News for hackers. Stuff that matters.

A comment on WhatsApp loses millions of users after terms update. Parent comment

Re:WhatsApp loses millions of users after terms update by cyphar on Tuesday January 26, 2021 @09:20PM (#25923511)
Isn't [1] (one of) the patches fixing the issue? The solution doesn't need to be a server patch, in fact it appears it was a client-side patch to handle 508 errors properly as well as doing exponential backoff.

[1]: https://github.com/signalapp/Signal-Android/commit/c95f0fce6...

[ Parent | on HN ]
Re:WhatsApp loses millions of users after terms update by fsflover on Wednesday January 27, 2021 @08:42AM (#25928123)
Does it mean that I can create a malicious client without that patch and break the server again?
[ Parent | on HN ]
Re:WhatsApp loses millions of users after terms update by cyphar on Wednesday January 27, 2021 @04:14PM (#25934033)
The reason it was a DDoS was that every single Android Signal client in the world was retrying the API without an exponential backoff. If you intentionally try to DDoS the API yourself, then that's just a DDoS and you don't need a custom Signal client for that.
[ Parent | on HN ]