Subj : whatsapp = bad for your smartphone health
To : MRO
From : Ogg
Date : Sat Oct 08 2022 08:52 am
Hello MRO!
** On Thursday 06.10.22 - 23:00, MRO wrote to Ogg:
M> i didnt follow the link but i looked it upon my own. they
M> dont think anybody knew about this issue and it was
M> patched. who knows if that's correct. it's from sending a
M> video file that allows remote code execution.
There were other links in the message, but yes.. the main thing
was the video-call issue. In the cnbc article:
"This is a big deal," Travis Ormandy, a researcher at Google
Project Zero which discovered the bug, said on Twitter. "Just
++answering a call from an attacker could completely compromise
WhatsApp."
M> what do you mean whatsapp stores user passwords in the clear?
M> they are encrypted.
One of the other articles mentioned that up until 2016 the app
didn't encrypt the pw or manage the keys properly.
