Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Hacking WhatsApp

Sponsored · Ship Features Fearlessly Turn features on and off without deploys. Used by thousands of Ruby developers. →
Avatar for Enrique López Mañas Enrique López Mañas
December 22, 2012
Programming
4
1.3k

Hacking WhatsApp

GDG Presentation

Avatar for Enrique López Mañas

Enrique López Mañas

December 22, 2012
Tweet

More Decks by Enrique López Mañas

See All by Enrique López Mañas
Composifying Your Not-Compose Code
Avatar for Enrique López Mañas kikoso
0
36
KMP_for_Swift.pdf
Avatar for Enrique López Mañas kikoso
0
65
Android Benchmarking and other stories
Avatar for Enrique López Mañas kikoso
0
410
KMP for Mobile Developers
Avatar for Enrique López Mañas kikoso
0
80
Diving into Coroutines
Avatar for Enrique López Mañas kikoso
1
82
K/N for mobile developers (including libraries' snippets)
Avatar for Enrique López Mañas kikoso
0
110
Kotlin/Native for Multiplatform development
Avatar for Enrique López Mañas kikoso
0
76
TensorFlow for Mobile Developers
Avatar for Enrique López Mañas kikoso
0
21
Kotlin/Native for Multiplatform development
Avatar for Enrique López Mañas kikoso
1
200

Other Decks in Programming

See All in Programming
How to stabilize UI tests using XCTest
Avatar for Akio Itaya akkeylab
0
130
車輪の再発明をしよう！PHP で実装して学ぶ、Web サーバーの仕組みと HTTP の正体
Avatar for H1R0 h1r0
2
230
GoのDB アクセスにおける 「型安全」と「柔軟性」の両立 - Bob という選択肢
Avatar for tak tak848
0
260
守る「だけ」の優しいEMを抜けて、 事業とチームを両方見る視点を身につけた話
Avatar for Mitsui maroon8021
3
1.2k
社内規程RAGの精度を73.3% → 100%に改善した話
Avatar for oharu121 oharu121
13
8.2k
Kubernetesでセルフホストが簡単なNewSQLを求めて / Seeking a NewSQL Database That's Simple to Self-Host on Kubernetes
Avatar for nnaka2992 nnaka2992
0
170
仕様漏れ実装漏れをなくすトレーサビリティAI基盤のご紹介
Avatar for Kuniwak orgachem
PRO
7
2.7k
go directiveを最新にしすぎないで欲しい話──あるいは、Go 1.26からgo mod initで作られるgo directiveの値が変わる話 / Go 1.26 リリースパーティ
Avatar for Arthur arthur1
2
570
それはエンジニアリングの糧である：AI開発のためにAIのOSSを開発する現場より / It serves as fuel for engineering: insights from the field of developing open-source AI for AI development.
Avatar for nrs nrslib
1
410
コードレビューをしない選択 #でぃーぷらすトウキョウ
Avatar for Takuma Kajikawa kajitack
3
1k
PHPのバージョンアップ時にも役立ったAST（2026年版）
Avatar for Atsushi Matsuo matsuo_atsushi
0
210
CDIの誤解しがちな仕様とその対処TIPS
Avatar for futokiyo futokiyo
0
230

Featured

See All Featured
The Psychology of Web Performance [Beyond Tellerrand 2023]
Avatar for Tammy Everts tammyeverts
49
3.3k
The State of eCommerce SEO: How to Win in Today's Products SERPs - #SEOweek
Avatar for Aleyda Solis aleyda
2
9.9k
A brief & incomplete history of 
UX Design for the World Wide Web: 1989–2019
Avatar for Jason CranfordTeague jct
1
320
Building a Modern Day 
E-commerce SEO Strategy
Avatar for Aleyda Solis aleyda
45
9k
Music & Morning Musume
Avatar for Bryan Veloso bryan
47
7.1k
Leveraging Curiosity to Care for An Aging Population
Avatar for Cassini Nazir cassininazir
1
200
Helping Users Find Their Own Way: Creating Modern Search Experiences
Avatar for Dan Newman danielanewman
31
3.1k
The Power of CSS Pseudo Elements
Avatar for Geoffrey Crofte geoffreycrofte
82
6.2k
Context Engineering - Making Every Token Count
Avatar for Addy Osmani addyosmani
9
770
Agile Leadership in an Agile Organization
Avatar for Dr. Kim W Petersen kimpetersen
PRO
0
120
Have SEOs Ruined the Internet? - User Awareness of SEO in 2025
Avatar for Akash Hashmi akashhashmi
0
290
Building a A Zero-Code AI SEO Workflow
Avatar for Ian Lurie portentint
PRO
0
400

Transcript

  1. Samstag, 22. Dezember 12

  2. WhatsApp No presentation needed No security either Samstag, 22. Dezember

    12

  3. Known bugs/ features Changing status (not solved) Communication without encryption

    (solved) Storage encryption (not solved) Authentication (not solved) Samstag, 22. Dezember 12

  4. Changing status Status can be changed remotely Programmer published a

    Website. WhatsApp block the website Windows tool Samstag, 22. Dezember 12

  5. Communication without encryption Communication was sent in plain text Intercepting

    messages WhatsApp Sniffer for Android, Wireshark... Samstag, 22. Dezember 12

  6. Authentication Authentication against their server Usage of WhatsApp API WhatsApp

    sent „Cease and desist“ to WhatsApp API programmers Samstag, 22. Dezember 12

  7. Storage encryption All conversations stored in SD Card ... even

    if you remove them... ...even the GPS coordinates.... ...using the same key for encryption! Samstag, 22. Dezember 12

  8. WhatsApp Conversation stealer Uses two permissions Library integration Silently background

    service Only for scientific purposes :-) Samstag, 22. Dezember 12

  9. Danke! + http://goo.gl/t4AVh @eenriquelopez http://www.neo-tech.es Samstag, 22. Dezember 12