ExtraTorrent.cc - The Largest Bittorent SystemLogin   |   Register
Latest Articles
Most searched
Hot torrents
First Cams
View Torrent Info: Moana 2016 HD-TS XviD AC3-CPG
View Torrent Info: Shut.In.2016.HDCAM.x264 - Lesnar
View Torrent Info: Fantastic Beast and Where To Find Them 2016 HD-TS x264-CPG
View Torrent Info: Arrival 2016 HDCAM x264 AC3-TuttyFruity
Hot torrents
View Torrent Info: End.of.a.Gun.2016.BRRip.XviD.AC3-EVO
View Torrent Info: Sully.2016.BRRip.XviD.AC3-ETRG
View Torrent Info: Storks.2016.BRRip.XviD.AC3-EVO
View Torrent Info: The.Accountant.2016.HC.HDRip.X264.AC3-EVO
Hot torrents
H264 X264
View Torrent Info: Sully.2016.720p.BRRip.x264.AAC-ETRG
View Torrent Info: Storks.2016.720p.BRRip.x264.AAC-ETRG
View Torrent Info: Eliminators.2016.720p.BRRip.x264.AAC-ETRG
View Torrent Info: Morgan.2016.720p.BRRip.x264.AAC-ETRG
Hot torrents
View Torrent Info: Bellator 166 Dantas vs Warren 2 HDTV x264-Ebi [TJET]
View Torrent Info: Ghost.Adventures.S13E10.Dumas.Brothel.HDTV.x264-SPASM
View Torrent Info: Van.Helsing.S01E12.WEB-DL.x264-FUM[ettv]
View Torrent Info: Z.Nation.S03E12.WEB-DL.x264-FUM[ettv]
View Torrent Info: Morgan (2016) 1080p BDRip DUAL DD 5.1 x264 ~ PyZ
View Torrent Info: Kahaani 2 (2016) Hindi 1CD Desi Cam x264 AAC - Downloadhub
View Torrent Info: Air Bud (1997) 720p HDTVRip x264 Eng Subs [Dual Audio] [Hindi 2.0 - English 5.1] -=!Dr.STAR!=-
View Torrent Info: Ardaas (2016) DVDRIP 1CDRIP x264 AAC ESub [DDR]
To add new messages please Login or Register for FREE
Warning! Stop Government from Tracking Your Torrenting!
Your IP Address is   Location is United States
Your Internet Provider and Government can track your internet activity! Hide your IP and LOCATION with a VPN
ExtraTorrent strongly recommends using Trust.Zone VPN to anonymize your torrenting. It's FREE!

ExtraTorrent.cc > Articles > Android WhatsApp Liable to Theft

Android WhatsApp Liable to Theft

Android WhatsApp Liable to Theft

Added: Sunday, March 23rd, 2014
Category: Bit Torrent Freedom > The Industries Of Records, Gaming, Software, Movies
Tags:ET, p2p, Torrent, Piracy, Peer To Peer, Network, Hackers, Internet, BitTorrent, Google, utorrent, bitcomet, extratorrent, 2013, www.extratorrent.cc
Security researchers have just discovered security flaw in Android version of WhatsApp, which stores user database on SD card with poorly secured encryption keys and thus can allow another app to upload your entire database of chats to a 3rd-party server, without your consent.


The flaw in question stems from the Android OS’s handling of external storage coupled with lax security standards of the app. Security experts point out that the flaw allows any Android app with access to the phone’s SD card to read and upload WhatsApp’s database. Taking into account that the majority of users allow everything on their Android device, it isn’t much of a problem.

Android’s fault isthat the OS only allows all-or-nothing access to the SD card. This means that any app able to read and write to the external storage can also access data other apps store there. Aside from the fact that WhatsApp uses that external storage to hold its database, on its earlier versions it does so without any encryption at all. As for its later versions, which encrypt the database, they do so with a key which can be easily extracted from the app. As a result, any app can read the WhatsApp database and the chats from the encrypted databases.

