WhatsApp, which has not been on the agenda with a confidentiality agreement in recent days, has also signed a bomb. Finally, WhatsApp revealed that user IDs and groups were seen in Google search results. The world's # 1 search engine was revealed by an Indian Internet Security Researcher, who showed private group chats on WhatsApp in Google search results. It turned out that the same problem occurred in 2019, but then this situation was corrected. According to the report prepared by Security Researcher Rajshekhar Rajaharia, it has been observed that the links that allow users to enter the groups are vulnerable to WhatsApp groups. Normally in this case he theoretically allows everyone to join the group. However, people who can access these links of private groups allow access to everything from the users in the group to pictures, phone numbers and correspondence. After the problem fell to the public, WhatsApp officials said in a statement that they "intervened and solved the problem". In a WhatsApp statement, he said: "Since March 2020, WhatsApp has included the" noindex "tag on all deep link pages that, according to Google, will exclude them from indexing. In order not to index these chats, we gave our feedback to Google. When the person joins, everyone in that group receives a notification, and the administrator can cancel or change the group invitation link at any time. Searchable, publicly posted invitation links on the Internet, such as all content shared on public channels, can be found by other WhatsApp users.Private with users they know and trust. The links they want to share should not be published on a public website. Looking at this statement, WhatsApp claimed that the problem was not caused by them, but by Google.
THE SAME THAT HAPPENED IN 2019
The same problem arose in 2019, a security researcher reported to Facebook. At that time, it was announced that the problem was corrected after it was reflected in the public.
Your @WhatsApp groups may not be as secure as you think they are. WhatsApp Group Chat Invite Links, User Profiles Made Public Again on @Google Again.
Story – https://t.co/GK2KrCtm8J #Infosec #Privacy #Whatsapp #infosecurity #CyberSecurity #GDPR #DataSecurity #dataprotection pic.twitter.com/7PvLYuM9xD– Rajshekhar Rajaharia (@rajaharia) January 10, 2021
