well audited or well written ...and thus often open to attacks."
He added that this specific specific bug "was likely rather trivial to exploit," but cautioned against people freaking out.
"[Still]," wrote Wardle, "a super neat bug, and had the potential to impact lots of users (I use WhatsApp desktop), so definitely happy a security researcher uncovered it and that FB patched it quickly."
We reached out to Facebook in an effort to determine how many people were vulnerable to this exploit and how many, if any, were actually affectedby it. We've received no response as of press time.
Notably, WhatsApp vulnerabilities can have serious consequences. Just this past month, a security firm hired by Amazon CEO Jeff Bezos claimed in a report that the CEO's phone may have been hacked following the receipt of a malicious WhatsApp message. And while Bezos will be fine, people with less power and resources who fall victim to similar attacks may not fare as well.
Facebook is aware of this, but suggests at least some of the blame should lie elsewhere. Following the news of Bezos' hacked phone, the company's vice president of Europe, the Middle East and Africa, Nicola Mendelsohn, suggested to Bloombergthat Apple is the real problem here.
"One of the things that it highlights is actually some of the potential underlying vulnerabilities that exist on the actual operating systems on phones," Mendelsohn told the publication. "From a WhatsApp perspective, from a Facebook perspective, the thing that we care about the most, the thing that we invest in is making sure that the information that people have with us is safe and secure."
SEE ALSO: Mic on Bezos' hacked phone possibly compromised for months
Which, yeah, great. Making sure WhatsApp information is "safe and secure" sounds great, but perhaps that should include not allowing malicious texts that let hackers access victims' computers? Sounds like a good place to start.
Or, if that's too much, maybe Facebook should start recommending Signal.
UPDATE: Feb. 5, 2020, 2:02 p.m. PST:This story has been updated with comment from Patrick Wardle.
Topics Cybersecurity Facebook WhatsApp
The Anatomy of Liberal Melancholy
Inside the world's only 'flying eye hospital'
Shaq gets really emotional about Beyoncé, too
7 gifts for people who were burned by the Samsung Galaxy Note7
Seven Steam games whose reviews have changed a lot
These heartbreaking images reveal the dreams of refugees
7 gifts for people who were burned by the Samsung Galaxy Note7
No, this Fisher
Alienware M16 Gaming Laptop deal: Save $560
Verizon refuses to push out Samsung's Galaxy Note 7 kill switch
NYT Strands hints, answers for April 26
Apple unleashes new Apple Watch Series 2 ads for the holidays
The best/worst of 'Me at the beginning of 2016 vs end of 2016' memes
Everything that could go wrong with Amazon Go
Boeing's new VR simulator immerses astronauts in space training
How to save all the personal data on your Note7 before Samsung bricks it
Uber's app icon has changed again
John Glenn and baseball legend Ted Williams were once teammates in the most unexpected place
Boeing's new VR simulator immerses astronauts in space training
Tumblr is the one social platform taking action ahead of Trump's America
Donald Trump just dropped a superb Melania jokeDeer walks up to hunter and demands head scratchesDonald Trump is the biggest roadblock to new net neutrality billCollege kids are using campus electricity to mine cryptoCongress saw some Nickelback hot takes on the House floorTwitter can tell if you actually believe that nonsense you're tweeting'Elder Scrolls: Blades' is a miraculously smartphoneFoursquare introduces experimental 'Hypertrending' feature for SXSWDonald Trump is the biggest roadblock to new net neutrality billRevisiting superhero films of the '90s in honor of 'Captain Marvel'10 empowering tweets for International Women's DayFacebook finally cracks down on antiInjured bald eagle is the perfect metaphor for America in 2016You can now mail in your broken Pixel 3 phone to Google for repairsBarack Obama tweets thread honoring women on International Women's DayFacebook finally cracks down on antiCollege kids are using campus electricity to mine cryptoFacebook finally cracks down on antiEverything you need to know about Goose, Captain Marvel's catU.N. criticized for naming Wonder Woman honorary ambassador Wordle today: Here's the answer, hints for December 10 'Quordle' today: See each 'Quordle' answer and hints for December 12 5 ways FX's 'Kindred' is different from Octavia E. Butler's novel We regret to inform you that brands are storming Area 51 memes ChatGPT can open directly from your Mac's desktop How to watch Disney's 'Strange World' Pornhub says searches for aliens and Area 51 are out of this world 'Empire of Light' review: Heartbreak feels cold in a place like this 3 reasons why 'Crisis Core: Final Fantasy VII Reunion' is a must 'The White Lotus' isn't a whodunnit. So why are we watching it like one? Boris Johnson, next UK prime minister, cancels the word 'dude' in speech Netherlands vs Argentina livestream: How to watch World Cup quarterfinals live Flying during the holidays? These tips will save you money, time, and frustration. PlayStation Wrap Up 2022 is ready to give your gaming year in review How to have the best shower sex This sweet video of a kid giving up his foul ball to another kid will make you cry 10 of the most stressful TV scenes of 2022 Twitter Blue will relaunch tomorrow Jon Stewart's face as Mitch McConnell walks by him is priceless Ridiculous 'Super Mario Maker 2' level sparks memes about avoiding things in life
1.5491s , 8223.328125 kb
Copyright © 2025 Powered by 【The Sex Files A Dark XXX Parody】,Defense Information Network