Google is logging invite links to WhatsApp group chats. With a basic search, anyone can find and join private chats including ones the group admin may want to keep private.
Facebook had knowledge about the aforementioned flaw for the past few months but failed to put it right.
According to twitter user @hackrzvijay, the social media platform was notified about this security flaw and yet the company failed to do anything to fix it.
I reported to facebook in early november pic.twitter.com/QB7pHsz5vu
— HackrzVijay 💻 (@hackrzvijay) February 21, 2020
The user messaged Facebook in hopes to receive a cash bounty in return for reporting the security glitch however, the social media platform refused on the grounds that ability for anyone to find invite codes online for private WhatsApp chat groups is “an intentional product decision.”
However, Vice affirms that WhatsApp group invites are not as private as it seems because a simple Google lets you can gain access to private chat groups.
The search engine giant uses crawlers to index URLs across the internet and hence it is very easy for websites and apps to place a line of code on pages that tells these Google crawlers not to index the information there.
If you want to test this out then simply start with a “chat.whatsapp.com” string and then enter in some information specific to your chat reported Vice.
This article originally published on Android Authority.