What you need to know
- A security researcher has discovered that phone numbers of WhatsApp users using the 'Click to Chat' feature were indexed publicly on Google Search.
- The Click to Chat feature lets users chat with someone on WhatsApp even without saving their phone number in their phone.
- Fortunately, the issue appears to have been resolved by WhatsApp.
If you have used WhatsApp's little-known Click to Chat feature, your phone number may have been publicly accessible via a Google search. Athul Jayaram, a security researcher from India, has discovered that the privacy issue in the WhatsApp web portal may have exposed phone numbers of nearly 300,000 WhatsApp users.
The Click to Chat feature, which has been around for a long time now, makes it possible for businesses to create a link to allow their customers to send them a message on WhatsApp. Customers can simply click on the link and start chatting without having to save the phone number in their phone.
WhatsApp generates these links as https://wa.me/, without encrypting the phone numbers present in the link. This makes the phone numbers in the Click to Chat links visible in plaintext on the web, as the pages do not use noindex meta tags to prevent search engines such as Google from indexing the links. As explained by Jayaram in his post on Medium, leaked WhatsApp numbers of users from any country could be found using the google search query site:wa.me "
Jayaram reported the issue to Facebook through the company's bug-bounty scheme on May 23. However, his application was dismissed as "it only contained a search engine index or URLs that WhatsApp users chose to make public." Even though the application was dismissed, WhatsApp has now fixed the issue, and phone numbers are no longer searchable.
Remarkable 2 review: The writing tablet that changed my life
The Remarkable 2 is one of those products you don't think you'll like, or need, until you use it — and then you're absolutely addicted to it.
Samsung's not-so-secret plan to beat Apple is about leaving Qualcomm behind
It's a matter of when not if we'll see Samsung go all-Exynos, and seeing a powerful new breed of Exynos SoC would mean good things for Samsung phones and their competition.
Netflix StreamFest: How to watch Netflix for free right now in India
Netflix StreamFest is a 48-hour streaming festival where everyone in India will be able to access the streaming service for free. All you need to do is set up an account and stream all the TV shows and movies that Netflix has to offer without paying anything. Here's how to watch Netflix for free in India during StreamFest.
Get the most out of these smart devices and services with Google Assistant
The Google Assistant is the most useful smart voice assistant for getting your questions answered and keeping track of your digital life, but it's also great at helping you control your smart home devices and services.