Flaws in Telegram, the secure messaging App expose Secret Chat messages

Flaws in Telegram, the secure messaging App expose Secret Chat messages

Telegram cross-platform messaging flaws allow hackers to bypass encryption and access user messages

Apparently the Secret Chat feature of Telegram saves messages in plain text in the memory dump

Is Telegram secure? not any more! Telegramcross-platform messaging App which was hailed as the most secure messaging App by Electronic Frontier Foundation, has been found to be not so secure after all.

Researchers from security firm Zimperium have discovered that Telegram can be hacked by cyber criminals in two ways.  Zimperium’s founder and CTO stated on Zimperium blog that after conducting research on Telegram App, the researcher have found that there are at least two methods that can be leveraged to bypass encryption and obtain messages.

Telegram has around 55 million active users around the world and has a Secret Chat feature for a one on one private and secure chat between two users.  Secret Chat works by giving encryption and decryption keys to the receiver and sender, thus making it most secure.  EFF in its December secure messaging Apps audit and review had given maximum score to the Telegram’s Secret Chat feature.

Telegram cross-platform messaging flaws allow hackers to bypass encryption and access user messages

According the Avraham, Telegram is vulnerable to the potential hacker gaining complete control of the targeted Android smartphone installed with Telegram App, by leveraging a kernel exploit to elevate privileges. Once the attacker is in control of the smartphone, he can dump process memory and gain access to any file stored on the device.

Zimperium researchers noticed that Telegram Secret Chat messages are stored in the Telegram memory dump in plain text and easily accessible to the hackers.

/Flaws in Telegram, the secure messaging App expose Secret Chat messages

The researchers further discovered that a database file (Cache4.db) containing tables that store the secret messages is also in plain text. While Telegram users can delete their messages using a special function, the deleted messages can still be retrieved from the process memory, Avraham stated.

“While Telegram was founded upon a noble goal of providing privacy to consumers everywhere at no cost, they have fallen short of their objective by focusing purely on data-in-transit versus protecting data-at-rest on the mobile device itself. What is regrettable is that I approached Telegram multiple times and have yet to receive a response,” Avraham explained in a blog post.  “Telegram’s so-called powerful encryption is not protecting users any better than any other page or app that uses SSL. If you are using Telegram because you want to ensure your privacy and the privacy of the messages you are sending, be aware that it will not stop sophisticated hackers from reading your messages. We highly recommended adding additional protection to your mobile device that can detect device-level cyberattacks.”

Telegram cross-platform messaging flaws allow hackers to bypass encryption and access user messages

Avraham said Zimperium made the vulnerability public after the expiry of 30 day disclosure guidelines and in the absence of any reply from Telegram about the flaw. Telegram is yet to come out with a statement about the flaw.

Google Wants to Put a 3D Camera on Your Smartphone — Here’s Why

Google’s quest to map the entire world doesn’t end with the outdoors. Now, Google wants to create maps of indoor spaces too — and that’s a powerful idea.

The product of the Google Advanced Technologies and Projects (ATAP) division, Project Tango is a way of 3D-mapping indoor spaces using specialized sensors mounted to a mobile device. Not everything born in ATAP makes it to the real world, but Project Tango has recently moved out of ATAP and is on its way to becoming a real product.

Let’s dive in and see what it’s all about.

What is Project Tango?

It’s a smartphone, and it’s a tablet, but the most critical element is a time-of-flight depth camera, which is capable of determining the depth of pixels in an image via a suite of clever algorithms and hardware.  Combining all of that into a smartphone or tablet form factor just makes it easier for people to carry around and interact with.  Using this, Google hopes to make smart devices smarter, giving them a human-like understanding of the physical world.

Google’s first prototype was a smartphone, as shown in the video above. Project Tango launched in an early form about a year ago, and since then has been rapidly evolving. We listed it as one of the cool research projects that could change the world back in November, and it is still firmly on that path.

