That’s right – Chrome/69 – the latest version of the WhatsApp desktop applications provided by WhatsApp is Chrome/69 based. That means my XSS works since this is – after all – a variant of Chromium! Electron constantly updates along with the platform it is based on: Chromium. This makes things super easy for a lot of big companies since it allows them to have one source code for both their web applications and native desktop applications. Electron is a cool platform that lets you create “native” applications using standard web features. These types of applications are written using Electron. He was then able to get that malicious code to read files from either a Windows PC or a Mac. The actual exploit is pretty involved, but the bottom line is that it’s possible for an innocent-looking link in a WhatsApp message to invisibly redirect people to a malicious website and then run some Javascript code to execute code. If you can mess with text, why not do the same with a link? There’s no fix available for that, which is what got Weizman thinking. It built on an earlier issue in which replies could fake the original text…Ī threat actor may use the “quote” feature in a group conversation to change the identity of the sender, even if that person is not a member of the group, as well as the text of someone else’s reply, essentially putting words in their mouth. The vulnerability was discovered by security researcher Gal Weizman. If you use WhatsApp on Mac, you’ll want to make sure the desktop app has been updated to the current version, 0.4.316. Another Chrome window will open where you should click Continue without an account.Screengrab is for Windows, but the same thing works on Macs Navigate to the Add menu and select it.ģ. Click the profile icon (usually your picture if you set one for the Google account associated with your default profile) in the top-right corner of the Chrome homepage.Ģ. Here is how to create a new profile in browsers: For Chrome:ġ. Fortunately, by using different browser profiles, you can connect your other WhatsApp accounts to the browser and thus use multiple WhatsApp accounts on the desktop. Therefore, it is possible to connect several WhatsApp accounts to the browser since each profile you create works more or less like a new browser without any associated data.įor a given browser profile, the WhatsApp account you connect to is saved, and you have to log out of that account to use another WhatsApp account, which might not be practical for someone who uses multiple WhatsApp accounts. This creates a separate location for each activity you perform within the browser and avoids confusion. Create a new browser profileīrowsers like Chrome, Firefox, Edge, and many others have a feature that allows you to create multiple profiles. If you want to open multiple WhatsApp accounts on your PC with the same browser, you can use one of the following methods. Go to your WhatsApp on your phone and click on the icon with three dots. Visit on your PC to get the QR code that you need to scan to connect to your WhatsApp.Ģ.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |