3 ms·
What is the worst case scenario here? Will the adversary be able to break out of the sandbox? i.e. will the adversary be able to access non WhatsApp data?
by gauravphoenix 4y ago
What is the worst case scenario here? Will the adversary be able to break out of the sandbox? i.e. will the adversary be able to access non WhatsApp data?
- londons_explore 4y agoSince this advisory is cross platform, I expect it just lets you execute code in the application context. Ie. You can still steal someone's entire conversation history.
- hn_throwaway_99 4y agoGive photo access to WhatsApp? Better hope there's not a dick pic in there or you end up like Bezos.
- system2 4y agoHe probably was lowkey proud to show his pp to the world. That man is a sociopath.
- jhoelzel 4y agoI dont think they can break the sandbox. because then apple would have most likely removed them from the store already. However what they can do is everything the app can do: - get your contacts - get your messages - get your photos - get your location - get the people you chat with - read the stati of your contacts therefore i would assume with the right tools you can directly identify a phone use, its social circle, most talked topics on an "encrypted messenger" and since the messages are right there: sentiment analysis of conversations had and therefore social status of the pople you chat with actually its quite terrifying. but so is the idea also that our faces and words are being handed through the world by a tech company without international regulations...... soooo business as usual =)