The second iteration of Project Tango, shown above, was a $1,024 developer-only model that is currently out of stock. Google’s hoping to get developers involved to tap into all the possibilities for this technology, some of which we’ll look at in the next section.

For a glimpse into the work that has gone into Project Tango, check out the video below from ATAP.

A lot of resources are being poured into this project, and it will be exciting to see where it all goes.  At first glance, some of the technology in Tango may seem a little gimmicky, but the applications that developers have come up with so far are hugely exciting.

What Could It Be Used for?

As developers get ahold of the APIs for working with Project Tango, we’re sure to see an explosion of ideas for the platform. For now, here are a few that could come to fruition.

Search and Rescue

drone

ATAP worked with many different companies and universities to produce Project Tango, but one university in particular is set on putting Tango to work in urban search and rescue missions. The University of Massachusetts Lowell Robotics Lab has big plans ahead for this application.

In many search and rescue scenarios, (picture a partially collapsed building) rescuers often  have no idea what sort of conditions are like ahead of them.  Project Tango, mounted on a small drone, would allow unstable spaces to be mapped before humans enter, identifying risks and obstacles and making the process faster and safer.

Navigation for the Visually Impaired

visually-impaired

Google does a lot of great things for the world, and this use of Project Tango should probably be counted among those achievements. For those who are completely blind, visually impaired, or just have trouble getting around, Project Tango could view the environment around them, understand its geometry, and give them auditory hints about the locations of people, doors, and potential obstacles.

This could really change the lives of millions of the visually impaired all over the world. Hopefully this application of the technology is the first to reach consumers.

Immersive Technologies

Virtual reality? Augmented reality? Project Tango’s future could be deeply entwined with these two other technologies.

In the augmented reality vane, Target has already tricked out a few of their stores to sport a winter wonderland-style aesthetic when viewed through a Project Tango device. In the future, app developers could use Tango’s sensors and cameras to bring games into your environment. In the video below from Android Authority, you can see one game, Zombie Gunship Reality, already taking advantage of this.

Once Google can get more Tango devices into the hands of consumers, you can bet the game designers will follow. At that point, the kinds of games we’re likely to see are only limited by the creativity of the developers.

In the virtual reality sense, integration with the Oculus Rift, Samsung Gear VR, or Microsoft HoloLens could allow for an even more immersive experience. Not to say that we ever expectGoogle to play nicely with Microsoft.  In particular, one of the major limitations to smartphone-based VR headsets like the Gear VR is the lack of support for positional tracking.  Creating a similar, Oculus-based headset for Project Tango would allow developers to use the depth camera data to track the position of your hands and head.

This could even lead to your body being used a controller.  Like the Microsoft Kinect, Project Tango can sense where bodies are in space, and deduce their pose. Train that Tango device on yourself, and your arms and legs could suddenly be in the game — a feature sadly lacking from current virtual reality games.  Alternately, with the ability to capture depth video, you could use Project Tango to create VR video that allows you to fluidly move your head around and observe the scene from many angles.

Trying out Furniture

furniture

Trying to figure out if that couch will fit in your living room? Unsure if that bookshelf would look good across from your shark tank?  With Project Tango, you don’t have to guess.  The depth camera is a virtual tape measure and laser level rolled into one and can measure distances, sizes, and even project an image of a product into a virtual simulation of your room. Walk around your house once with your Tango tablet, and you’ll have a virtual replica of your house on call whenever you need it.  Alternately, you could use the tablet to 3D scan people or objects, and then bring them into the virtual world, to be 3d-printed or used as a virtual prop.

Indoor Directions

Ever spend way too much time wandering around a Walmart or Costco looking for that one item? Project Tango, if adopted by major retailers, could be like Google Maps for the indoors.  Aisle411 and Walgreens have already integrated Project Tango with one Walgreens location, allowing customers with a Tango device to get directions to the appropriate aisle, as shown in the video above.

It doesn’t only have to be used for retail shopping. Finding your way around inside large office buildings is one possible benefit, and in any other areas where GPS is not available, local mapping like this could help people find their way around.

