App used by 1.5 billion has "crucial" flaw
<p><span style="font-weight: 400;">A surprising flaw in the popular app WhatsApp allows hackers to crash the app by sending a simple text message.</span></p>
<p><span style="font-weight: 400;">The flaw is so serious that the text can force users to reinstall WhatsApp to fix the issue and group chats impacted by the issue disappear forever.</span></p>
<p><span style="font-weight: 400;">Cyber experts at security firm Check Point discovered the flaw, saying that one text can crash multiple phones in one go. </span></p>
<p><span style="font-weight: 400;">“The impact of this vulnerability is potentially tremendous, since WhatsApp is the main communication service for many people,” Check Point researchers </span><a href="https://research.checkpoint.com/2019/breakingapp-whatsapp-crash-data-loss-bug/"><span style="font-weight: 400;">explained</span></a><span style="font-weight: 400;">.</span></p>
<p><span style="font-weight: 400;">“Thus, the bug compromises the availability of the app which is a crucial for our daily activities.”</span></p>
<p><span style="font-weight: 400;">With as many as 65 billion messages being sent via WhatsApp every day, bugs in the system can impact massive numbers of people.</span></p>
<p><span style="font-weight: 400;">Once you’ve received the message in a group chat, the app crashes for everyone in the chat and will require you to uninstall and reinstall WhatsApp.</span></p>
<p><span style="font-weight: 400;">After the app has been reinstalled, you will be unable to return to your group chat or access the chat history.</span></p>
<p><span style="font-weight: 400;">When a user sends a message inside a group chat, the app examines the data to discover who sent the message.</span></p>
<p><span style="font-weight: 400;">Check Point have since created a tool that accesses this data and edits it, replacing it with a message that causes the app to crash.</span></p>
<p><span style="font-weight: 400;">“The bug will crash the app and it will continue to crash even after we reopen WhatsApp, resulting in a crash loop,” Check Point explained.</span></p>
<p><span style="font-weight: 400;">“Moreover, the user will not be able to return to the group, and all the data that was written and shared in the group is now gone for good.</span></p>
<p><span style="font-weight: 400;">“The group cannot be restored after the crash has happened and will have to be deleted in order to stop the crash.”</span></p>
<p><span style="font-weight: 400;">Naturally, WhatsApp have already fixed the bug, but you’ll need to update the app to make sure you’re safe. If the app is updated to the latest version already, it’s impossible for your phone to be attacked by this bug.</span></p>
<blockquote style="background: #FFF; border: 0; border-radius: 3px; box-shadow: 0 0 1px 0 rgba(0,0,0,0.5),0 1px 10px 0 rgba(0,0,0,0.15); margin: 1px; max-width: 540px; min-width: 326px; padding: 0; width: calc(100% - 2px);" class="instagram-media" data-instgrm-captioned="" data-instgrm-permalink="https://www.instagram.com/p/B4i4kG1FH5o/?utm_source=ig_embed&utm_campaign=loading" data-instgrm-version="12">
<div style="padding: 16px;">
<div style="display: flex; flex-direction: row; align-items: center;">
<div style="background-color: #f4f4f4; border-radius: 50%; flex-grow: 0; height: 40px; margin-right: 14px; width: 40px;"></div>
<div style="display: flex; flex-direction: column; flex-grow: 1; justify-content: center;">
<div style="background-color: #f4f4f4; border-radius: 4px; flex-grow: 0; height: 14px; margin-bottom: 6px; width: 100px;"></div>
<div style="background-color: #f4f4f4; border-radius: 4px; flex-grow: 0; height: 14px; width: 60px;"></div>
</div>
</div>
<div style="padding: 19% 0;"></div>
<div style="display: block; height: 50px; margin: 0 auto 12px; width: 50px;"></div>
<div style="padding-top: 8px;">
<div style="color: #3897f0; font-family: Arial,sans-serif; font-size: 14px; font-style: normal; font-weight: 550; line-height: 18px;">View this post on Instagram</div>
</div>
<p style="margin: 8px 0 0 0; padding: 0 4px;"><a style="color: #000; font-family: Arial,sans-serif; font-size: 14px; font-style: normal; font-weight: normal; line-height: 17px; text-decoration: none; word-wrap: break-word;" rel="noopener" href="https://www.instagram.com/p/B4i4kG1FH5o/?utm_source=ig_embed&utm_campaign=loading" target="_blank">Avoid being added to a group chat with people outside of your inner circle. 👯♀ Now you can have more control over who can add you to a group. To enable this setting, update to the latest version of #WhatsApp! https://blog.whatsapp.com/10000661/New-Privacy-Settings-for-Groups</a></p>
<p style="color: #c9c8cd; font-family: Arial,sans-serif; font-size: 14px; line-height: 17px; margin-bottom: 0; margin-top: 8px; overflow: hidden; padding: 8px 0 7px; text-align: center; text-overflow: ellipsis; white-space: nowrap;">A post shared by <a style="color: #c9c8cd; font-family: Arial,sans-serif; font-size: 14px; font-style: normal; font-weight: normal; line-height: 17px;" rel="noopener" href="https://www.instagram.com/whatsapp/?utm_source=ig_embed&utm_campaign=loading" target="_blank"> WhatsApp</a> (@whatsapp) on Nov 6, 2019 at 5:02pm PST</p>
</div>
</blockquote>
<p><span style="font-weight: 400;">“WhatsApp greatly values the work of the technology community to help us maintain strong security for our users globally,” said WhatsApp software engineer Ehren Kret in a statement sent to </span><a href="https://www.thesun.co.uk/tech/10569563/whatsapp-bug-crash-app-reinstall-text/"><span style="font-weight: 400;">The Sun</span></a><span style="font-weight: 400;">.</span></p>
<p><span style="font-weight: 400;">“Thanks to the responsible submission from Check Point to our bug bounty program, we quickly resolved this issue for all WhatsApp apps in mid-September.</span></p>
<p><span style="font-weight: 400;">“We have also recently added new controls to prevent people from being added to unwanted groups to avoid communication with untrusted parties altogether.”</span></p>