science

Reception and criticism of WhatsApp security and privacy features

Reception and criticism of WhatsApp security and privacy features is a science topic covered in the lgStudy science library. This page brings together a partial reference excerpt, illustrations, worked examples, real-world applications and a short study plan, so you can understand Reception and criticism of WhatsApp security and privacy features rather than just read about it. In short: This article provides a detailed chronological account of the historical reception and criticism of security and privacy features in the WhatsApp messaging service. 2011 On May 20, 2011, an unidentified security researcher from the Netherlands under the pseudonym "WhatsappHack" published a method to hijack WhatsApp accounts using a flaw in the authentication process, to the Dutch websites Tweakers.net and GeenStijl…

Key takeaways

Reception and criticism of WhatsApp security and privacy features belongs to science; place it in that map before memorising details.
Learn the definition first, then one example that makes the definition concrete.
Connect Reception and criticism of WhatsApp security and privacy features to a quantity you can measure, compute or draw — that is where exam questions come from.
Reproduce the core statement of Reception and criticism of WhatsApp security and privacy features from memory before moving on to harder problems.

Reference excerpt

This article provides a detailed chronological account of the historical reception and criticism of security and privacy features in the WhatsApp messaging service.

2011 On May 20, 2011, an unidentified security researcher from the Netherlands under the pseudonym "WhatsappHack" published a method to hijack WhatsApp accounts using a flaw in the authentication process, to the Dutch websites Tweakers.net and GeenStijl. The method involved trying to log in to a person's account from another phone number and intercepting the verification text message that would be sent out. "WhatsappHack" provided methods to accomplish this on both Symbian and Android operating systems. One day after the publication of the articles, WhatsApp issued a patch to both the Android and Symbian clients. In May 2011, another security hole was reported which left communication through WhatsApp susceptible to packet analysis. WhatsApp communications data was sent and received in plaintext, meaning messages could easily be read if packet traces were available.

2012 In May 2012 security researchers noticed that new updates of WhatsApp sent messages with encryption, but described the cryptographic method used as "broken." In August of the same year, the WhatsApp support staff stated that messages sent in the "latest version" of the WhatsApp software for iOS and Android (but not BlackBerry, Windows Phone, and Symbian) were encrypted, but did not specify the cryptographic method. On January 6, 2012, an unknown hacker published a website that made it possible to change the status of any WhatsApp user, so long as the phone number associated with the user's account was known. On January 9, WhatsApp reported that it had resolved the problem. In reality, WhatsApp's solution had been to block the website's IP address, which had allowed a Windows tool to be made that could accomplish the same thing. This problem has since been resolved by the institution of an IP address check on currently logged-in sessions. On September 14, 2012, Heise Security demonstrated how to use WhatsAPI to hijack any WhatsApp account. Shortly afterward, WhatsApp threatened to initiate legal action against the developers of WhatsAPI, an open source project, and WhatsAPI temporarily took down their source code. This, however, did not address the underlying security failure and Heise Security claimed they had been able to successfully repeat the hacking of WhatsApp accounts. The WhatsAPI team has since resumed active development.

2013–2015 On March 31, 2013, the Saudi Arabia Communications and Information Technology Commission (CITC) issued a statement that mentioned possible measures against WhatsApp, among other applications, unless the service providers took serious steps to comply with monitoring and privacy regulations. In February 2014, the Schleswig-Holstein Data Protection Authority advised against using WhatsApp, as the service lacked privacy protection such as end-to-end client-side encryption technology. In late 2014, WhatsApp began its implementation of end-to-end encryption, which it finished in April 2016. A joint Canadian-Dutch government investigation was launched into several concerns over WhatsApp's compliance with security regulations. The primary concern of the investigators was that WhatsApp required users to upload their mobile phone's entire address book, including contact information for contacts who were not using WhatsApp, to be mirrored on WhatsApp's servers. While WhatsApp stored these phone numbers in hash, the data was not salted. In late 2015, the Dutch government released a press statement claiming that WhatsApp had changed its hashing method, making it much harder to reverse, and thus subsequently complied with all rules and regulations. On December 1, 2014, Indrajeet Bhuyan and Saurav Kar demonstrated the WhatsApp Message Handler vulnerability, which allows anyone to remotely crash WhatsApp just by sending a specially crafted 2 kilobyte message. A user who receives the message must delete the whole conversation to avoid crashing WhatsApp upon opening the conversation. In early 2015, after WhatsApp launched a web client that can be used from the browser, Bhuyan found that the client had two new security issues: the WhatsApp photo privacy bug and the WhatsApp web photo sync bug.

