Integrasi Komputer    
   
Daftar Isi ☛
(Sebelumnya) What.CDWhere (SQL) (Berikutnya)

WhatsApp

WhatsApp Messenger
WhatsApp logo.svg
WhatsApp Messenger screenshot.jpg
WhatsApp Messenger 2.8.2 running on iOS
Developer(s)WhatsApp Inc.
Stable release

Android
2.9.4182 (March 21, 2013; 20 days ago (2013-03-21)) [±] [1][2]

BlackBerry OS
2.9.874 (January 25, 2013; 2 months ago (2013-01-25)) [±] [3][4]

BlackBerry 10
2.9.3733 (March 13, 2013; 28 days ago (2013-03-13)) [±] [3][5]

iOS
2.8.7 (December 7, 2012; 4 months ago (2012-12-07)) [±] [6]

Nokia Symbian (S60)
2.9.6 (February 2, 2013; 2 months ago (2013-02-02)) [±] [7][8]

Nokia Series 40
2.4.12 (unknown date) [±] [9][10]

Windows Phone
2.9.4 (February 24, 2013; 45 days ago (2013-02-24)) [±] [11]
Development statusActive
Operating systemAndroid, BlackBerry OS, BlackBerry 10, iOS, Series 40, Symbian and Windows Phone
TypeInstant Messaging
LicenceProprietary
Websitewhatsapp.com

WhatsApp Messenger is a proprietary, cross-platform instant messaging application for smartphones. In addition to text messaging, users can send each other images, video, and audio media messages. The client software is available for Android, BlackBerry OS, BlackBerry 10, iOS, Series 40, Symbian (S60), and Windows Phone. The company WhatsApp Inc. was founded in 2009 by Brian Acton and Jan Koum, both veterans of Yahoo!, and is based in Santa Clara, California.[citation needed]

Competing with a number of Asian based messaging services (like LINE, KakaoTalk, and WeChat), WhatsApp handles ten billion messages per day as of August 2012,[12] growing from two billion in April 2012[13] and one billion the previous October.[14] According to the Financial Times, WhatsApp "has done to SMS on mobile phones what Skype did to international calling on landlines."[15]

Contents

Technical

WhatsApp uses a customized version of the open standard Extensible Messaging and Presence Protocol (XMPP).[16] Upon installation, it creates a user account using one's phone number as username (Jabber ID: [phone number]@s.whatsapp.net). WhatsApp software automatically compares all phone numbers from the device's address book with its central database of WhatsApp users to automatically add contacts to the users WhatsApp contact list. Previously the Android and s40 versions used an MD5-hashed, reversed-version of the phone's IMEI as password,[17] while the iOS version used the phone's WiFi MAC address instead of IMEI.[18][19] A recent update now generates a random password on the server side.[20]

Multimedia messages are sent by uploading the image, audio or video to be sent to a HTTP server and then sending a link to the content along with its Base64 encoded thumbnail (if applicable).[21]

Until August 2012, messages were sent in unencrypted plain-text format, making the system vulnerable to session hijacking.[22] As of 15 August 2012, the WhatsApp Support Staff claims messages are encrypted in the "latest version" of the WhatsApp software for iOS and Android (not including BlackBerry, Windows Phone and Symbian), without specifying the implemented cryptographic method.[23]

Security

See also: Mobile security

In May 2011, a security hole was reported in WhatsApp which left user accounts open for hijacking.[24] Since May 2011, it has been reported that communications made by WhatsApp are not encrypted, and data is sent and received in plaintext, meaning messages can easily be read if packet traces are available.[25]

According to some sources, it is believed that the hijacking hack was performed, and later fixed by helping WhatsApp reproduce it on Android and Symbian, by Liroy van Hoewijk, CEO of CoreISP.net.[26][27] Then, in May 2012 security researchers noted that new updates of WhatsApp no longer sent messages as plaintext,[28][29][30] however, the cryptographic method implemented was subsequently described as "broken".[31]

In September 2011, a new version of the WhatsApp Messenger application for iPhones was released. In this new version, the developer has closed a number of critical security holes that allowed forged messages to be sent and messages from any WhatsApp user to be read.[32]

On January 6, 2012, an unknown hacker published a website (WhatsAppStatus.net) which made it possible to change the status of an arbitrary WhatsApp user, as long as the phone number was known. To let it work, it only required a restart of the app. According to the hacker, it is only one of the many security issues in Whatsapp. On January 9, WhatsApp reported to have solved the issue. In reality, the only measure that was taken was blocking the website's IP address. As a reaction, a Windows tool was made available for download providing the same functionality. This issue has since been resolved in the form of an IP check on currently logged in session.[33][34]

