'WHATSAPP, TELEGRAM MESSENGERS INSECURE': Messengers like WhatsApp expose personal data via discovery services that allow users to find contacts based on phone numbers from their address book, say researchers. When installing a mobile messenger like WhatsApp, new users can instantly start texting existing contacts based on the phone numbers stored on their device. For this to happen, users must grant the app permission to access and regularly upload their address book to company servers in a process called mobile contact discovery. The study from the Technical University of Darmstadt and the University of Würzburg in Germany shows that currently deployed contact discovery services severely threaten the privacy of billions of users. Utilizing very few resources, the researchers were able to perform practical crawling attacks on the popular messengers WhatsApp, Signal and Telegram. https://bit.ly/33CEOqR
Supplied