And then they changed their app to use Unity and WASM, and it's all Assembly-esque in the developer tool.
The other day I wanted to make reservations for a service to send my luggage from the airport to my house in Japan, and the form was giving me errors.
Searching for the error string around I realized there was a timeout set on the client side, so I increased it and could slowly but smoothly fill in all the information that required a server check.
I guess they never bothered to debug their system when accessing it from the other side of the world. All it needed was a few extra milliseconds for the requests to arrive in time.
Meanwhile, if you put your ZIP in you just get a little friendly "We're working on it! :)".
I love data firehoses like that.
I've done some research into this (haven't published it) but also can't get Facebook's bug bounty report tool to work (whenever I create a facebook account it gets autobanned) so I haven't been able to report them either. I wonder if stuff like this would be eligible, I don't see why it wouldn't.
> I wonder if stuff like this would be eligible, I don't see why it wouldn't. I just reported it, let's see if it's eligible
Reminds me of a security company that claimed they could force a watermark onto any content in their web-front-end. Turns out it was a canvas overlay you could just simple delete from the HTML. LOL.
What is the value of locking something if the lock can be easily bypassed? Just preventing the least sophisticated attacks?
In this case, I think WhatsApp should have done better — or refrained from adding this feature at all.
Amusingly, these two questions apply just as well to almost all physical locks in the material world. I suppose that makes WhatsApp's "lock" analogy apt.
___
*) I mean, it can be unlocked by literally opening JS console and typing one command. That's a gate latch at best.
At least they should encrypt the messages instead of making it seems like it's encrypted. AFAIK, in the mobile WhatsApp, locked chats will get wiped without screen lock or secret code. They make it seem like it's practically impossible to recover the messages without doing real crypto stuff on the locked chats' messages.
Speaking as someone who has lived with my wife for over 10 years and where we can each access each other’s phones (for reasons of administrative convenience), neither of us have ever “snooped” on each other.
So when I hear of people taking advantage of features to hide chats from their partner it makes me wonder about the psychological health of either the relationship, one, or both of the partners.
There are absolutely psychologically unhealthy controlling partners who “snoop” on their partners unreasonably dictating what is and isn’t allowed. And at the same time there are also unfaithful partners who are having the kind of conversations with other people that they really shouldn’t when they’re in a committed relationship.
Only other reason I can think to hide chats are risqué group chats with friends posting arguably inappropriate content, but again, if your partner is snooping on this and then getting controlling, that’s not really healthy.
Finally, I will admit I sometimes use incognito mode on my web browser at times (but never for conversations), so perhaps I’m a bit of a hypocrite.
https://superuser.com/questions/1856709/whatsapp-web-your-co...
I turned off VPN.No dice.
