Researcher Discovers 4th WhatsApp View Once Bypass; Meta Won’t Patch

Summary

A researcher has discovered a fourth method to bypass WhatsApp's 'View Once' messaging feature, allowing recipients to save media. Meta has stated they will not be patching this vulnerability as it relies on the use of modified client applications.

IFF Assessment

FOE

This is bad news for defenders because a feature designed for privacy is being bypassed, potentially exposing sensitive information.

Defender Context

This highlights the ongoing challenge of securing features that rely on client-side controls, especially when users can employ modified applications. Defenders should be aware that privacy features can be circumvented and that user reliance on end-to-end encryption does not guarantee complete protection against data capture via alternative means.

Read Full Story →