Live data from Hacker News

Collecting huge amounts of data with WhatsApp

lorankloeze.nl

1–10 of 65 posts

Re: Collecting huge amounts of data with WhatsApp

#5
Just checked if I was affected and happily I found I'd set every possible setting to private or disabled.

I figure five eyes already had this information. I think they would have tools to decrypt all communications from any app, by using rooted phones that scan their own memory for common crypto libraries and then extract the keys.

On the initial run it would not know where to look, and the phone would be set up to go through a proxy that blocks all non-decryptable communications, to avoid detection. A profile would be extracted to quickly and silently extract the keys from the phone's memory and subsequently send them to the decrypting proxy.

Then on the second run, the phone would be wiped/reset and the decrypting/blocking proxy would attempt to decrypt the communications that are now extracted from the phone in real-time. The wipe functions to avoid detection (it makes it look like the phone is simply crashing). Perhaps the wipe would include changing some device ID's and the source IP.

Rinse, repeat until only decryptable signals leave the phone.

(Something similar could be done with stubbing the encryption code in memory and then "moving" it to the proxy.)

Either based on virtualization tools or on memory inspection. Or perhaps ring -1 based.

The kind of tool I wish every techy had, so they could easily discover what their apps are really doing.

I've seen footage, I stay noided, I've seen footage, I stay-

Edit: If you know of similar or related tooling, please let me know! I want this software.

Re: Collecting huge amounts of data with WhatsApp

#10
> Some of the information that’s being sent back include the following:

Reality:

> All of the information sent back is the following:

Why would you post information in a status update if you don't want it to be public? Why would you use a picture you want to keep a secret?

Post reply on HN