$30 off During Our Annual Pro Sale. View Details »

Hacking WhatsApp

Avatar for Enrique López Mañas Enrique López Mañas
December 22, 2012
Programming
4
1.3k

Hacking WhatsApp

GDG Presentation

Avatar for Enrique López Mañas

Enrique López Mañas

December 22, 2012
Tweet

More Decks by Enrique López Mañas

See All by Enrique López Mañas
Composifying Your Not-Compose Code
Avatar for Enrique López Mañas kikoso
0
10
Guardrails and Sanity Checks: Verifying LLM Input and Output for Developers
Avatar for Enrique López Mañas kikoso
0
52
KMP_for_Swift.pdf
Avatar for Enrique López Mañas kikoso
0
55
Android Benchmarking and other stories
Avatar for Enrique López Mañas kikoso
0
360
KMP for Mobile Developers
Avatar for Enrique López Mañas kikoso
0
71
Diving into Coroutines
Avatar for Enrique López Mañas kikoso
1
76
K/N for mobile developers (including libraries' snippets)
Avatar for Enrique López Mañas kikoso
0
100
Kotlin/Native for Multiplatform development
Avatar for Enrique López Mañas kikoso
0
73
TensorFlow for Mobile Developers
Avatar for Enrique López Mañas kikoso
0
21

Other Decks in Programming

See All in Programming
【CA.ai #3】ワークフローから見直すAIエージェント — 必要な場面と“選ばない”判断
Avatar for SatoAoaka satoaoaka
0
230
Navigation 3: 적응형 UI를 위한 앱 탐색
Avatar for Sungyong An fornewid
1
190
AIエンジニアリングのご紹介 / Introduction to AI Engineering
Avatar for r-kagaya rkaga
5
1.7k
認証・認可の基本を学ぼう前編
Avatar for kaza kouyuume
0
190
非同期処理の迷宮を抜ける: 初学者がつまづく構造的な原因
Avatar for PADAone pd1xx
1
670
20 years of Symfony, what's next?

Avatar for Fabien Potencier fabpot
2
330
AIコーディングエージェント（Gemini）
Avatar for kondai kondai24
0
180
著者と進める！『AIと個人開発したくなったらまずCursorで要件定義だ！』
Avatar for yasuna yasunacoffee
0
120
大体よく分かるscala.collection.immutable.HashMap ~ Compressed Hash-Array Mapped Prefix-tree (CHAMP) ~
Avatar for matsu_chara matsu_chara
1
210
手軽に積ん読を増やすには？/読みたい本と付き合うには？
Avatar for hideki kinjyo o0h
PRO
1
160
全員アーキテクトで挑む、 巨大で高密度なドメインの紐解き方
Avatar for Agata Naomichi agatan
8
19k
251126 TestState APIってなんだっけ?Step Functionsテストどう変わる?
Avatar for Takumi Abe east_takumi
0
300

Featured

See All Featured
GraphQLとの向き合い方2022年版
Avatar for Yosuke Kurami quramy
50
14k
Producing Creativity
Avatar for Steve Smith orderedlist
PRO
348
40k
A Modern Web Designer's Workflow
Avatar for Chris Coyier chriscoyier
697
190k
個人開発の失敗を避けるイケてる考え方 / tips for indie hackers
Avatar for panda_program panda_program
120
20k
The Web Performance Landscape in 2024 [PerfNow 2024]
Avatar for Tammy Everts tammyeverts
12
970
Mobile First: as difficult as doing things right
Avatar for Swwweet swwweet
225
10k
Optimizing for Happiness
Avatar for Tom Preston-Werner mojombo
379
70k
A better future with KSS
Avatar for Kyle Neath kneath
240
18k
Code Review Best Practice
Avatar for Trisha Gee trishagee
73
19k
Facilitating Awesome Meetings
Avatar for Lara Hogan lara
57
6.7k
[RailsConf 2023 Opening Keynote] The Magic of Rails
Avatar for Eileen M. Uchitelle eileencodes
31
9.8k
The Art of Programming - Codeland 2020
Avatar for Erika Heidi erikaheidi
56
14k

Transcript

  1. Samstag, 22. Dezember 12

  2. WhatsApp No presentation needed No security either Samstag, 22. Dezember

    12

  3. Known bugs/ features Changing status (not solved) Communication without encryption

    (solved) Storage encryption (not solved) Authentication (not solved) Samstag, 22. Dezember 12

  4. Changing status Status can be changed remotely Programmer published a

    Website. WhatsApp block the website Windows tool Samstag, 22. Dezember 12

  5. Communication without encryption Communication was sent in plain text Intercepting

    messages WhatsApp Sniffer for Android, Wireshark... Samstag, 22. Dezember 12

  6. Authentication Authentication against their server Usage of WhatsApp API WhatsApp

    sent „Cease and desist“ to WhatsApp API programmers Samstag, 22. Dezember 12

  7. Storage encryption All conversations stored in SD Card ... even

    if you remove them... ...even the GPS coordinates.... ...using the same key for encryption! Samstag, 22. Dezember 12

  8. WhatsApp Conversation stealer Uses two permissions Library integration Silently background

    service Only for scientific purposes :-) Samstag, 22. Dezember 12

  9. Danke! + http://goo.gl/t4AVh @eenriquelopez http://www.neo-tech.es Samstag, 22. Dezember 12