The Facebook deal for WhatsApp drew attention for its whopping price tag, but has also brought out fresh criticism over security for the billions of messages delivered on the platform.
WhatsApp, which is to be acquired for $19 billion, says on its website that "communication between your phone and our server is fully encrypted."
The company warns users need to be aware that when they send messages, the recipient's device may not be secure. But it says it does not store any chat history and that messages are wiped off its system after delivery.
Yet security researchers and others point out that there may be vulnerabilities in the system used by some 450 million people globally.
Paul Jauregui at the security firm Praetorian said in a blog post Thursday that WhatsApp security and encryption are not ideal, citing vulnerabilities in the way it handles SSL, the secure socket layer protocol for communications.
The group's mobile security test "picked up on several SSL-related security issues affecting the confidentiality of WhatsApp user data that passes in transit to back-end servers," Jauregui said.
"This is the kind of stuff the NSA (National Security Agency) would love. It basically allows them -- or an attacker -- to man-in-the-middle the connection and then downgrade the encryption so they can break it and sniff the traffic. These security issues put WhatsApp user information and communications at risk."
Jauregui noted that Praetorian would need authorization from Facebook and WhatsApp to do a more thorough security evaluation.
He added that it would be "not very difficult" to patch the security flaws.
Serious Privacy Concerns
Meanwhile in Germany, the data commissioner in the state of Schleswig-Holstein, said in a statement this week the deal raises serious privacy concerns and that WhatsApp does not comply with European data protection rules.
The official, Thilo Weichert, said in a statement that people should opt out of WhatsApp for more "trusted services."
Last October, Dutch security researcher Thijs Alkemade posted a blog saying that the encryption can be circumvented, making it feasible "that anyone who is able to eavesdrop on your WhatsApp connection is capable of decrypting your messages, given enough effort."
WhatsApp did not respond to an AFP query on the security claims.
But some rival services say the Facebook-WhatsApp tie-up is likely to hurt confidence in the messaging app.
Nico Sell, co-founder of the security-focused app Wickr said it has seen "thousands more people than normal" downloading its app since Facebook's announcement.
"I think people will swap quickly out of WhatsApp now that it's part of Facebook," she told AFP.
Sell said Facebook's core business is monetizing data, while Wickr aims at protecting user anonymity and privacy, by using top-grade encryption and paying bounties to hackers who discover any security flaws.
- 'Tons of data vulnerable' -
"They say they won't put ads on WhatsApp. But that doesn't mean they can't feed the beast with the data they are sitting on," she said. "There are tons of data that can be analyzed from conversations with your friends and family."
Sell said that in light of documents leaked about NSA surveillance in the past year, "people are becoming more aware of how easy it is to abuse your conversations and your data."
Serge Malenkovich at the security firm Kaspersky said however users should not panic over WhatsApp and Facebook.
"There are no new reasons to worry about messaging privacy," he said in a blog post.
"Honestly speaking, WhatsApp was never meant to be a true confidential messaging tool... confidential data shouldn't be sent unencrypted over standard communication channels, be it Facebook, WhatsApp or e-mail. Use dedicated security tools to protect your data from prying eyes."
But he said a bigger threat is scammers who send messages urging you to "confirm your WhatsApp account" or "opt out of Facebook ads inside WhatsApp."
"Those messages will definitely contain a malicious link and clicking on it may infect your device or lead you to a phishing page trying to steal personal data from you," Malenkovich said.
AFP
Sat Feb 22 2014
Letupan bom Narathiwat: Ibu mengandung antara dua rakyat berdepan detik cemas
Dua rakyat Malaysia antara empat individu yang cedera dalam satu letupan bom di Narathiwat, yang berlaku pada 9.35 malam.
JDT kecewa Selangor FC tidak hadir Piala Sumbangsih
JDT harap Selangor FC dapat mempertimbangkan semula keputusan untuk tidak hadir dari perlawanan ini.
Kerajaan Kelantan salur RM300,000 untuk jemaah haji
Bantuan disalurkan menerusi Tabung Haji untuk membantu melancarkan urusan jemaah bagi Musim Haji 1445H/2024M.
Kumpulan pertama 282 jemaah haji berlepas ke Tanah Suci
Kumpulan pertama 282 jemaah haji Malaysia berlepas ke Tanah Suci pada tengah malam tadi dengan penerbangan Malaysia Airlines.
