HNHacker News
TopNewBestAskShowJobs

whycomb

1 karma · joined June 25, 2018

submissionscomments
whycomb··on WhatsApp voice calls were used to inject spyware on phones
The problem is iOS AppStore. If you update via the "Updates" tab, you don't get the latest version. But if you search for WhatsApp as if installing it for the first time, then you get the new version.
whycomb··on WhatsApp voice calls were used to inject spyware on phones
You're still vulnerable then.

"Affected versions: ... WhatsApp for iOS prior to v2.19.51" from https://www.facebook.com/security/advisories/cve-2019-3568

The news outlets are all telling us to update, but until WhatsApp/Apple get their act together, there's no point. Worse still, people won't realise they need to do it again and will remain vulnerable indefinitely.

whycomb··on WhatsApp voice calls were used to inject spyware on phones
Updated WhatsApp on my iphone just now. The version I got was 2.19.50. According to the CVE it's still vulnerable. Unable to get 2.19.51 which is the first fixed version. Is this just me? Or is everyone else updating to a still-vulnerable version?
whycomb··on Ask HN: What are the things that you have automated in your personal life?
A daily email digest of changes to a google calendar, so my partner and I can use a shared calendar and keep track of what each other is adding without being emailed for every tiny change. It runs as a serverless Azure function, and has required no maintenance in a year, which is more than I can say about Outlook's ical integration which breaks every few months.