WhatsApp Group Chat Invite Links, User Profiles Made Public Again on Google

Must read

How to disable and delete Samsung Pay from your Galaxy phone

When it comes to paying conveniently, Samsung Pay makes using your phone as a bank card an easy process; however, there may come...

Google Home 2.35 reveals possible Nest Hello successor

Version 2.35 of the Google Home app is rolling out on Android and iOS with some user-facing tweaks. The Home companion client today...

PS5 restock: Sony Direct has the console in stock today – get it right now

Update: Sony Direct has a PS5 restock right now, so may be able to buy the console right now. Of course, you'll have...

How to Hack the Hidden Google Chrome Dinosaur Game

Most of us have seen the dreaded “No Internet” error message on Google Chrome. You can actually turn this screen into a fun,...
Bhawani Singhhttps://techmepro.com
I am a blogger who believes in delivering latest tech news from around the world to my viewers.

WhatsApp groups are showing up on Google search yet again. As a result, anyone could discover and join a private WhatsApp group by simply searching on Google. This was first discovered in 2019, and was apparently fixed last year after becoming public. Another old issue, which also appeared to have been fixed but seems to be cropping up again, is user profiles showing up through search results. People’s phone numbers and profile pictures could be surfaced through a simple a Google search, because of the issue.

By allowing the indexing of group chat invites, WhatsApp is making several private groups available across the Web as their links can be accessed by anyone using a simple search query on Google — although we are not sharing the exact details, this was verified by Gadgets 360. Someone who finds these links can join the groups and would also be able to see the participants and their phone numbers alongside the posts being shared within those groups.

Cybersecurity researcher Rajshekhar Rajaharia informed Gadgets 360 about the indexing of WhatsApp group chat invites on Google. The indexing seems to have started again quite recently. At the time of writing, there were over 1,500 group invite links available in search results.

Some of the links indexed by Google lead to WhatsApp groups sharing porn. In a few other cases, there were links to WhatsApp groups dedicated to specific community or interest. Gadgets 360 also found groups sharing messages for Bangla and Marathi users. With the links, people who weren’t invited could easily join the groups.

This isn’t the first time that this issue has happened. In November 2019, WhatsApp group chat invites were initially found on Google search results. The issue was reported to Facebook by a security researcher, though it was resolved soon after it was covered by several news outlets in February last year.

Reverse engineer Jane Manchun Wong reported that WhatsApp had apparently fixed group chat indexing by adding the ‘noindex’ meta tag on the chat invite links. However, the fresh links do include the noindex meta tag.

The group chat links exposed in 2019 time are not visible on Google, so this could be a different issue leading to similar results, or a change that unintentionally brought back an old problem.

Rajaharia told Gadgets 360 WhatsApp hadn’t included the robots.txt file particularly for chat.whatsapp.com subdomain that led to indexing of group chat invites on Google and other search engines. Web developers normally use a robots.txt file to tell search engine crawlers which pages or files they could crawl and which they shouldn’t for indexing.

WhatsApp making user profiles public on Google
Alongside group invite links, WhatsApp seems to have allowed Google again to index user profiles to let anyone chat with a user or look at their profile picture.

By searching for country codes on WhatsApp’s domain, the URLs of peoples profiles could be surfaced, which included phone numbers and profile pictures. This issue appeared to have been fixed by WhatsApp in June last year — the company had not issued a statement at the time but multiple reports had also confirmed this.

Gadgets 360 found that similar to the group chat invites indexing, WhatsApp user profiles are also again accessible on Google for the last few hours. The search engine already indexed over 5,000 profile links. Some links also lead to the users who have enabled their profile pictures and statues to anyone on the messaging app.

Cybersecurity researcher Rajaharia discovered the indexing of WhatsApp user profiles on Google. He noticed that just like the group chat invites, there is no particular robots.txt file for the api.whatsapp.com subdomain to tell search engine crawlers to not crawl its related links.

Gadgets 360 has reached out to WhatsApp and Google for a comment on both group chat invite link and user profile indexing issues.

What will be the most exciting tech launch of 2021? We discussed this on Orbital, our weekly technology podcast, which you can subscribe to via Apple Podcasts, Google Podcasts, or RSS, download the episode, or just hit the play button below.

Source link

More articles

Leave a Reply

Subscribe to our newsletter

To be updated with all the latest news, offers and special announcements.

- Advertisement -

Latest article

The Telegram app now has a mysterious twin that you won’t find on the Play Store (APK Download)

Telegram has gathered steam over the last few months and it recently even updated its Telegram X application after leaving it in limbo...

Frames per Second: In custody, then and now

Anand Patwardhan's film Prisoner of Conscience, on political prisoners in India during the Emergency, has some deep resonances for our times Source link

Confused About The Janta Curfew In Maharashtra? Here Are Some Memes That Prove You’re Not Alone

Maharashtra has consistently been contributing in India’s daily count and total COVID-19 cases and there are no two ways about it....

Facebook is said to be working on a video dating app

NEW DELHI: Social networking giant Facebook is testing a new speed dating app called Sparked. The app has been developed by Facebook's internal...
- Advertisement -