If you're sending a "View Once" message,horror sex videos photo, or video through WhatsApp, don't be so sure that the receiver can't view it again.
Security researchers with crypto wallet ZenGo recently discovered a bug that allowed WhatsApp users to view "View Once" messages as many times as they liked.
SEE ALSO: Meta updates WhatsApp and Messenger third-party chats in EuropeIn response, WhatsApp patched the issue. But, ZenGo researchers then discovered another exploit in WhatsApp's temporary fix that once again allowed them to access these messages that had supposedly disappeared.
WhatsApp launched its View Once feature in 2021. View Once allows users to send texts, photos, and videos that disappear after the recipient initially accesses them.
Furthermore, to ensure the ephemeral nature of these messages, WhatsApp disables screenshots from being used in the app on View Once messages through iOS and Android. In addition, WhatsApp limits View Once messages to the mobile apps only.
However, in a post last week, ZenGo Security Research Manager Tal Be'ery detailed an exploit that allowed his team to access View Once messages over and over again.
Basically, as Be'ery explains, the View Once messages are only restricted from view in the mobile apps after being viewed. The media continues to exist on WhatsApp's servers. If a user can find the URL for the media file, they can access the message or media file that was supposed to have disappeared.
Be’ery went through the official channels with WhatsApp's parent company Meta and reported the exploit through their bug bounty program on August 26. It was too late though. Be'ery soon found that the bug was already in the wild, as a Chrome extension popped up allowing users to access their already-viewed View Once messages through WhatsApp's web app. ZenGo went public with the exploit and published their report last week on Sept. 9.
It appears the issue has been taken seriously by Meta, at least after Be’ery went public with the exploit. Meta appears to have released a fix for the WhasApp View Once bug on Sept. 12.
According to a new reportby Be'ery, Meta's patch "changes the way View Once media messages are saved to the application’s databases and redact some of the information that enables the media viewing."
The fix appears to have broken the previously mentioned "View Once Photos Bypass" Chrome extension as well.
This Tweet is currently unavailable. It might be loading or has been removed.
But, the fix is "still not enough," according to Be'ery and can be exploited with a workaround. In fact, as Be'ery discovered, the creator of the View Once bypass Chrome extension published an update saying that they've already discovered a new exploit in order to once again access View Once media.
Be'ery also publisheda video showing how View Once messages are still accessible.
Meta told Mashable that it's taking multiple steps to deal with the View Once issue. The initial fix was meant to be temporary as Meta restructures how View Once works in WhatsApp on the web.
"As we said before, we are in the process of rolling out multiple updates to View Once on web," a WhatsApp spokesperson told Mashable. "Those additional updates are forthcoming."
UPDATE: Sep. 18, 2024, 2:04 p.m. EDT This piece has been updated with a statement and additional information from Meta.
Topics Cybersecurity Social Media WhatsApp Meta
RB Leipzig vs. Liverpool 2024 livestream: Watch Champions League for freeMeta tests facial recognition to fight celebrity scamsSpotify drops new custom playlist art feature to take your playlists to the next levelBest audio deals: Save up to 35% on Anker earbuds, headphones, and portable speakersAston Villa vs. Bologna 2024 livestream: Watch Champions League for freeBoston Celtics vs. New York Knicks 2024 livestream: Watch NBA for freeNinja deals: Save on air fryers, blenders, and moreRavens vs. Buccaneers 2024 livestream: How to watch NFL for freeNew MacBooks with M4 chip might come as soon as next weekMeta suspends celebrity plane tracking accounts like ElonJetWayfair Black Friday Preview sale: Slash $770 off a cooling queen mattressStuff Your Kindle Day Oct. 24: Free contemporary mystery booksHinge ADHD report: Most daters with ADHD feel misunderstoodBoston Celtics vs. New York Knicks 2024 livestream: Watch NBA for freeIs 'Trap' streaming yet? Release date, Max deals, and moreRams vs. Vikings 2024 livestream: How to watch NFL for freePolice may track you to an abortion clinic with this tool, report showsWatch Love Is Blind like a contestant with viral challengeNYT Connections Sports Edition hints and answers for October 23: Tips to solve Connections #30.Meta tests facial recognition to fight celebrity scams Douyin fires 88 workers after anti Chinese lidar maker Hesai says it could turn profitable by year end · TechNode SpaceX droneship footage captures Falcon 9 launch and landing Best Kindle Scribe deal: Save $145 on the Kindle Scribe bundle Fitbit loses more functionality as web app ditched General Motors reduces workforce in China, mulls restructuring with partner · TechNode NetEase Cloud Music suffers two NASA's asteroid crash captured in dramatic before and after pictures TSMC to break ground on first European 12 Best speaker deal: Get an Apple HomePod Mini for $79.99 at Best Buy Fat Bear Week: Bears sense the world in an extraordinary way Amazing volcano's massive eruption broke another impressive record Zeekr gets approval to test Level 3 autonomous vehicles in China · TechNode Xiaomi smartphone to debut Qualcomm’s Snapdragon 7s Gen 3 next month · TechNode Wells Fargo reportedly fired people for alleged 'simulation of keyboard activity' Google makes millions from greenwashing ads, report says Namibia vs. England 2024 livestream: Watch T20 World Cup for free Dongfeng’s refreshed MPV makes debut featuring Huawei’s assisted driving tech · TechNode BYD adds Pakistan to its global EV production footprint · TechNode 'House of the Dragon' recap: The most WTF moments so far ahead of Season 2
3.4854s , 10519.578125 kb
Copyright © 2025 Powered by 【horror sex videos】,Fresh Information Network