On January 13, 2012, WhatsApp was pulled from the iOS App Store. The reason was not disclosed. The app was added back to the App Store four days later.[35]

Using WhatsAPI, German Tech site The H demonstrated how to hijack any WhatsApp account on September 14, 2012.[36] Shortly after a legal threat to WhatsAPI's developers was alleged, characterized by The H as "an apparent reaction" to security reports, and WhatsAPI's source code was taken down.[37] The WhatsAPI team has since returned to active development.[38]

Privacy

See also: Internet privacy

Another issue was witnessed on November 28, 2012 and before (WA blog post about it is from 12 January), though this is not a security concern at all but more a problem with "chain messages", when users got spam messages and ignorantly forwarded hoax messages to people on their contact lists.[39] The WhatsApp team clearly mentioned on its website that all such messages are fake.[40] This has not been the work of hackers, but simply the work of people randomly forwarding nonsense as is the problem on any social media.

A major privacy and security issue has been the subject of a joint Canadian-Dutch government investigation. The primary concern was that WhatsApp required users to upload their entire mobile phone's address book to WhatsApp servers so that WhatsApp could discover who, among the users' existing contacts, is available via WhatsApp. While this is a fast and convenient way to quickly find and connect the user with contacts who are also using WhatsApp, it means that their address book was then mirrored on the WhatsApp servers, including contact information for contacts who are not using WhatsApp. However, this information was stored as a hash and without additional identify information such as a name.[41][42][43][44]

In March 31st 2013, the governing body of telecommunications affairs in Saudi Arabia, the Communications and Information Technology Commission (CITC), issued a statement regarding possible measures against WhatsApp, among other applications, unless the service providers took serious steps in order to comply with monitoring and privacy regulations.[45]

API

Although WhatsApp Inc. does not provide an open application programming interface (API), a reverse-engineered library is made available on GitHub.[17]

