4 ms·
This case is much simpler than that: there was a buffer overflow exploited in WhatsApp clients. https://nvd.nist.gov/vuln/detail/CVE-2019-3568 https://nvd.nist
by roywiggins 7y ago
This case is much simpler than that: there was a buffer overflow exploited in WhatsApp clients.
https://nvd.nist.gov/vuln/detail/CVE-2019-3568 https://nvd.nist.gov/vuln/detail/CVE-2019-3568
- octorian 7y agoYeah, the exploit has absolutely nothing at all to do with message encryption. It's just your run-of-the-mill security hole that happens in other software all the time. As such, most of the comments in this thread are completely off base. What makes it notable is which app it was found in, the reach of that app's userbase, and that a company was selling these exploit services.
- est31 7y agoOh thanks, this wasn't mentioned in the linked article.
- roywiggins 7y agoSkimming the actual complaint (unhelpfully, not linked by the article) clears a lot up about what happened. https://context-cdn.washingtonpost.com/notes/prod/default/documents/bf5edf35-5672-49fa-aca1-edefadff683f/note/8ef25c0d-fee9-416a-b7f9-e0a4dedc66f2.pdf https://context-cdn.washingtonpost.com/notes/prod/default/do...