Tiga remaja sesat di Gunung Keriang semasa cari batu kristal
Dua lagi pendaki menemui jalan keluar dan bergegas turun untuk meminta bantuan.
Faisal seorang yang ‘kebal’ - Ayah
Doa Abdul Halim buat anaknya tidak pernah putus selain berterima kasih kepada semua pihak yang turut prihatin dengan apa yang menimpa Faisal.
Lelaki OKU maut, ibu cedera dalam kejadian samun di rumah
Mangsa yang juga OKU bisu ditemui maut dalam keadaan mulutnya ditampal pita pelekat manakala ibunya yang berusia 70 tahun luka pada jari kanan.
103 projek bekalan air Pahang libatkan kos RM121.2 juta telah disiapkan
Sebanyak 103 projek pembangunan bekalan air Pahang membabitkan kos sebanyak RM121.2 juta telah disiapkan setakat ini, kata Menteri Besar Datuk Seri Wan Rosdy Wan Ismail.
Inndeks Harga Pengeluar Perkhidmatan naik 1.0 peratus pada suku pertama
IHPRP mencatatkan 115.8 mata pada suku pertama 2024 (S1 2024), meningkat satu peratus, yang sama seperti suku keempat 2023 (S4 2023), kata DOSM.
Perancang kewangan perlu lapor kegiatan meragukan kepada pihak berkuasa
Perancang kewangan perlu memainkan peranan untuk melaporkan sebarang kegiatan mencurigakan yang menjurus kepada pengubahan wang haram kepada pihak berkuasa.
Anwar hulur bantuan kepada keluarga Pak Amjal aktivis awal reformasi
Perdana Menteri Datuk Seri Anwar Ibrahim menghulurkan bantuan kepada isteri aktivis awal reformasi Jalaluddin Ab Manaf yang menghidap penyakit angin ahmar.
NRES rancang lestarikan industri plastik sekali guna elak pencemaran
Kementerian Sumber Asli dan Kelestarian Alam (NRES) merancang untuk melestarikan industri plastik sekali guna menerusi satu peralihan yang seimbang dalam bidang itu.
Anwar harap terminal baharu LTSIP jana lebih banyak peluang ekonomi di Kelantan
Anwar Ibrahim berharap terminal baharu Lapangan Terbang Sultan Ismail Petra (LTSIP) fasa satu, yang mula beroperasi semalam, mampu menjana lebih banyak peluang ekonomi di Kelantan.
Terima anugerah Reader's Digest buat kali kelima, Ahmad Zahid ucap tahniah kepada Kemas
Timbalan Perdana Menteri Datuk Seri Ahmad Zahid Hamidi mengucapkan tahniah kepada Jabatan Kemajuan Masyarakat (Kemas) yang meraih Anugerah Jenama Paling Dipercayai buat kali kelima bagi kategori Pu
AIM menang Anugerah Industri Kewangan Islam Global
AIM memenangi anugerah Islamic Finance News apabila dinobat IFN Best Islamic Microfinance Institution, serta menerima dua anugerah di bawah Global Good Governance Awards (3G).
Pulau Pinang akan bincang, teliti kenaikan gaji penjawat awam negeri - Chow
Kerajaan Pulau Pinang akan membincangkan mengenai kenaikan gaji penjawat awam di negeri itu pada Majlis Mesyuarat Kerajaan Negeri akan datang, menurut Ketua Menteri Chow Kon Yeow.
Jambatan Bailey di Jalan Kuantan-Segamat dibuka semula hari ini
Jambatan Bailey di Seksyen 102 Jalan Kuantan-Segamat yang ditutup sebelum ini untuk kerja-kerja pembaikan dibuka semula bermula 4 petang tadi.
Pengguna Facebook, Instagram luang 60% masa menonton video
Menurut Meta, kini pengguna meluangkan 60% daripada masa penggunaan di platform berkenaan dengan menonton video.
Semua pihak diminta siap siaga, segera salurkan bantuan mangsa banjir - Ab Rauf
Wakil rakyat dan agensi berkaitan termasuk pihak berkuasa tempatan diarahkan supaya siap siaga dan menyalurkan bantuan awal kepada semua mangsa yang terjejas akibat banjir terutama di Alor Gajah.
'Bila boss?' - Sian See tuntut janji Rafizi
Pempengaruh media sosial, Lim Sian See memberi peringatan kepada Menteri Ekonomi, Rafizi Ramli berhubung jemputan untuk muncul dalam program podcast 'berjudul, ang Bakar Menteri'.