Live data from Hacker News

WhatsApp Remote Code Execution in Video Call

nvd.nist.gov

11–20 of 159 posts

Re: WhatsApp Remote Code Execution in Video Call

#11

These applications should be treated as Trojan horses. If they aren’t open source and you are a journalist/dissident or anyone targeted by nation states you have got to assume your WhatsApp/Facebook is being used to compromise your device.

Even the App Store version of Signal is allegedly not the same as what's in the open source project. So unless you compile and install the applications yourself, there's no way of knowing anything.

Re: WhatsApp Remote Code Execution in Video Call

#15
post #7

Off topic: Why does WhatsApp don't give the option to block all calls and texts by default? That way, I can only talk with folks I want. The signal app has that option. Random businesses can send you texts to promote their shity services (typically, your number is grabbed from data brokers or leaks). Of course, you can block and report such spam, but there is no DnD option right now. Alt url as nvd is under load: Cri…

yes, WhatsApp used to be great in this regard, you would not get any spam. Now it's starting to get worse and worse. I block SMS notifications since I only get spam there (I'm Brazilian, SMS is basically dead here)

>Now it's starting to get worse and worse.

Wait until the EU-mandated intercompatibility kicks in.

Re: WhatsApp Remote Code Execution in Video Call

#17
post #7

Off topic: Why does WhatsApp don't give the option to block all calls and texts by default? That way, I can only talk with folks I want. The signal app has that option. Random businesses can send you texts to promote their shity services (typically, your number is grabbed from data brokers or leaks). Of course, you can block and report such spam, but there is no DnD option right now. Alt url as nvd is under load: Cri…

Wanna talk about how the WhatsApp client on macOS (and probably also Windows) by default shows your webcam on screen if someone videocalls you? That way if you are sharing your screen and someone happens to call you, everyone will be able to suddenly see you without warnings.

For me is such an enormous privacy violation that I removed the client (which is also a memory hog) and now use only the browser version.

Re: WhatsApp Remote Code Execution in Video Call

#19
post #11

These applications should be treated as Trojan horses. If they aren’t open source and you are a journalist/dissident or anyone targeted by nation states you have got to assume your WhatsApp/Facebook is being used to compromise your device.

Even the App Store version of Signal is allegedly not the same as what's in the open source project. So unless you compile and install the applications yourself, there's no way of knowing anything.

So Apple has their Xcode Build service, why not add a badge to verify that an app was built from a linked public Github/Gitlab Repo

Re: WhatsApp Remote Code Execution in Video Call

#20
post #11

These applications should be treated as Trojan horses. If they aren’t open source and you are a journalist/dissident or anyone targeted by nation states you have got to assume your WhatsApp/Facebook is being used to compromise your device.

Even the App Store version of Signal is allegedly not the same as what's in the open source project. So unless you compile and install the applications yourself, there's no way of knowing anything.

That's interesting. Do you have any links for more info?
Post reply on HN