Viw Magazine

Men's Weekly

.

  • Written by Robert Merkel, Lecturer in Software Engineering, Monash University
WhatsApp says more than 1 billion use the app. Shutterstock/XanderS

It’s been a day of high-profile security incidents.

First there was news the popular WhatsApp messenger app was hacked. Updated versions of WhatsApp have been released, which you should install if you’re one of the more than one billion people who use the app.

There was also news of several security flaws in the majority of Intel processors, found in many of the world’s desktop, laptop and server computers.

Software patches to prevent exploitation of these hardware flaws have been released by several vendors, including Microsoft. You should install security updates from vendors promptly, including these.

WhatsApp hack revealed

The WhatsApp news was revealed first by the Financial Times, which says the bug was used in an attempt to access content on the phone of a UK-based human rights lawyer.


Read more: Becoming more like WhatsApp won't solve Facebook’s woes – here's why


The lawyer reported unusual activity on his phone to the Citizen Lab, an academic research centre that focuses on digital espionage. The centre then contacted WhatsApp, which had independently noted signs of some kind of hack and put in place preliminary preventative measures in its network infrastructure.

When asked by the Financial Times how many users were attacked using this vulnerability, a WhatsApp spokesperson said “a number in the dozens would not be inaccurate”.

Facebook, the corporate parent of WhatsApp, has issued a technical notice about the vulnerability, saying versions of WhatsApp for iOS, Android, Windows Phone (and the lesser-known Tizen platform used in Samsung smart watches) were affected.

Evading end-to-end encryption

Messages and calls on WhatsApp are end-to-end encrypted, which means they are practically invulnerable to being read while in transit.

The only way an attacker can gain access to the contents of WhatsApp messages and calls is at either end, on the sending or receiving device.

Unfortunately, in this case, by modifying the sequence of data sent to a phone to initiate a call, an attacker could take over the WhatsApp application running on the device.

This would cause it to do whatever the attacker wishes, which could include sending the unscrambled WhatsApp messages directly to the attacker.

While on its own the vulnerability does not appear to give the attackers full access to everything on a target phone, it could well be used in combination with other vulnerabilities to gain full access and control.

Suspicions fall on NSO Group

Unlike the Intel processor flaws, which were discovered by academic and commercial researchers and are not known to have been used for hacking to date, the WhatsApp security bug was discovered because of hacking activity.

The Financial Times attributes the hacking attempts using the bug to software developed by the NSO Group.

Facebook, while not naming NSO, told the Financial Times:

[…] the attack has all the hallmarks of a private company known to work with governments to deliver spyware that reportedly takes over the functions of mobile phone operating systems.

NSO Group is an Israel-based company that sells intelligence-gathering software – essentially, mobile phone spyware – to governments around the world.

Software sold by NSO Group has previously been implicated in attempts to spy on an Emirati human rights activist, Mexican journalists, and other civil society targets.

The UK human rights lawyer targeted using the WhatsApp bug was representing the Mexican journalists previously allegedly targeted using NSO Group software.

We’re not likely targets

While this particular bug is no longer a problem if you’ve updated WhatsApp, in general there is relatively little an average citizen targeted by this kind of spyware can do about it.

Make sure you WhatsApp app is up-to-date. WhatsApp Android app/Screenshot

This genre of bug-exploiting spyware is highly unlikely to be used by anyone other than governments, and then only to target a relatively small number of people. But the lawyer in this latest case says he does not know who is behind his WhatsApp hack.

Sooner or later, the use of spyware is inevitably detected, and the bug used to install it is found and fixed. The more phones are attacked, the quicker this will occur.

In the Australian context, software bugs are not the only means available to law enforcement to access encrypted messaging.


Read more: Why we need to fix encryption laws the tech sector says threaten Australian jobs


The controversial Access and Assistance legislation, approved late last year, contains provisions that can require software and hardware developers to provide assistance to law enforcement and intelligence agencies to access communications, including those secured with end-to-end encryption.

The use of this kind of spyware – sold to countries with dubious human rights credentials, and used to target activists, journalists and lawyers – is disturbing.

I have previously argued that the international trade in such powerful tools should be curtailed. But fortunately, as insidious as they are, their reach is limited and likely to remain so.

