Massive breach at WhatsApp puts 1.5 bn users at risk

Agencies
May 14, 2019

San Francisco, May 14: Facebook's WhatsApp urged users to upgrade to the latest version of its popular messaging app after reporting that users might be vulnerable to having malicious spyware installed on phones without their knowledge.

WhatsApp, one of the most popular messaging tools, is used by 1.5 billion people monthly and it has touted its high level of security and privacy, with messages on its platform being encrypted end to end.

"WhatsApp encourages people to upgrade to the latest version of our app, as well as keep their mobile operating system up to date, to protect against potential targeted exploits designed to compromise information stored on mobile devices," a spokesman said.

"We are constantly working alongside industry partners to provide the latest security enhancements to help protect our users," he said. WhatsApp did not elaborate further.

WhatsApp informed its lead regulator in the European Union, Ireland's Data Protection Commission (DPC), of a "serious security vulnerability" on its platform.

"The DPC understands that the vulnerability may have enabled a malicious actor to install unauthorised software and gain access to personal data on devices which have WhatsApp installed," the regulator said in a statement.

"WhatsApp are still investigating as to whether any WhatsApp EU user data has been affected as a result of this incident," the DPC said, adding that WhatsApp informed it of the incident late on Monday.

Earlier, the Financial Times (FT) reported that a vulnerability in WhatsApp allowed attackers to inject spyware on phones by ringing up targets using the app's phone call function.

It said the spyware was developed by Israeli cyber surveillance company NSO Group and affects both Android and iPhones. The FT said WhatsApp could not yet give an estimate for how many phones were targeted.

The FT reported that teams of engineers had worked around the clock in San Francisco and London to close the vulnerability and it began rolling out a fix to its servers on Friday last week and issued a patch for customers on Monday.

Asked about the report, NSO said its technology is licensed to authorised government agencies "for the sole purpose of fighting crime and terror," and that it does not operate the system itself while having a rigorous licensing and vetting process.

"We investigate any credible allegations of misuse and if necessary, we take action, including shutting down the system. Under no circumstances would NSO be involved in the operating or identifying of targets of its technology, which is solely operated by intelligence and law enforcement agencies," the company said.

WhatsApp disclosed the issue to the US Department of Justice last week, the FT said.

Social media giant Facebook bought WhatsApp in 2014 for $19 billion.

Facebook co-founder Chris Hughes last week wrote in The New York Times that fellow co-founder Mark Zuckerberg had far too much influence by controlling Facebook, Instagram and WhatsApp, three core communications platforms, and called for the company to be broken up.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
April 24,2024

HSRP.jpg

With the Karnataka transport department extending the deadline for the installation of High Security Registration Plate (HSRP) twice--- in November last year and February, it is no longer planning to extend the same. The department ordered for the installation of HSRP before May 31.

The transport department through a notification in August last year, had mandated the installation on all the vehicles that were registered in the state prior to April 1, 2019. According to transport officials, there are nearly two crore vehicles that are supposed to get HSRP for their vehicles.

“As of now, the state has registered only 34 lakh HSRP installations, despite extending the deadline twice. From nearly 18 lakh installations since February, the numbers have almost doubled. However, there are still a large number of vehicles that have to opt for HSRP,” said C Mallikarjuna, Additional Commissioner for Transport (Enforcement).

“We will wait till May 31 to check for the total number of vehicles that fall in line. We are expecting HSRP installations to touch 75 lakh, after which we will consider an extension as the numbers indicate that people are falling in line and if some more time is given everyone will get it done. However, if we do not reach that number before the deadline, we will request the government not to extend the deadline but urge for an enforcement,” he said.

He also stated that a fine of Rs 500 will be imposed for the first time and if vehicle owners do not fall in line, it will be Rs 1,000 later until they have installed HSRP. “We will wait till the Model Code of Conduct ends and take the government’s opinion. We are going to request the government for strict enforcement if the HSRP installations are not satisfactory,” he added.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
April 26,2024

phase2.jpg

Voting has begun in 88 constituencies across 13 states and Union Territories amid a furious row between the Congress and the BJP over manifesto and inheritance tax. Election will be held on all seats of Kerala, a chunk of Rajasthan and UP.

Key points

Elections for the second phase will be held for 20 seats of Kerala, 14 seats in Karnataka, 13 in Rajasthan, eight each in Uttar Pradesh and Maharashtra, seven in Madhya Pradesh, five each in Assam and Bihar, three each in Bengal and Chhattisgarh and one each in Jammu and Kashmir, Manipur and Tripura.

Earlier, 89 constituencies were expected to vote in this phase. But polling in Betul, Madhya Pradesh, was rescheduled after the death of a candidate from Mayawati's Bahujan Samaj Party. Betul will now vote in the third phase, due on May 7.

