News for hackers. Stuff that matters.

A comment on Twitter says an attacker used its API to match usernames to phone numbers. Parent comment

Re:Twitter says an attacker used its API to match usernames ... by a254613e on Thursday February 06, 2020 @02:05AM (#22254059)
That's great for you, but whatsapp is de facto standard messaging app in a lot of countries. Memorizing hundred numbers, or profile pictures (assuming that everyone has one) is just not feasible.

An app (such as whatsapp) getting access to all contacts is a valid use case, even though it doesn't apply to you.

[ Parent | on HN ]
Re:Twitter says an attacker used its API to match usernames ... by netsharc on Thursday February 06, 2020 @07:54AM (#22255616)
And sadly for him, it doesn't matter anyway, presumably most if not all his friends already uploaded their address books, so WhatsApp already knows his real name and phone number and network of friends...
[ Parent | on HN ]
Re:Twitter says an attacker used its API to match usernames ... by majewsky on Thursday February 06, 2020 @06:46AM (#22255312)
No. When you want to chat with a new person, WA just needs the contact of that single person.
[ Parent | on HN ]