See also

References

  1. ^ WhatsApp Inc. (2013-02-01). "WhatsApp Messenger". Google Play. Google. Retrieved 2013-02-01. 
  2. ^ WhatsApp Inc. (2013-02-13). "WhatsApp for Android". WhatsApp. Retrieved 2013-02-01. 
  3. ^ a b WhatsApp Inc. (2013-01-25). "WhatsApp Messenger". BlackBerry App World. Research In Motion. Retrieved 2013-01-29. 
  4. ^ WhatsApp Inc. (2013-01-25). "WhatsApp for BlackBerry". WhatsApp. Retrieved 2013-01-29. 
  5. ^ WhatsApp Inc. (2013-03-13). "WhatsApp for BlackBerry 10". WhatsApp. Retrieved 2013-03-13. 
  6. ^ WhatsApp Inc. (2012-12-07). "WhatsApp Messenger". Apple App Store. Apple. Retrieved 2013-01-29. 
  7. ^ WhatsApp Inc. "WhatsApp Messenger". Nokia. Ovi_Store. Retrieved 2013-01-30. 
  8. ^ WhatsApp Inc. (2013-01-30). "WhatsApp for Nokia S60". WhatsApp. Retrieved 2013-01-30. 
  9. ^ {{cite web | url = http://store.ovi.com/content/172049/ | title = WhatsApp S40 Messenger | author = WhatsApp Inc. | work = [[Nokia E63 | publisher = Ovi_Store | date = 2012-12-07 | accessdate = 2013-01-29 }}
  10. ^ WhatsApp Inc. "WhatsApp for Nokia S40". WhatsApp. Retrieved 2013-01-29. 
  11. ^ WhatsApp Inc. (2012-12-15). "WhatsApp for Windows Phone". Windows Phone. Microsoft. Retrieved 2013-01-29. 
  12. ^ Olanof, Drew (2012-08-23). "WhatsApp hits new record with 10 billion total messages in one day". The Next Web. Retrieved 2013-01-29. 
  13. ^ Russell, Jon (2012-04-04). "WhatsApp founder to operators: We’re no SMS-killer, we get people hooked on data". The Next Web. Retrieved 2013-01-29. 
  14. ^ Olanoff, Drew (2011-10-31), "WhatsApp users now send over one billion messages a day", TheNextWeb, retrieved 2013-01-29 
  15. ^ Bradshaw, Tim (2011-11-14). "WhatsApp users get the message". Financial Times. Retrieved 2013-01-29. 
  16. ^ shakal (2011-03-22). "WhatsApp? Nicht ohne Risiken." [WhatsApp? Not without risks.]. Retrieved 2013-01-29.  (original [1] translated from German at by Google Translate)
  17. ^ a b Team Venomous (venomous0x), Interface to WhatsApp Messenger, GitHub (blog), retrieved 2013-01-26 
  18. ^ Amodio, Ezio (2012-09-11), Whatsapp – iOS password generation, ezioamodio.it, retrieved 2013-01-29 
  19. ^ Granger, Sam (2012-09-05), WhatsApp is using IMEI numbers as passwords, samgranger.com, retrieved 2013-01-29 
  20. ^ Wassapp login issues, Lowlevel Studios Blog, 2012-12-11, retrieved 2013-01-29, "Wassapp is a PC application developed to be a non-official client for WhatsApp Messenger." 
  21. ^ Team Venomous (venomous0x) (2012-05-29), WhatsAPI / README.md (updated 2012-11-28), GitHub (blog), retrieved 2013-01-29 
  22. ^ djwm (2012-05-13), Sniffer tool displays other people's WhatsApp messages, Heinz Heise (h-online), retrieved 2013-01-29 
  23. ^ WhatsApp Support (2012-08-15), "WhatsApp FAQ: Are my messages secure?", WhatsApp Support (Zendesk), retrieved 2013-01-29 
  24. ^ McCarty, Brad (2011-05-23). "Signup goof leaves WhatsApp users open to account hijacking". The Next Web. Retrieved 2013-01-29. 
  25. ^ Brookehoven, Corey (May 19, 2011). "Whatsapp leaks usernames, telephone numbers and messages". youdailymac.net. Retrieved July 18, 2011. [dead link]
  26. ^ van Hoewijk, Liroy. "LinkedIn profile". LinkedIn. Retrieved 2013-01-26. 
  27. ^ Liroy (2012-12-20). "WhatsappHack". Tweakers.net. Retrieved 2013-01-29. "CEO of an internet business. Cracker of WhatsApp verification functions. (Linux / Android Cisco) security and operations expert." 
  28. ^ "Whatsapp ya cifra los mensajes". May 11, 2012. Retrieved May 31, 2012. 
  29. ^ "Tweet from @davidbb". May 8, 2012. Retrieved May 31, 2012. 
  30. ^ "Tweet from @sp0rkbomb". May 10, 2012. Retrieved May 31, 2012. 
  31. ^ fileperms.org (September 12, 2012). "WhatsApp is broken, really broken". Retrieved February 8th, 2013. 
  32. ^ Kurtz, Andreas (September 8, 2011). "Shooting the Messenger". Retrieved September 11, 2011. 
  33. ^ Schellevis, Joost (January 12, 2012). "Second news item concerning the whatsapp status issue on the dutch website "Tweakers".". Retrieved January 12, 2012. 
  34. ^ rvdm (Janurary 12, 2012). "Article disecting whatsappstatus.net and subsequent updates". Retrieved April 7, 2013. 
  35. ^ Reventós, Laia (2012-07-03), Dentro de WhatsApp (in Spanish), tecnologia.elpais.com, retrieved 2013-01-26 
  36. ^ fab (2012-09-14), WhatsApp accounts almost completely unprotected, Heinz Heise (h-online), retrieved 2013-01-26 
  37. ^ crve (2012-09-25), WhatsApp threatens legal action against API developers, Heinz Heise (h-online), retrieved 2013-01-26 
  38. ^ wnstnsmth (2012-09-30), WhatsAPI sources back online, Heinz Heise (h-online), retrieved 2013-01-26 
  39. ^ "WhatsApp gets bug, spammers make the most of it". First Post (India). 2012-11-29. Retrieved 2013-01-26. 
  40. ^ "It is a hoax. Really, it is.". WhatsApp Blog. 2012-01-16. Retrieved 2013-01-26. 
  41. ^ Wisniewski, Chester (2013-01-29). "WhatsApp's privacy investigated by joint Canadian-Dutch probe". Sophos. Retrieved 2013-01-29. 
  42. ^ "Investigation into the personal information handling practices of WhatsApp Inc. (PIPEDA Report of Findings #2013-001)", Findings under the Personal Information Protection and Electronic Documents Act (PIPEDA) (Privacy Commissioner of Canada), 2013-01-15, retrieved 2013-01-29 
  43. ^ Williams, Martyn (2013-01-28), "WhatsApp could face prosecution on poor privacy", CSOonline.com (IDG (CXO Media Inc.)), retrieved 2013-01-29, "Dutch and Canadian privacy commissioners conducted a yearlong investigation into the popular mobile app" 
  44. ^ http://www.saudigazette.com.sa/index. cfm?method=home.regcon&contentid= 20130401159359

External links

Reviews
(Sebelumnya) What.CDWhere (SQL) (Berikutnya)