… excerpt ends here. Continue reading the full article.

Illustrations

Worked examples

Example 1 — a first encounter with Reception and criticism of WhatsApp security and privacy features

Start with the simplest possible case. Write down what Reception and criticism of WhatsApp security and privacy features claims or describes in one sentence, then invent the smallest concrete situation in which that sentence is true. In science, the smallest case is usually a single object, a single equation or a single measurement. Check that every symbol or term in your sentence has a meaning in that case.

Example 2 — changing one variable

Take the situation from Example 1 and change exactly one quantity: double it, halve it, or set it to zero. Predict what should happen to Reception and criticism of WhatsApp security and privacy features before you calculate. Comparing your prediction with the result is the fastest way to find out whether you understand the idea or only the words.

Example 3 — an exam-style question

Typical questions about Reception and criticism of WhatsApp security and privacy features ask you to (a) state it precisely, (b) apply it to given data, and (c) explain a limitation. Practise writing all three answers in under five minutes; the third part is what separates a full-mark answer from an average one.

Applications of Reception and criticism of WhatsApp security and privacy features

In research: Reception and criticism of WhatsApp security and privacy features appears in science research whenever the underlying quantities have to be modelled precisely. Papers usually cite it as a starting assumption and then explore where it breaks down.
In technology and industry: Engineering practice reuses Reception and criticism of WhatsApp security and privacy features in design rules, simulations and safety margins. Knowing the idea lets you read a specification sheet and understand why the numbers look the way they do.
In the classroom: Reception and criticism of WhatsApp security and privacy features is common in secondary-school and first-year university syllabi. It links to neighbouring topics Data security, Internet privacy, Meta Platforms criticism and controversies, so understanding it makes those chapters shorter.
In everyday life: Look for Reception and criticism of WhatsApp security and privacy features outside the textbook — in sport, cooking, traffic, electronics or the sky above you. An example you found yourself is remembered far longer than one you were given.

Ask Teacher Smith questions about this articleOpens your AI tutor with a question about “Reception and criticism of WhatsApp security and privacy features” →

Affiliate

Preply — study more efficiently by working with a personal tutor. 50% off.

How to study Reception and criticism of WhatsApp security and privacy features in 20 minutes

Read the reference excerpt below once, without taking notes.
Close the page and write down what Reception and criticism of WhatsApp security and privacy features means in your own words.
Compare your version with the excerpt and mark what you missed.
Work through the three examples above with pen and paper.
Explain Reception and criticism of WhatsApp security and privacy features out loud to somebody else — or to Teacher Smith in the lgStudy chat.

Frequently asked questions

What is Reception and criticism of WhatsApp security and privacy features in simple terms?

This article provides a detailed chronological account of the historical reception and criticism of security and privacy features in the WhatsApp messaging service. 2011 On May 20, 2011, an unidentified security researcher from the Netherlands under the pseudonym "WhatsappHack" published a method t…

Why does Reception and criticism of WhatsApp security and privacy features matter?

Because it connects several science ideas at once: it gives you a definition you can apply, a quantity you can calculate, and a way to check whether a result is plausible.

How should I study Reception and criticism of WhatsApp security and privacy features?

Read the excerpt, restate it from memory, then work through the examples and applications listed on this page. The five-step study plan above takes about twenty minutes.

What does this page cover?

It gives you a compact reference excerpt plus original lgStudy explanations, examples, applications and study material on Reception and criticism of WhatsApp security and privacy features.