4 ms·
So the problem is WhatsApp servers can add people to groups? I don't want to be a cynic but aren't groups per se stored on a centralised server? Or the definiti
by cntlzw 9y ago
So the problem is WhatsApp servers can add people to groups? I don't want to be a cynic but aren't groups per se stored on a centralised server? Or the definition of a group at least. So this isn't much of a surprise?
- nebulous1 9y agoNo. Cynic or not, I'm unsure why you're assuming the entire research results made no sense! The administrator of a group should sign the "add member" messages, and group members should only believe that a member has joined if they have such a signed message authorizing the member. You are correct in so far as this is apparently not what happens at the moment.
- baby 9y agoYeah I’m with you on that but mostly because I’ve grew up on shitty chat apps that would allow glitches and wouldn’t handle participants correctly. For example in MSN you could write as the other person in a 1-to-1 chat. The first time someone did that to me I unpluged the ethernet cord from my computer. Anyway these are small issues because the attack still doesn’t reveal any messages to the attacker. These are more about UI/UX issues.
- dbrgn 9y agoApps like Threema manage groups entirely on the client. Group messages are sent to every member separately. The server doesn't know what groups you have created, or who's in them. This comes with some usability tradeoffs of course. But it's possible.