There's no 'backdoor' in WhatsApp

WhatsApp Denies Backdoor Claim

The backdoor takes advantage of the fact that WhatsApp's implementation of end-to-end encryption makes it possible to resend encrypted messages using different security keys, allowing for third parties to read them.

The Facebook-owned company first announced plans to connect its userbase of more than one billion with businesses last August, TechCrunch reports.

While built using Signal protocol encryption developed by Open Whisper Systems, WhatsApp has found an ability to force new encryption keys for offline users that results in the sender's messages being re-encrypted, and any other messages not marked as delivered.

'Last year, we gave all our users a better level of security by making every message, photo, video, file and call end-to-end encrypted by default.

Boelter has said that unlike the Signal protocol that will fail to send a message to a recipient if their security key changes while offline, WhatsApp has implemented it in such a way that it will automatically send an undelivered message with a new key and no warning.

When a person sends out a WhatsApp message it's encrypted with a security key. But this key is sent through the WhatsApp servers so she cannot know for sure that it is actually Bob's key. At WhatsApp, we've always believed that people's conversations should be secure and private.

Security experts had been divided on the issue, with Kevin Bocek, from security firm Venafi, calling the discovery a "serious vulnerability" and "alarming", while Lee Munson from Comparitech.com said the flaw had raised serious questions over user privacy.

All that said, it is theoretically possible to build a backdoor in the app, because the man-in-the-middle nature of WhatsApp means that it could, if it so desired, include a special extra encryption key that effectively added a third party, like the Federal Bureau of Investigation, to your conversation. As all eyes were glued on Apple's fight with the Federal Bureau of Investigation over unlocking the San Bernardino shooter's iPhone, WhatsApp took a huge step toward protecting its users' privacy by moving to encrypt all messages and calls being sent between its apps. Most likely, that change would be due to a user changing phones or reinstalling the app.

WhatsApp said Friday that the retransmission policy was a "design decision" to prevent messages from being lost in transit and described related privacy concerns as overblown. Providing that the phones aren't connected to the internet and that the sender has not switched on security notifications.

WhatsApp will notify your contacts of this when you send them a message, if they've got the app's security notifications on.

In addition to contacting Facebook, Boelter detailed his findings on the vulnerability in a blog post. This issue casts doubt on how much users can trust WhatsApp and Facebook, especially after the companies went against their initial promise not to share user data.

"While a lot of the focus of this latest revelation will be on the personal implications for billions of WhatsApp users, businesses should also be extremely concerned". A WhatsApp spokesperson told us today that the description of the vulnerability as a backdoor is "false".

Related:

  • Trump picks Rudy Giuliani to meet with companies about cybersecurity

    Trump picks Rudy Giuliani to meet with companies about cybersecurity

    Intelligence Community product and that I do not believe the leaks came from within the IC [intelligence community]", Clapper said.

    Severe flood warnings issued for the east coast of the UK

    The police and the army are now helping to evacuate some 2,500 homes from what is a largely poor neighbourhood in Essex. Some people have been evacuated due to the threat.

    Mina: Accused cop killer shot 'defenseless' Clayton on ground

    A day earlier, Zarghee Mayan, the fugitive's supervisor at Texas Fried Chicken restaurant, was arrested on the same charge. Loyd is accused of going to a restaurant where her uncle once worked to collect money for him, the arrest affidavit said.
  • Gary Neville gives his thoughts on the Dimitri Payet situation

    Gary Neville gives his thoughts on the Dimitri Payet situation

    Hammers fans particularly have had to endure some worrying body language to go with an alarming lack of application this season. Payet's departure would be a major blow for West Ham , whose first season at the London Stadium has been disastrous so far.
    Chicago police 'showed racial bias', report finds

    Chicago police 'showed racial bias', report finds

    Trump's choice to run the Justice Department as attorney general, Alabama Sen. "Quite simply, as a department, we need to do". More high-profile shooting incidents took place even as the Justice Department probe was underway.

    BSF jawan's family backs him; Rijiju says some issues reported

    My Yadav also alleged that the quality of the food was so poor that many times soldiers opted to go without instead. He said he was transferred from the BSF camp to the headquarters and had been assigned a plumber's duty.
  • Judge denies bail to Volkswagen executive held in emissions scandal

    Judge denies bail to Volkswagen executive held in emissions scandal

    The Justice Department likewise stated that Schmidt faces exactly what would be a reliable life sentence if founded guilty. Schmidt has been held since last Saturday when Federal Bureau of Investigation agents arrested him at Miami's airport.
    Federal prosecutors reach settlement with Takata

    Federal prosecutors reach settlement with Takata

    The problems started in 2013, when several automakers began airbag related recalls due to inflator units. Three former Takata executives were also indicted in the case.
    Schneiderlin close to Everton move, says Mourinho

    Schneiderlin close to Everton move, says Mourinho

    He played with the English side for seven years and helped them become a mainstay in the Premier League. With Koeman's arm around his shoulder, it might not be long before he's back to his old self.
  • New Green Lantern film coming; David Goyer to pen Green Lantern Corps

    New Green Lantern film coming; David Goyer to pen Green Lantern Corps

    The Lethal Weapon comparison suggests that the film will feature a buddy-cop relationship between John Stewart, a U.S. The " This Is Us " actor recently tweeted that he would like to be considered a candidate to play John Stewart.
    The X-Files: Fox wants more episodes in 2018

    The X-Files: Fox wants more episodes in 2018

    That's our goal", Madden said. "Those conversations are complex, but we hope to be able to announce something very shortly". While it should be longer than six episodes, don't expect the usual 22-episode order that some other broadcast shows get.
    L.L. Bean: Don't Boycott Us Over Trump Donation

    L.L. Bean: Don't Boycott Us Over Trump Donation

    The PAC, which also goes by Making Maine Great Again, ran a spate of TV and radio ads in the state toward the end of the campaign. After the report, Grab Your Wallet - a campaign that calls for boycotts of companies that sell Trump products - added L.L.

Comments

Other news