So, what’s the way out? To avoid the risk of having your chats stolen, be wary of granting suspicious apps access to your SD card. It is still unclear whether WhatsApp or Android itself is more to blame for the vulnerability. Android’s policy of allowing total access to the external storage differs from Apple’s far more controlled security on iOS devices. Apple “sandboxes” each app in a way that prevents others from accessing its data.

In the meantime, Android openness allows developers to create apps which can’t be run on an iOS device, but opens up the risk of flaws like this one. This isn’t the only security hole at WhatsApp, by the way. A few months ago, security researchers proved it was possible to decrypt messages sent thanks to data gained through eavesdropping on the WhatsApp connection.

Moreover, one of the flaws which enabled this latest attack has been known about for at least a year, because tool used to decrypted the database was released back in 2012. Probably, this is why Germany’s privacy regulators recommended all WhatsApp users to switch to a more secure service this past February.

March 23rd,2014

Posted by: 

Date:  Sunday, March 23rd, 2014

Comments (13) (please add your comment »)

posted by Vip MemberTrusted UploaderET loverTurtle (2014-03-24 08:50:23)
MafiaSSS avatarYes best way is clear your chat after you leave the conversation or install good A/V...

posted by (2014-03-24 11:46:01)
kingtiger01 avatarhere is a even better idea... CALL THEM INSTEAD!

posted by ET loverKitty (2014-03-24 13:31:23)
greymongel avatarthe phone ?? BAH thats just as bad,.......u got to use carrier pigioens to move our letters

posted by Trusted UploaderET junkieET lover (2014-03-24 17:02:31)
Maverick avatarsimply root the android
install droid wall/fire wall
now select only those apps you want to access to internet.....
problem solved........

posted by (2014-03-24 18:20:22)
No avatar....Aside from the fact that WhatsApp uses that external storage to hold its database.... Total BS. It doesn't use external storage.

....Apple’s far more controlled security on iOS devices.... Ha Ha Ha Ha

Completely agree with monu987 + there are apps which can restricts other apps to browse any files which you don't want them to.

posted by (2014-03-24 23:32:56)
Darkan9el avatarNow facebook have whatsapp, why stay at all move to telegram and a +1 for droidwall

posted by (2014-03-25 11:38:54)
No avatarwe should start using telegram ...

posted by ET loverSuperman (2014-03-25 11:57:06)
tonymengela avatarI am sure this was not by accident

posted by (2014-03-25 14:05:44)
No avatarthis is an attack on android by other os maybe windows or anapple iOS, n it is not clear which Security researchers have just discovered security flaw, is it burmese security researchers?? or ?? Lol!

posted by (2014-03-25 18:09:49)
htimanpro avatarios is more controlled and that's why people don't buy i-phones because ppl don't have control on the device they have invested upon..
whatever anyone says.. i-phone sucks, android rocks.

posted by (2014-03-27 01:03:52)
No avatarheloo

posted by Site FriendET loverSuperman (2014-03-27 05:11:52)
Embolism avatarhmmm Iphone have always been low on my esteem list due to proprietary software and its requiring jailbreaking to allow end users to use it as they wish which in itself invalidates any warranty they nay have on them.
As far as security goes at this time it seems that the only real security is from Blackphones which at around 380 GBP are the cheaper choice given IPhones are around 500 to 600 GBP in the UK,built on Android the Blackphone ships with 2 years free silent circle subscription and a package of goodies that make the phone hack proof with secure encrypted comms,online storage etc,etc,I see this as one way to go since whatsapp exploits and vulnerabilities in Samsung phones etc do nothing for peace of mind let alone ones privacy and security.

posted by Site FriendET loverSuperman (2014-03-27 05:16:18)
Embolism avatar@11 hello & welcome ET chat page link is situated to the left margin on site page.

Articles Search
Most Popular Stories
Articles Categories
Articles Tags

Home - Browse Torrents - Upload Torrent - Stat - Forum - FAQ - Login
ExtraTorrent.cc is in compliance with copyrights
BitCoin: 12DiyqsWhENahDzdhdYsRrCw8FPQVcCkcm
Can't load ExtraTorrent? Try our official mirrors: etmirror.com - etproxy.com - extratorrentonline.com - extratorrentlive.com
2006-2016 ExtraTorrent.cc2