4 ms·
A bit disappointing, I thought everybody knew it was possible to "enumerate" Whatsapp accounts? I was hoping for something more juicy like RCE...
by ale42 11mo ago
A bit disappointing, I thought everybody knew it was possible to "enumerate" Whatsapp accounts? I was hoping for something more juicy like RCE...
- ruinin 11mo agoThe most interesting vulnerability is the reuse of cryptographic keys, some of it apparently by design, like when transferring one's account to a new number - this can apparently be used to correlate identities despite the change of phone number. Also, from examining the published data set I found it interesting that there are only five WhatsApp users registered in North Korea. I wonder who they are.
- SweetSoftPillow 11mo agoI'm almost 100% sure that one of them is the only North Korean Steam user.
- jeingham 11mo agoI hope nobody tells Kim there are another four users. I'm not sure their prison system can handle anymore, pretty well booked up last I heard.
- userbinator 11mo agoIf anything, the other four are likely to also be Kims.
- 0cf8612b2e1e 11mo agoThe lack of rate limiting was surprising.
- ale42 11mo agoYes, indeed, I wouldn't have expected to be possible to enumerate all of them in a short time from a single IP.