4 ms·

More details in "WhatsApp Retransmission Vulnerability" [1] from April last year. [1] https://tobi.rocks/2016/04/whats-app-retransmission-vulnerability/ https:

• FabHK 10y ago
  This should be the top post - exactly this vulnerability was announced last year April; it's just that the Guardian picked it up now (with a somewhat clickbait-y headline, to boot).
  • andyjohnson0 10y ago
    I'm going to have to come to the Guardian's defence here. We may take issue with the term "backdoor" but, for a general readership, their headline is a good summary of the issue using appropriate language.
    • FabHK 10y ago
      Doesn't backdoor imply malicious intent? (Of course you could argue that a good backdoor looks like a innocuous bug or even a feature...) Also, if I have notification of key changes enabled and verify key fingerprints, at most one exchange could be snooped without me noticing. (If notification of key changes is not enabled and key fingerprints not verified, all bets are off anyways.)