2 ms·
It simply allows you to send arbitrary files. No different to sending a link to a virus over email or putting a link on a Web page. Stupid/normal users would t
by steve19 11y ago
It simply allows you to send arbitrary files. No different to sending a link to a virus over email or putting a link on a Web page.
Stupid/normal users would then try run the downloaded file.
- NullCharacter 11y agoIt's a little more guileful than that, and it definitely is a flaw with WhatsApp not validating their file types/formats.
- sambe 11y agoBut only a little - you could argue the vast majority of e-mail attachments are .doc etc with parsing bugs rather than straight .exe. Contrary to the gushing "using only their phone number" in the article, they admit that gullibility is required.