3 ms·
It would be trivial to discover and would be pretty big news in the security community. I'd wager most of these comments are from nontechnical people, or techn
by solenoid0937 9mo ago
It would be trivial to discover and would be pretty big news in the security community.
I'd wager most of these comments are from nontechnical people, or technical people that are very far removed from security.
- cosmicgadget 9mo agoI'm technical and work in security. Since it is trivial, please explain. Ideally not using a strawman like "well just run strings and look for uploadPlaintextChatsToServer()".
- solenoid0937 9mo agoI don't see why standard RE techniques (DBI/Frida + MITM) wouldn't work, do you? WhatsApp is constantly RE'd because it'd be incredibly valuable to discover gaps in its security posture, the community would find any exfil here.
- martinralbrecht 9mo agoWe did reverse engineer it and we're cryptographers not reverse engineering experts https://eprint.iacr.org/2025/794 https://eprint.iacr.org/2025/794
- deleted 9mo ago[deleted]
- solenoid0937 9mo agoCool paper, thanks for sharing!
- cosmicgadget 9mo agoIf people are trivially hooking IOS and Android applications then sure, it's just an exercise in dynamic analysis. Mobile applications are outside my domain so I am surprised platform security (SEL, attestation, etc.) has been so easily defeated.