Updated the README for my WhatsApp media decryption tool with a FAQ:https://github.com/ddz/whatsapp-media-decrypt#faq …
-
-
Show this threadThanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Now that's doing a service - exposing nonsense from seemingly competent sources.
-
Thanks! I just think that it’s important for important public debates that information is factually accurate.
- 2 more replies
New conversation -
-
-
To quote a colleague: Don’t say “It can’t be done” if you really mean “I don’t know how to do it”. Excellent work.
-
Thanks! As you can see from the repo, my code is all just “glue”, all of the hard work reverse engineering and re-implementation work had already been done in other open source repos.
End of conversation
New conversation -
-
-
Can you send this to FTI instead?
- 2 more replies
New conversation -
-
-
Nice work, compliments! Haven't read the report itself, so hard to draw conclusions for me... was the key still recoverable from the database in the Bezos case? Because it may have been the first thing to remove.
-
Thanks! Unclear from the report, there was no indication whether or not they knew that the key was in the ZMEDIAKEY column. Agree that removing that would be sneaky for malware to do.
- 2 more replies
New conversation -
-
-
Do I get it right that the encryption key is encoded in the filename (not surprised), and that filename is stored on WhatsApp servers (am surprised)? So there's effectively no E2E encryption for media, right? Is this consistent with what (lack of) security WhatsApp claims it has?
-
What I found corresponds to the excerpt in the security design whitepaper Ivan screenshotted and posted below. The SHA256 of the .enc file as well as the key are stored in the sqlite file after being received from an encrypted message. My tool retrieves them and decrypts file.
- 2 more replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.