Upgrade to Pro — share decks privately, control downloads, hide ads and more …
Sign up for free

Hacking WhatsApp

Sponsored · Ship Features Fearlessly Turn features on and off without deploys. Used by thousands of Ruby developers. →
Avatar for Enrique López Mañas Enrique López Mañas
December 22, 2012
Programming
1.3k
4

Hacking WhatsApp

GDG Presentation

Avatar for Enrique López Mañas

Enrique López Mañas

December 22, 2012

More Decks by Enrique López Mañas

See All by Enrique López Mañas
Composifying Your Not-Compose Code
Avatar for Enrique López Mañas kikoso
0
59
KMP_for_Swift.pdf
Avatar for Enrique López Mañas kikoso
0
80
Android Benchmarking and other stories
Avatar for Enrique López Mañas kikoso
0
560
KMP for Mobile Developers
Avatar for Enrique López Mañas kikoso
0
110
Diving into Coroutines
Avatar for Enrique López Mañas kikoso
1
100
K/N for mobile developers (including libraries' snippets)
Avatar for Enrique López Mañas kikoso
0
130
Kotlin/Native for Multiplatform development
Avatar for Enrique López Mañas kikoso
0
92
TensorFlow for Mobile Developers
Avatar for Enrique López Mañas kikoso
0
21
Kotlin/Native for Multiplatform development
Avatar for Enrique López Mañas kikoso
1
230

Other Decks in Programming

See All in Programming
TiDB Cloudのカスタムコントローラーによるオートスケール対応
Avatar for takaidohigasi takaidohigasi
0
130
仕様駆動開発による爆速プロダクト開発 / Bakusoku Spec Driven Development
Avatar for Keisuke Kobayashi kobakei
0
130
巨大モノリシックアプリ モダン化大作戦
Avatar for Ryomm ktcryomm
1
1.1k
Ghostty + Neovimで作る 透明でカッコ良い開発環境
Avatar for Kanade Nonomura j341nono
0
120
C#の現在地 進化の歴史と、AI時代の.NET Everywhere
Avatar for Yoshifumi Kawai neuecc
4
3.6k
Security issues being discussed on Web Platforms
Avatar for petamoriken / 森建 petamoriken
0
1.2k
新卒PdEのリアル
Avatar for ryu ryu1013
1
510
AI が書く Go コードの品質を劇的に向上させる Linter: “declscope”
Avatar for mpyw mpyw
0
390
スマートフォンでモールス信号を送受信する 〜スマートフォンのLEDとカメラで作る光通信の設計と実装〜
Avatar for Atsuki Seo atsuki_seo
0
180
モジュールの視点からSwiftを読み解く #iosdc
Avatar for Shigure Shimotori s_shimotori
0
190
FreeBSDでZabbixを動かす
Avatar for kenkino kenkino
0
320
[GoCon2026] When Goroutines Are Not Enough: Runtime Locality in High-Throughput Go
Avatar for Takeru Hayasaka takehaya
6
2.4k

Featured

See All Featured
Neural Spatial Audio Processing for Sound Field Analysis and Control
Avatar for NII S. Koyama's Lab skoyamalab
0
520
The Mindset for Success: Future Career Progression
Avatar for Greg Gifford greggifford
PRO
0
510
Avoiding the “Bad Training, Faster” Trap in the Age of AI
Avatar for Mike Taylor tmiket
0
250
Thoughts on Productivity
Avatar for Jon Yablonski jonyablonski
76
5.4k
How to Get Subject Matter Experts Bought In and Actively Contributing to SEO & PR Initiatives.
Avatar for Liv Day livdayseo
0
200
We Have a Design System, Now What?
Avatar for Morgane Peng morganepeng
55
8.3k
Imperfection Machines: The Place of Print at Facebook
Avatar for Scott Boms scottboms
270
14k
The Anti-SEO Checklist Checklist. Pubcon Cyber Week
Avatar for Ryan Jones ryanjones
0
250
Bioeconomy Workshop: Dr. Julius Ecuru, Opportunities for a Bioeconomy in West Africa
Avatar for AKADEMIYA2063 akademiya2063
PRO
1
370
How to optimise 3,500 product descriptions for ecommerce in one day using ChatGPT
Avatar for Katarina Dahlin katarinadahlin
PRO
3
3.8k
Data-driven link building: lessons from a $708K investment (BrightonSEO talk)
Avatar for Szymon Słowik szymonslowik
1
1.3k
HDC tutorial
Avatar for Michiel Stock michielstock
2
900

Transcript

  1. Samstag, 22. Dezember 12

  2. WhatsApp No presentation needed No security either Samstag, 22. Dezember

    12

  3. Known bugs/ features Changing status (not solved) Communication without encryption

    (solved) Storage encryption (not solved) Authentication (not solved) Samstag, 22. Dezember 12

  4. Changing status Status can be changed remotely Programmer published a

    Website. WhatsApp block the website Windows tool Samstag, 22. Dezember 12

  5. Communication without encryption Communication was sent in plain text Intercepting

    messages WhatsApp Sniffer for Android, Wireshark... Samstag, 22. Dezember 12

  6. Authentication Authentication against their server Usage of WhatsApp API WhatsApp

    sent „Cease and desist“ to WhatsApp API programmers Samstag, 22. Dezember 12

  7. Storage encryption All conversations stored in SD Card ... even

    if you remove them... ...even the GPS coordinates.... ...using the same key for encryption! Samstag, 22. Dezember 12

  8. WhatsApp Conversation stealer Uses two permissions Library integration Silently background

    service Only for scientific purposes :-) Samstag, 22. Dezember 12

  9. Danke! + http://goo.gl/t4AVh @eenriquelopez http://www.neo-tech.es Samstag, 22. Dezember 12