Upgrade to Pro — share decks privately, control downloads, hide ads and more …
Sign up for free

Hacking WhatsApp

Sponsored · Your Podcast. Everywhere. Effortlessly. Share. Educate. Inspire. Entertain. You do you. We'll handle the rest. →
Avatar for Enrique López Mañas Enrique López Mañas
December 22, 2012
Programming
1.3k
4

Hacking WhatsApp

GDG Presentation

Avatar for Enrique López Mañas

Enrique López Mañas

December 22, 2012

More Decks by Enrique López Mañas

See All by Enrique López Mañas
Composifying Your Not-Compose Code
Avatar for Enrique López Mañas kikoso
0
70
KMP_for_Swift.pdf
Avatar for Enrique López Mañas kikoso
0
90
Android Benchmarking and other stories
Avatar for Enrique López Mañas kikoso
0
580
KMP for Mobile Developers
Avatar for Enrique López Mañas kikoso
0
110
Diving into Coroutines
Avatar for Enrique López Mañas kikoso
1
110
K/N for mobile developers (including libraries' snippets)
Avatar for Enrique López Mañas kikoso
0
130
Kotlin/Native for Multiplatform development
Avatar for Enrique López Mañas kikoso
0
94
TensorFlow for Mobile Developers
Avatar for Enrique López Mañas kikoso
0
21
Kotlin/Native for Multiplatform development
Avatar for Enrique López Mañas kikoso
1
230

Other Decks in Programming

See All in Programming
月間100万人のサービス刷新で、 技術選定をHonoに振り切った話
Avatar for bara yutobara
8
6.6k
Starting & Sustaining Code-Based E2E Testing for Non-Coding QA Teams( #jasstniigata )
Avatar for teyamagu teyamagu
PRO
1
1k
機械に任せるテスト、人が見るテスト ⽣成AIで引き直した、運⽤保守フェーズの線引き
Avatar for KUSATAKE Daisuke dske104
0
190
Optunaを作ったときにやりたかったこと、その後 (2026/10/16, Optuna Meetup #3)
Avatar for Takuya Akiba iwiwi
1
430
Apple Intelligence を用いた個人情報誤送信防止、及びユーザーリクエスト体験の改善について
Avatar for Yuki Kuwashima yukiny
0
350
TechTown - Creating Composable Callables in Contemporary C++
Avatar for Björn Fahller rollbear
0
130
The Rails Doctrine Decade
Avatar for Koichi ITO koic
2
590
見えないものを探る要求要件定義に必要な基本的思考 / invisible-requirement-thinking
Avatar for MinoDriven minodriven
15
8.5k
phperだってパンチカードでコーディングしたい
Avatar for hideki kinjyo o0h
PRO
0
330
Compiling a real-world CLI tool to native with Static Hermes
Avatar for Tzvetan Mikov tmikov2023
0
120
IBM Bob でAI駆動開発『QC-Playbook』
Avatar for 1kano ichirokano2
0
110
IBM Bob Dojo #1 仕様駆動開発入門
Avatar for Akira Onishi (IBM) oniak3ibm
PRO
0
390

Featured

See All Featured
Stewardship and Sustainability of Urban and Community Forests
Avatar for Eric Wiseman pwiseman
0
550
Believing is Seeing
Avatar for Spiro Bolos oripsolob
1
240
JavaScript: Past, Present, and Future - NDC Porto 2020
Avatar for David Neal reverentgeek
52
6.1k
Into the Great Unknown - MozCon
Avatar for Noah Learner thekraken
41
2.8k
Visualizing Your Data: Incorporating Mongo into Loggly Infrastructure
Avatar for mongodb mongodb
50
10k
The Success of Rails: Ensuring Growth for the Next 100 Years
Avatar for Eileen M. Uchitelle eileencodes
47
8.4k
Stop Working from a Prison Cell
Avatar for Chris Michel hatefulcrawdad
274
21k
Digital Ethics as a Driver of Design Innovation
Avatar for Per Axbom axbom
PRO
1
460
Unlocking the hidden potential of vector embeddings in international SEO
Avatar for Frank van Dijk frankvandijk
0
990
Why You Should Never Use an ORM
Avatar for John Nunemaker jnunemaker
PRO
61
10k
Agile that works and the tools we love
Avatar for Rasmus Luckow-Nielsen rasmusluckow
331
22k
The World Runs on Bad Software
Avatar for Brandon Keepers bkeepers
PRO
72
12k

Transcript

  1. Samstag, 22. Dezember 12

  2. WhatsApp No presentation needed No security either Samstag, 22. Dezember

    12

  3. Known bugs/ features Changing status (not solved) Communication without encryption

    (solved) Storage encryption (not solved) Authentication (not solved) Samstag, 22. Dezember 12

  4. Changing status Status can be changed remotely Programmer published a

    Website. WhatsApp block the website Windows tool Samstag, 22. Dezember 12

  5. Communication without encryption Communication was sent in plain text Intercepting

    messages WhatsApp Sniffer for Android, Wireshark... Samstag, 22. Dezember 12

  6. Authentication Authentication against their server Usage of WhatsApp API WhatsApp

    sent „Cease and desist“ to WhatsApp API programmers Samstag, 22. Dezember 12

  7. Storage encryption All conversations stored in SD Card ... even

    if you remove them... ...even the GPS coordinates.... ...using the same key for encryption! Samstag, 22. Dezember 12

  8. WhatsApp Conversation stealer Uses two permissions Library integration Silently background

    service Only for scientific purposes :-) Samstag, 22. Dezember 12

  9. Danke! + http://goo.gl/t4AVh @eenriquelopez http://www.neo-tech.es Samstag, 22. Dezember 12