11 ms·
The principal problem here is if the US government or one of its agencies were to find a code execution bug in WhatsApp, their first reaction would be to turn t
by stefan_ 7y ago
The principal problem here is if the US government or one of its agencies were to find a code execution bug in WhatsApp, their first reaction would be to turn that into into a weaponized exploit and never tell Facebook.
(And then, from history: the exploit is promptly stolen from them by about 11 different adversaries, but it's only fixed when some government contractors antivirus uploads their zero day because it matched some sort of heuristic. Occasionally, before this last step happens, the exploits are uploaded to GitHub when a ransom demand runs out.)