Robert Merkel does not work for, consult, own shares in or receive funding from any company or organisation that would benefit from this article, and has disclosed no relevant affiliations beyond their academic appointment.

Authors: Robert Merkel, Lecturer in Software Engineering, Monash University

Read more http://theconversation.com/whatsapp-hacked-and-bugs-in-intel-chips-what-you-need-to-know-to-protect-yourself-117173

Designing the Ideal Healthcare Environment with a Professional Medical Centre Fitout

When it comes to healthcare spaces, functionality, hygiene, and patient comfort take top priority. An intelligently designed medical centr...

Stay Comfortable Year-Round with Ducted Cooling Melbourne

When the temperature starts to rise, having a reliable and efficient cooling system becomes a priority. With unpredictable weather and sud...

Best Practices for Content Ownership and Tagging Across Departments

Image by kaboompics on Freepik The bigger and more complex content ecosystems grow, the more valuable ownership and tagging become. In ent...

Understanding Public Liability Insurance Australia: What You Need to Know

Image by rawpixel.com on Freepik The necessity of public liability insurance in Australia is that it acts as a financial safeguard for busi...

How HID Proximity Cards Improve Workplace Security Without Slowing Down Access

In today’s workplaces, security is non-negotiable, but so is speed. Companies are under pressure to protect their people, property, and ...

Unlock Business Insights Faster with Power BI Tools

In this digital age where data drives the consumer landscape, businesses are shipping huge amounts of data every day. To remain competit...

Why Split System Installation Is a Smart Choice for Home Climate Control

Temperature control is essential for comfort, and when it comes to efficient, versatile cooling and heating, a split system is one of the ...

The Ultimate Guide to Door Replacement: Everything You Need to Know

Image by freepik Sure, swapping out a door is a fairly easy task, but it requires careful consideration of options for materials, designs...

Common Web Development Issues Perth Businesses Face (and How Agencies Fix Them)

Image by freepik Let's be honest, in the bustling heart of Perth's business scene, a website that's not up to scratch is like trying to he...

Life With Clear Aligners: 10 Small Changes That Make a Big Difference

Image by tonodiaz on Freepik Clear aligners have transformed orthodontics, offering a nearly invisible way to straighten teeth without the...

Choosing the Right Hair Loss Treatment for Your Needs

Millions of people experience hair loss globally, and it can be a major cause of emotional discomfort and self-consciousness. Hair loss ca...

Cardboard Display Boxes: An Effective Solution for Retail Presentation

In the competitive world of retail, how products are presented can be just as important as the products themselves. Cardboard display boxe...

Why Hiring a Skilled Shopify Web Developer Can Transform Your Online Store

Shopify has become one of the most popular e-commerce platforms due to its ease of use, powerful features, and scalability. However, creat...

Selling a Home Left 1 in 3 Aussies in Tears, Survey Finds

New research on selling property found that more than 1 in 3 people who sold a property in the past two years admitted to crying at some poi...

Brisbane Motor Vehicle Accident Lawyers & Motorbike Accident Claims

Motorbike accidents in Brisbane can lead to severe injuries and complex legal challenges, given the vulnerability of riders on the road. F...

Jesse Martin, OAM Sets Sail Again with Portland Roads - Sailing the Whitsundays

Jesse Martin OAM shot to fame in 1999 as the world’s youngest sailor to circumnavigate the globe – solo, unassisted and non-stop. No...

Why Modern Roller Shutters Are the Perfect Solution for Your Home or Business

Whether you're looking to secure your home or make your business more energy-efficient, modern roller shutters are a smart choice. In this...

Everything You Need to Know About the EWPA Yellow Card

The EWPA Yellow Card is an important certification in the construction and workplace safety sectors. It plays a key role in ensuring worke...

From Residential to NDIS to Commercial: How Mr Window Cleaning Covers Every Window

Not all window cleaning jobs are created equal. A quiet suburban home, a bustling retail store, and a property under an NDIS plan each com...

How Timely Duct Inspections and Repairs Improve HVAC Efficiency

You have cranked up the air conditioning, but your home still feels unevenly cooled or stuffy. Sound familiar? Many homeowners jump straig...