Security failures and errors are not spared AppleHowever, in the case of the apple company, we know that it takes very little time to correct these problems. It does not seem to be the case of WhatsApp since as stated Facebook, they cannot solve this error that allows others to impersonate you.
As just revealed at the security conference Black hat, there's a WhatsApp security flaw that allows someone to fake messages by passing them through yours. It also appears that there are three different ways to exploit this vulnerability as you may have known 9to5mac.
Someone can impersonate you and send messages on WhatsApp
Apparently there are two different ways of being able to impersonate yourself that are still not corrected, both use group chats. The first is modify what someone has written in a WhatsApp group by changing the name to look like you wrote it.
The second way is editing something you already wrote when someone responds in a group chat. The original text would remain variation, but anyone who sees the cited text would see the altered version. All this can be used whether or not you are included in the group.
It may interest you | The 10 settings you have to activate in WhatsApp to protect your privacy
In addition to these two ways, Check Point found a third way to fool WhatsApp by mixing public and private messages. Facebook could fix the latter, but the company says no It is practical to fix the other two security errors of WhatsApp, even though they were informed a year ago.
Apparently the problem is in WhatsApp end-to-end encryption. These vulnerabilities are based on the fact that a participant in a group can access the decrypted version of the messages. But nevertheless, Facebook can't access them being encrypted, so the social network ensures that it cannot do anything against this type of attack that may appear within a WhatsApp group chat.
It is true that the risks for the vast majority of users are lowHowever, in group chats with many people the risk is real. In addition, despite the recent measures that Apple It will take against applications like WhatsApp in iOS 13, this type of errors will still be present.