Key candidates for this round include the BJP's Union minister Rajeev Chandrashekhar  -- up against Congress' Shashi Tharoor from Thiruvananthapuram; actors Hema Malini, and Arun Govil from 1980s iconic serial Ramayan, senior BJP leader Tejasvi Surya and Lok Sabha Speaker Om Birla,  Congress' Rahul Gandhi, KC Venugopal, Bhupesh Baghel. and Ashok Gehlot's son Vaibhav Gehlot.

For both BJP and the Opposition, the most crucial states in this phase will be Karnataka and Kerala. Karnataka is the only BJP bastion in the south, where the Congress won in the last assembly election. The party is hoping to do well amid concerns about delimitation and the disadvantage southern states could face after it.

Further south, the BJP is trying to break into the bipolar politics of Kerala. The party is hoping to open its account in the state having fielded Union ministers Rajiv Chandrasekhar and V. Muraleedharan. In Wayanand, a Congress bastion for over 20 years, it has fielded its state unit president K Surendran against Rahul Gandhi.

For the Opposition, Kerala is a big shining hope. Even though the Left and the Congress are competing against each other in the southern state, victory by either will add to the tally of the Opposition bloc INDIA. Kerala is one of the few states that have never sent a BJP member to parliament.

With north, west and northeast India saturated, the BJP is hoping to expand in the south and east in their quest for 370 seats. The party had won 303 seats in 2019, a majority of them from the Hindi heartland and bastions new and old, including Gujarat and the northeast.

The Congress, though, has claimed it would post a much better performance compared to 2019. After the first phase of the election, their claims have got louder, especially in Rajasthan and western Uttar Pradesh. Rashtriya Janata Dal chief Tejashwi Yadav has claimed INDIA will win all five seats in Bihar.  

The election is being held amid a bitter face-off between the Congress and the BJP. The row was sparked by Prime Minister Narendra Modi's comment that the Congress, if voted to power, will redistribute the personal wealth of people among "infiltrators" and won't even spare the mangalsutras of women. The Congress has questioned if the people had to fear for their wealth and mangalsutras in 55 years of the party's rule and accused the BJP of sidestepping issues that matter.

The next phase of election is due on May 7. The counting of votes will be held on June 4 – three days after the seventh and last phase of election on June 1.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
April 26,2024

evm.jpg

The Supreme Court of India on Friday, April 26, rejected pleas seeking 100% cross-verification of votes cast using EVMs with a Voter Verifiable Paper Audit Trail (VVPAT) and said “blindly distrusting” any aspect of the system can breed unwarranted scepticism.

A bench of Justices Sanjiv Khanna and Dipankar Datta delivered two concurring verdicts. It dismissed all the pleas in the matter, including those seeking to go back to ballot papers in elections.

An EVM comprises three units – the ballot unit, the control unit and the VVPAT. All three are embedded with microcontrollers with a burnt memory from the manufacturer. Currently, VVPATs are used in five booths per assembly constituency.

EVM VVPAT case: Supreme Court issues two directives

1.    Justice Khanna directed the Election Commission of India to seal and store units used to load symbols for 45 days after the symbols have been loaded to electronic voting machines in strong rooms.

2.    The Supreme Court also allowed engineers of the EVM manufacturers to verify the microcontroller of the machines after the declaration of the results at the request of candidates who stood second and third. The top court said the request for the verification of the microcontroller can be made within seven days of the declaration of the results after payment of fees.

Option for candidates to seek verification of EVM programmes

•    Candidates who secure second and third position in the results can request for the verification of burnt memory semicontroller in 5% of the EVMs per assembly segment in a Parliamentary constituency. The written request to be made within seven days of the declaration of the results.

•    *On receiving such a written request, the EVMs shall be checked and verified by a team of engineers from the manufacturer of the EVMs.

•    Candidates should identify the EVMs to be checked by a serial number of the polling booth.

•    Candidates and their representatives can be present at the time of the verification.

•    After verification, the district electoral officer should notify the authenticity of the burnt memory.

•    Expenses for the verification process, as notified by the ECI, should be borne by the candidate making the request.
What did the Supreme Court say?

•    "If EVM is found tampered during verification, fees paid by the candidates will be refunded," the bench said.

•    "While maintaining a balanced perspective is crucial in evaluating systems or institutions, blindly distrusting any aspect of the system can breed unwarranted scepticism...," Justice Datta said.

Who filed the petitions?

NGO Association for Democratic Reforms, one of the petitioners, had sought to reverse the poll panel's 2017 decision to replace the transparent glass on VVPAT machines with an opaque glass through which a voter can see the slip only when the light is on for seven seconds.

The petitioners have also sought the court's direction to revert to the old system of ballot papers.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.