All users are advised to update WhatsApp, as older versions have a vulnerability that could see a single message wipe out your group chats …
Security researchers from Check Point found a serious security flaw in the iOS and Android apps.
The defect would have enabled a bad actor to deliver a destructive group chat message that produces a swift and complete crash of the entire application for all members of the group chat. The crash is so severe that users are forced to uninstall and reinstall the application, in order to gain proper use of WhatsApp. Furthermore, the user would be unable to return to the group chat, which would lead to the loss of all group chat history, indefinitely. The group chat would then not be able to be restored after the crash occurs and would need to be deleted in order to stop the crash-loop.
Carrying out the attack would be relatively simply. An attacker would use a web browser debugging tool to edit a message to any group chat. That message would cause the app to crash for all members, and it would continue to crash each time anyone tried to open it.
Because the only way to recover would be to delete the app and all its data, then reinstall from scratch, all chat history in the group would be lost for all members.
Check Point followed the usual responsible disclosure process, advising WhatsApp of the details, and waiting for the company to issue an update to fix it before going public.
That has now been done, and you can protect yourself and your groups from this by ensuring you update WhatsApp to the latest version. Open the App Store app, tap your profile photo top-right and scroll down to see whether any updates are available. If there are none, you can check it has already been updated by scrolling down to WhatsApp in Recent Updates and ensuring you are on version 2.19.120 or later.
Check Point previously discovered a method for someone to fake responses from you in quoted replies, as well as a way to fool you into confusing private a public messages. The latter issue has fixed, but the way end-to-end encryption works with WhatsApp means it wouldn’t be practical to fix the quote-spoofing, says the company.
WhatsApp owner Facebook recently sued an Israeli company for a hack which allowed various governments to spy on more than 1,000 users before the company fixed the vulnerability.
FTC: We use income earning auto affiliate links. More.
Britain in talks with 6 firms about building gigafactories for EV batteries
Britain is in talks with six companies about building gigafactories to produce batteries for electric vehicles (EV), the Financial Times reported on Wednesday, citing people briefed on the discussions.
Car makers Ford Motor Co and Nissan Motor Co Ltd, conglomerates LG Corp and Samsung, and start-ups Britishvolt and InoBat Auto are in talks with the British government or local authorities about locations for potential factories and financial support, the report added .
(Reporting by Kanishka Singh in Bengaluru; Editing by Himani Sarkar)
EBay to sell South Korean unit for about $3.6 billion to Shinsegae, Naver
EBay Korea is the country’s third-largest e-commerce firm with market share of about 12.8% in 2020, according to Euromonitor. It operates the platforms Gmarket, Auction and G9.
Shinsegae, Naver and eBay Korea declined to comment.
Lotte Shopping had also been in the running, the Korea Economic Daily and other newspapers said, citing unnamed investment banking sources.
South Korea represents the world’s fourth largest e-commerce market. Driven by the coronavirus pandemic, e-commerce has soared to account for 35.8% of the retail market in 2020 compared with 28.6% in 2019, according to Euromonitor data.
Shinsegae and Naver formed a retail and e-commerce partnership in March by taking stakes worth 250 billion won in each other’s affiliates.
($1 = 1,117.7000 won)
(Reporting by Joyce Lee; Editing by Edwina Gibbs)
Canada launches long-awaited auction of 5G spectrum
The 3,500 MHz is a spectrum companies need to provide 5G, which requires more bandwidth to expand internet capabilities.The auction, initially scheduled for June 2020, is expected to take several weeks with Canadian government selling off 1,504 licenses in 172 service areas.
Smaller operators are going into the auction complaining that recent regulatory rulings have further tilted the scales in the favour of the country’s three biggest telecoms companies – BCE, Telus and Rogers Communications Inc – which together control around 90% of the market as a share of revenue.
Canadian mobile and internet consumers, meanwhile, have complained for years that their bills are among the world’s steepest. Prime Minister Justin Trudeau’s Liberal government has threatened to take action if the providers did not cut bills by 25%.
The last auction of the 600 MHz spectrum raised C$3.5 billion ($2.87 billion) for the government.
The companies have defended themselves, saying the prices they charge are falling.
Some 23 bidders including regional players such as Cogeco and Quebec’s Videotron are participating in the process. Shaw Communications did not apply to participate due to a $16 billion takeover bid from Rogers. Lawmakers and analysts have warned that market concentration will intensify if that acquisition proceeds.
In May, after Canada‘s telecoms regulator issued a ruling largely in favour of the big three on pricing for smaller companies’ access to broadband networks, internet service provider TekSavvy Inc withdrew from the auction, citing the decision.
Some experts say the government has been trying to level the playing field with its decision to set aside a proportion of spectrum in certain areas for smaller companies.
Gregory Taylor, a spectrum expert and associate professor at the University of Calgary, said he was pleased the government was auctioning off smaller geographic areas of coverage.
In previous auctions where the license covered whole provinces, “small providers could not participate because they could not hope to cover the range that was required in the license,” Taylor said.
Smaller geographic areas mean they have a better chance of fulfilling the requirements for the license, such as providing service to 90% of the population within five years of the issuance date.
The auction has no scheduled end date, although the federal ministry in charge of the spectrum auction has said winners would be announced within five days of bidding completion.
($1 = 1.2181 Canadian dollars)
(Reporting by Moira Warburton in Vancouver; Editing by David Gregorio)