3 ms·
>Let's face it, people over here just don't like Meta and love to spread FUD about them. It's called punching upwards. >Since any binary can always be deobfus
by balamatom 2y ago
>Let's face it, people over here just don't like Meta and love to spread FUD about them.
It's called punching upwards.
>Since any binary can always be deobfuscated, deliberately putting in a backdoor in the client would be an extremely risky PR move, especially in an app as big as WhatsApp, and one surely receiving lots of attention from security researchers
Correct me if I'm wrong, but can't a proprietary delivery mechanism such as the App or Play stores deliver a backdoored build to an individual device, then later autoupdate it to a clean one?
- thecrash 2y agoBuilds are signed by the software publisher, not the Play Store. So the store alone couldn't corrupt releases, it would need collaboration by the publisher. (Google does have a service for app developers where they keep and manage your signing keys for you, but it's not required)
- balamatom 2y agoInteresting! Who checks those signatures?