How to Bypass WhatsApp Web's Locked Chat Feature

Post by RandomDistort » Sun, Dec 08, 2024, 10:08 AM UTC

loncat4215 wrote: post #31

RandomDistort wrote: post #25

A lot of WhatsApp's features are enforced client-side, which means on Web they just break with DevTools. I've done some research into this (haven't published it) but also can't get Facebook's bug bounty report tool to work (whenever I create a facebook account it gets autobanned) so I haven't been able to report them either. I wonder if stuff like this would be eligible, I don't see why it wouldn't.

> A lot of WhatsApp's features are enforced client-side, which means on Web they just break with DevTools. This is true. IIRC, there is also a "bug", I think it's unfixable due to WhatsApp's nature at the time, where you can send a message with a tampered quoted reply. It's also done in the DevTools by modifying the quoted message ID to something that doesn't exist. > I wonder if stuff like this would be eligible, I…

Post by yownie » Tue, Dec 10, 2024, 9:05 AM UTC

0xcoffee wrote: post #8

thimabi wrote: post #2

I think my expectations for a feature called “locked chats” are somewhat different from those of WhatsApp. What is the value of locking something if the lock can be easily bypassed? Just preventing the least sophisticated attacks? In this case, I think WhatsApp should have done better — or refrained from adding this feature at all.

Personally I use it to hide chats from my girlfriend who has access to my phone.