WhatsApp, the company behind the biggest messaging applications confirmed today an extremely serious problem that affects hundreds of millions of users around the world, including those in Romania. More precisely, a few weeks ago WhatsApp launched a new function that allows blocking the application using Touch ID, or Face ID, many iPhone users have been asking for the implementation of this functionality since a few years ago.
WhatsApp, for this function available for the iPhone there is an option to set a period of time that must pass from the moment the user closes the application, until the biometric authentication must be used. WhatsApp users have the option to set the biometric authentication to be done every time the application is reopened, or at certain periods of time after closing it, and the second setting is the one that has the serious problem recognized by the company.
WhatsApp has a serious problem with Touch ID/Face ID authentication
WhatsApp, is used by a lot of people, and one of these people discovered the fact that when something is shared from another application, through the Share Sheets system, the timer that requires biometric authentication at certain time periods is reset. This means that anyone can access the data from the WhatsApp application using this little trick, and this although normally biometric authentication should be imposed, so the problem is a very serious one.
Get to the iOS Share Sheet through any method (eg in the Photos app). Click on the WhatsApp icon in the iOS Share Sheet. While transitioning to the next screen, you notice that no FaceID or TouchID verification takes place if an option other than "Immediately" was set previously. Now just exit to the iOS Home Screen. (If in some cases, it asks for FaceID or TouchID verification, just cancel it and try clicking on the WhatsApp icon in the iOS Share Sheet again). Try to open WhatsApp and voila, it simply lets you inside WhatsApp without FaceID or TouchID verification.
WhatsApp, how the company managed to offer this functionality without testing well enough how much it can be affected by the sharing of information from other applications, is difficult to understand, but it is not the only mistake in its history. On the other hand, the recognition of the problem by those at WhatsApp, so soon after its discovery, is a sign that we should be happy that so much importance is given to users all over the world.
WhatsApp, did not mention how long it might take until the solution for the problem is released, so we will have to be patient until everything is ready to be officially offered.
