Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Reverse Engineering WhatsApp Web

github.com

Post reply on HN
Print view View original

1–10 of 127 posts

Re: Reverse Engineering WhatsApp Web

#2

Post by anonu »

Impressive work.

Obviously, WhatsApp/Facebook would want to avoid a bunch of third party apps connecting to their service. How long until they make changes to make this more difficult/impossible?

Re: Reverse Engineering WhatsApp Web

#5

Post by Thaxll »

anonu wrote: post #2

Impressive work. Obviously, WhatsApp/Facebook would want to avoid a bunch of third party apps connecting to their service. How long until they make changes to make this more difficult/impossible?

If you have a web API it's impossible to secure it, especially when you have many platforms that access it ( web / mobile ect ... )

Re: Reverse Engineering WhatsApp Web

#7

Post by aylons »

StavrosK wrote: post #6
ktosobcy wrote: post #4

Wouldn't it be better to simply start convincing your friends to use something more open, where you have choice of the client? It feels like solving the problem from the wrong angle…

Better? Yes. Easier? No. Besides, what's more open, as usable and secure?

Signal. It is at least as secure as Whats App by design, has pratically the same interface and also a Chrome-based desktop app that works untethered from the phone app.

Re: Reverse Engineering WhatsApp Web

#8

Post by salqadri »

Wow that's impressive. But I would imagine WhatsApp/Facebook can just change their protocol at any time since it is easy to redeploy a new version of the WhatsApp Web client, thus breaking any 3p clients built on the original protocol. That would require yet another reverse engineering effort that can take a while. And by the time its reverse engineered again, they can yet again change the protocol. So the only reliable way to create 3p clients would be if WhatsApp itself publicly publishes its protocol.

Re: Reverse Engineering WhatsApp Web

#9

Post by StavrosK »

aylons wrote: post #7
StavrosK wrote: post #6

Earlier quoted context omitted.

Better? Yes. Easier? No. Besides, what's more open, as usable and secure?

Signal. It is at least as secure as Whats App by design, has pratically the same interface and also a Chrome-based desktop app that works untethered from the phone app.

It's also exactly as open as WhatsApp, but not as usable.

Re: Reverse Engineering WhatsApp Web

#10

Post by lxglv »

aylons wrote: post #7
StavrosK wrote: post #6

Earlier quoted context omitted.

Better? Yes. Easier? No. Besides, what's more open, as usable and secure?

Signal. It is at least as secure as Whats App by design, has pratically the same interface and also a Chrome-based desktop app that works untethered from the phone app.

Out of curiosity: I’ve noticed a long-term sceptical attitude to telegram in HN audience and have seen multiple arguments against it. Something like that their crypto can’t be trusted, that it’s not time-proven. Don’t you know any good source with some sort of domain expert explanation, why shouldn’t it be used or trusted? No intention to start any flame against Signal, only curiosity regarding telegram flaws. Personal point of view is also appreciated.
Post reply on HN