AIRLINK 183.86 Increased By ▲ 3.00 (1.66%)
BOP 11.82 Increased By ▲ 0.15 (1.29%)
CNERGY 7.52 Increased By ▲ 0.02 (0.27%)
FCCL 46.38 Increased By ▲ 0.31 (0.67%)
FFL 16.15 Decreased By ▼ -0.11 (-0.68%)
FLYNG 27.78 Increased By ▲ 0.54 (1.98%)
HUBC 135.09 Increased By ▲ 3.02 (2.29%)
HUMNL 13.06 Increased By ▲ 0.04 (0.31%)
KEL 4.62 Increased By ▲ 0.05 (1.09%)
KOSM 6.20 Increased By ▲ 0.10 (1.64%)
MLCF 59.17 No Change ▼ 0.00 (0%)
OGDC 223.06 Increased By ▲ 1.68 (0.76%)
PACE 5.79 Decreased By ▼ -0.08 (-1.36%)
PAEL 44.95 Decreased By ▼ -0.59 (-1.3%)
PIAHCLA 17.66 Decreased By ▼ -0.30 (-1.67%)
PIBTL 10.66 Increased By ▲ 0.48 (4.72%)
POWER 11.73 Decreased By ▼ -0.12 (-1.01%)
PPL 187.05 Increased By ▲ 2.96 (1.61%)
PRL 36.27 Decreased By ▼ -0.27 (-0.74%)
PTC 24.77 Decreased By ▼ -0.19 (-0.76%)
SEARL 100.95 Decreased By ▼ -0.28 (-0.28%)
SILK 1.15 Decreased By ▼ -0.02 (-1.71%)
SSGC 36.96 Decreased By ▼ -0.30 (-0.81%)
SYM 15.69 Increased By ▲ 0.49 (3.22%)
TELE 7.88 Increased By ▲ 0.08 (1.03%)
TPLP 10.83 Increased By ▲ 0.19 (1.79%)
TRG 66.62 Increased By ▲ 6.06 (10.01%)
WAVESAPP 10.82 No Change ▼ 0.00 (0%)
WTL 1.33 Increased By ▲ 0.01 (0.76%)
YOUW 3.81 Increased By ▲ 0.10 (2.7%)
BR100 12,458 Increased By 125.9 (1.02%)
BR30 38,307 Increased By 534.6 (1.42%)
KSE100 117,001 Increased By 801.5 (0.69%)
KSE30 36,134 Increased By 227.9 (0.63%)

imageWASHINGTON: The Facebook deal for WhatsApp drew attention for its whopping price tag, but has also brought out fresh criticism over security for the billions of messages delivered on the platform.

WhatsApp, which is to be acquired for $19 billion, says on its website that "communication between your phone and our server is fully encrypted."

The company warns users need to be aware that when they send messages, the recipient's device may not be secure. But it says it does not store any chat history and that messages are wiped off its system after delivery.

Yet security researchers and others point out that there may be vulnerabilities in the system used by some 450 million people globally.

Paul Jauregui at the security firm Praetorian said in a blog post Thursday that WhatsApp security and encryption are not ideal, citing vulnerabilities in the way it handles SSL, the secure socket layer protocol for communications.

The group's mobile security test "picked up on several SSL-related security issues affecting the confidentiality of WhatsApp user data that passes in transit to back-end servers," Jauregui said.

"This is the kind of stuff the NSA (National Security Agency) would love. It basically allows them -- or an attacker -- to man-in-the-middle the connection and then downgrade the encryption so they can break it and sniff the traffic. These security issues put WhatsApp user information and communications at risk."

Jauregui noted that Praetorian would need authorization from Facebook and WhatsApp to do a more thorough security evaluation.

He added that it would be "not very difficult" to patch the security flaws.

Comments

Comments are closed.