Helping Astronauts

That’s right; Project Tango devices could help astronauts accomplish a bunch of chores that would otherwise take them away from important tasks, by providing a new source of data for experimental autonomous robots called ‘spheres’ that fly around the ISS using cold-gas thrusters.  The spheres are still in the prototyping stage, but eventually they could take over a number of simple functions, and project Tango could help make that happen.

And this application isn’t far off. In fact, as shown in the video above, Google engineers have already taken the Tango into a Zero-G flight to test it out. The possible use cases for NASA and space travel in general are huge.

When Can I Get It?

Google has a lot of great services just on the horizon, and Project Tango is just one of those. Back at Google I/O 2014, ATAP announced that they were working with LG on a consumer product to be released “next year”, which means that we should see a consumer-oriented product coming in 2015. The fact that Tango has graduated from ATAP is good evidence of that.

The first device is likely to be a tablet, but after that, we could see smartphones cropping up from different hardware manufacturers if it catches on — as with Android, Google will probably partner with any hardware manufacturers who are interested.  That said, in the world of razor-thin phones and thinner margins, it may take a while to convince manufacturers of the value of adding bulky, expensive sensors to their devices.

Beyond that general time-frame, we don’t know enough to be more specific. No pricing, specs, or specific release date have been announced yet. Though you can be sure we’ll all be waiting with bated breath.

What’s Your Favorite ATAP Project?

Project Tango isn’t the only idea to have come out of the special division within Google. There’s also Project Ara, the modular smartphone, as well as driverless cars that are taking us into the future.

Be sure to let us know what your favorite ATAP project is in the comments below. And what do you think of Project Tango?  It it a gimmick, or a real evolution in the way we use technology?

How To Get Whatsapp Voice Calling Feature Without an Invite

whatsapp-voice-calling

A recent update in the instant messaging app WhatsApp has rolled out the WhatsApp voice calling feature to more users. It is not available to everyone right now and it worked for a short time on an invite basis, but you can get the WhatsApp voice calling feature by following  these simple steps.

How To Activate Whatsapp Voice Calling Feature?

Note:
If you want to call someone after activating this feature using method 2 and 3, the other person must have enabled this feature in order for that person to receive your call. Also, you need a rooted device

Method 1:

  • Uninstall the older version of your Whatsapp app.
  • Download The latest version of Whatsapp app. The link for the latest version is HERE.
  • Now install the latest version of Whatsapp app.
  • Ask your friend who is having the Whatsapp calling feature for invitation by asking him to call you. Once it’s done, you’ll have the voice calling feature on your Android phone.

Update: This feature is reportedly not working on many devices. Follow the step below to get the WhatsApp calling feature without an invite.

Method 2:

  • You need a rooted device to try this method.
  • Using the link mentioned above, install the latest version of Whatsapp app.
  • Now open Root Explorer or Es file Explorer your Android device.
  • Go to Data > Data > com.whatsapp > Shared_prefs > com.whatsapp__preferences.xml
  • Now edit the above file and add the two lines written below after <map>-
<boolean name="call" value="true" />
<string name="call_allowed">all</string>
  • Now after saving this file, go to Setting > Apps and Force Stop Whatsapp.

Method 3:

  • Again you need a rooted device, the Terminal Emulator and the latest version of WhatsApp. Download it using the link given earlier.
  • Open the Terminal Emulator on your phone and type the following.
su
am start -n com.whatsapp/com.whatsapp.HomeActivity
  • Now your WhatsApp will open with the calling feature enabled.

Note:
If you want to call someone after activating this feature using method 2 and 3, the other person must have enabled this feature in order for that person to receive your call. Also, you need a rooted device

BlackBerry rolls out OS 10.3.1 for existing smartphones; includes Amazon Appstore and BlackBerry Blend

Summary:BlackBerry started rolling out its latest software to existing devices like the Z10, Z30, Q10, and more.

