News for hackers. Stuff that matters.

A comment on Vulnerability That Allowed Hackers to Take Over WhatsApp and Telegram Accounts.

Re:Vulnerability That Allowed Hackers to Take Over WhatsApp ... by strictnein on Wednesday March 15, 2017 @02:16PM (#13878409)
When you boil it down, these are both just moderately complex stored XSS attacks, right? Construct a weird video or image, get it stored on the Telegram/WhatsApp servers, and if the user is using the web interface, they could trigger the malicious code by clicking on the image or opening the video in a new tab.
[ Parent | on HN ]
Re:Vulnerability That Allowed Hackers to Take Over WhatsApp ... by misterrobot on Wednesday March 15, 2017 @03:19PM (#13878931)
Yeah, this is literally just stored XSS. The fact that they don't even mention XSS in the article just amplifies its click-baitiness.
[ Parent | on HN ]