Upgrade to Pro — share decks privately, control downloads, hide ads and more …
Sign up for free

Hacking WhatsApp

Avatar for Enrique López Mañas Enrique López Mañas
December 22, 2012
Programming
1.3k
4

Hacking WhatsApp

GDG Presentation

Avatar for Enrique López Mañas

Enrique López Mañas

December 22, 2012

More Decks by Enrique López Mañas

See All by Enrique López Mañas
Composifying Your Not-Compose Code
Avatar for Enrique López Mañas kikoso
0
58
KMP_for_Swift.pdf
Avatar for Enrique López Mañas kikoso
0
77
Android Benchmarking and other stories
Avatar for Enrique López Mañas kikoso
0
560
KMP for Mobile Developers
Avatar for Enrique López Mañas kikoso
0
110
Diving into Coroutines
Avatar for Enrique López Mañas kikoso
1
100
K/N for mobile developers (including libraries' snippets)
Avatar for Enrique López Mañas kikoso
0
130
Kotlin/Native for Multiplatform development
Avatar for Enrique López Mañas kikoso
0
92
TensorFlow for Mobile Developers
Avatar for Enrique López Mañas kikoso
0
21
Kotlin/Native for Multiplatform development
Avatar for Enrique López Mañas kikoso
1
230

Other Decks in Programming

See All in Programming
kubernetes コンポーネント開発入門 / 新卒N年目の勉強会&交流会！〜〇〇への誘い〜 #n_study
Avatar for mazrean mazrean
0
240
そのリトライ、死んだコネクションを使い回していませんか ── GoのHTTPクライアントとHTTP/2を実プロダクト障害から学び直す
Avatar for Yusa Matsuda myus4a
0
140
テストを司るデーモンに会いに行く 〜隔離した仮想マシンでテストを通すまで〜
Avatar for Hidemune Takahashi h1d3mun3
1
430
Webの地図
Avatar for Yosuke Furukawa yosuke_furukawa
PRO
6
4.6k
JPUG勉強会 OSSデータベースの内部構造を理解しよう(第２回)
Avatar for Atsushi Ogawa oga5
0
250
変化を抱擁するドキュメントの作り方 - ビジネスルール駆動開発がもたらす、コードとの新しい関係
Avatar for ioki ioki
2
210
FreeBSDでZabbixを動かす
Avatar for kenkino kenkino
0
300
数年滞っていたダークモード対応をおよそ2週間で完了させる
Avatar for Kazuki Chigita chigichan24
0
720
Omarchy Tokyo やると聞いて UMPC 買ってセットアップしてきた
Avatar for Fumiaki MATSUSHIMA mtsmfm
0
140
速く作れる。その次は、速く確かめられる開発へ 〜AIネイティブ開発を支える、Shift Down〜 / Can build fast. Next, moving to development where we can verify fast.
Avatar for r-kagaya rkaga
5
3.2k
標準パッケージに uuid が追加された 背景から見る Go らしい意思決定 / go_127_uuid_decision
Avatar for convto convto
5
7.3k
巨大モノリシックアプリ モダン化大作戦
Avatar for Ryomm ktcryomm
1
1k

Featured

See All Featured
Beyond borders and beyond the search box: How to win the global "messy middle" with AI-driven SEO
Avatar for David Carrasco davidcarrasco
3
240
Lightning Talk: Beautiful Slides for Beginners
Avatar for Ines Montani inesmontani
PRO
2
690
Building Adaptive Systems
Avatar for Chris Keathley keathley
44
3.2k
The Hidden Cost of Media on the Web [PixelPalooza 2025]
Avatar for Tammy Everts tammyeverts
2
500
Building a Scalable Design System with Sketch
Avatar for Laura Van Doore lauravandoore
464
34k
Dealing with People You Can't Stand - Big Design 2015
Avatar for Cassini Nazir cassininazir
367
27k
Into the Great Unknown - MozCon
Avatar for Noah Learner thekraken
41
2.7k
Automating Front-end Workflow
Avatar for Addy Osmani addyosmani
1369
210k
Designing for humans not robots
Avatar for Tammie Lister tammielis
254
26k
Money Talks: Using Revenue to Get Sh*t Done
Avatar for Nikki Halliwell nikkihalliwell
0
500
AI in Enterprises - Java and Open Source to the Rescue
Avatar for ivargrimstad ivargrimstad
0
1.5k
Bash Introduction
Avatar for André Augusto Costa Santos 62gerente
615
220k

Transcript

  1. Samstag, 22. Dezember 12

  2. WhatsApp No presentation needed No security either Samstag, 22. Dezember

    12

  3. Known bugs/ features Changing status (not solved) Communication without encryption

    (solved) Storage encryption (not solved) Authentication (not solved) Samstag, 22. Dezember 12

  4. Changing status Status can be changed remotely Programmer published a

    Website. WhatsApp block the website Windows tool Samstag, 22. Dezember 12

  5. Communication without encryption Communication was sent in plain text Intercepting

    messages WhatsApp Sniffer for Android, Wireshark... Samstag, 22. Dezember 12

  6. Authentication Authentication against their server Usage of WhatsApp API WhatsApp

    sent „Cease and desist“ to WhatsApp API programmers Samstag, 22. Dezember 12

  7. Storage encryption All conversations stored in SD Card ... even

    if you remove them... ...even the GPS coordinates.... ...using the same key for encryption! Samstag, 22. Dezember 12

  8. WhatsApp Conversation stealer Uses two permissions Library integration Silently background

    service Only for scientific purposes :-) Samstag, 22. Dezember 12

  9. Danke! + http://goo.gl/t4AVh @eenriquelopez http://www.neo-tech.es Samstag, 22. Dezember 12