Yesterday BlackBerry announced BB 10 OS 10.3.1 started rolling out to previous generation BlackBerry 10 devices, including the Z10, Z30, Q10, Q5, and Z3.

The software update brings major enhancements to these existing devices. The update is rolling out in Europe, the Middle East, Africa, and Asia Pacific. It will be available across the entire line of BlackBerry 10 smartphones. I still have a T-Mobile BlackBerry Q10, but the update isn’t available quite yet as it has to first pass through wireless carrier approval.

The OS 10.3.1 update includes the following:

  • BlackBerry Blend
  • Amazon Appstore
  • BlackBerry Assistant
  • BlackBerry Hub with Instant Actions
  • Time Saving Keyboard Shortcuts
  • More Battery Power with new Power Saving Profile
  • New Camera Functions, including HDR, Time Shift, and more
  • New Calendar Meeting Mode
  • BBM Meetings

It’s great to see BlackBerry providing the update across all BlackBerry 10 smartphones. As you can see in the above list, this is not just a minor update either. Adding native Android app support through the Amazon Appstore and BlackBerry Blend are key functions that vastly improve the BlackBerry 10 experience.

Facebook launches Facebook Lite App for lower end smartphones

Facebook comes to lower end smartphone owners rescue with Facebook ‘Lite’

In addition to stickers inside Messenger, Comments, Groups and the latest addition of Rooms, Facebook has yet again  launched another surprising App called Facebook Lite, which can be called as a simplified version of its mobile website from 2009-2010, which is specifically designed for lower end Android devices available in markets.

TechCrunch says that the App was launched in a certain handful of countries in Asia and Africa including Bangladesh, Nepal, Nigeria, South Africa, Sudan, Sri Lanka, Vietnam and Zimbabwe where the App is being tested for further upgradation and bug fixing.

A report by TechCrunch says that the App has been built to accommodate lower end and Android devices. The Facebook Lite will be packed in just 252KB file size so that any lower end Android phone can run it smoothly. The App will prove beneficial in areas with 2G and poor quality internet connections. Facebook Lite will have some of the features of Facebook like push notifications and camera integration.

As smartphone sales are rising by the day in emerging markets, the company wants to offer a flawless experience to users no matter which handset they are using. For the past few years ,smartphone sales are increasing in India, which was is the fastest growing market in Asia Pacific in 2014, while there’s huge potential in Africa and Southeast Asia where mobile will be the primary internet platform for millions. Even though Facebook retooled its Android app specifically for emerging markets last year, it is making sure that it offers a good experience to any user not matter their device or network connection. Android is the platform of choice for most smartphone owners in emerging markets since such smartphones cost a little bit over  $30.fb1

Facebook already has its Internet.org project, which provides free access to a various range of mobile internet services is currently limited to a selected countries in Africa at this point and, since it is being developed in partnership with carriers and other telecom industry players, however such launches are both time and resource intensive, so why not put together a ‘Lite’ app that can potentially push the Facebook subscriber base up by millions overnight seems to be the thinking of Facebook boardroom.

You will be surprised if you’re in one of the mentioned eight countries where Facebook Lite has launched then you can check it out here.

The early signs have give Mark Zuckerberg owned company a very positive feedback from the users and they seemed quite impressed with the App. Statistically, the app has already crossed 10,000 downloads at the time of writing, since it was launched with a overwhelming 4.6 rating from an initial 693 reviewers.

A report suggests that India’s mobile Facebook users will surpass US user-base by 2017. According to a report by market research firm eMarketer, nearly 1 billion users worldwide will access the popular social network through their mobile phones at least once each month in 2015.

Recently, Facebook announced that growing Internet penetration and a large youth population has helped it expand its user base in India to 112 million, which is the largest after the United States. Of the 112 million users in India, more than 99 million users are using the platform on their mobile phones at least once a month.

Facebook Lite will be of great help to the large expanse of people staying in poorly connected villages in the countries named above.