Skip to main content

WhatsApp ``Delete for Everyone`` Does Not Delete Media Files Sent to iPhone Users.


Mistakenly sent a picture to someone via WhatsApp that you shouldn't have?

Well, we've all been there, but what's more unfortunate is that the 'Delete for Everyone' feature WhatsApp introduced two years ago contains an unpatched privacy bug, leaving its users with false sense of privacy.

WhatsApp and its rival Telegram messenger offer "Delete for Everyone," a potentially life-saving feature on which millions of people today rely to escape the awkwardness of sending messages/pictures/videos to the wrong person.

As the name indicates, the 'Delete for Everyone' feature has been intended to unsend mistakenly sent inappropriate messages—including photos and videos—from the recipient's phone, or all members of a group.

In the case of WhatsApp, the feature is only available within 1 hour, 8 minutes, and 16 seconds of sending a message you want to delete.


However, it turns out that WhatsApp 'Delete for Everyone' feature doesn't delete media files sent to iPhone users (with default settings) as it does from the Android devices, leaving them saved on the recipient's iOS device even if the messenger chat screen displays you, "This message has been deleted."

According to Shitesh Sachan, an application security consultant, who found this privacy issue and shared his findings exclusively with The Hacker News, the feature for WhatsApp for iOS has not been designed to delete received media files saved in the iPhone's Camera Roll.

On the other hand, if you use 'Delete for Everyone' against an Android user, WhatsApp will delete the sent media files from the recipient device's gallery as well.


It concerns because WhatsApp by default automatically saves all images/videos you receive via WhatsApp to your iPhone's Camera Roll or Android's Media Gallery, which otherwise can be turned OFF from the app's settings, but very few people care about it.

Earlier this week, a similar privacy flaw was disclosed in the "Delete for Everyone" feature of the Telegram messenger, which the company patched immediately to keep the feature useful in situations for which it has primarily been designed.


However, when Sachan reported this issue to WhatsApp, the company refused to address the issue, saying:

"The functionality provided via "Delete for Everyone" is intended to delete the message and there is no guarantee that the media (or message) will be permanently deleted—the implementation focuses around the message presence in WhatsApp."

WhatsApp Security team also argued that the "recipients may see your message before it's deleted or if deletion wasn't successful," but the feature was not even designed to save you from out-of-the-hand scenarios where recipients move or save the media file manually or screenshot the chat.

Though WhatsApp said "there is no guarantee a message or the attachments will be deleted," the company said it might make changes to this functionality and its implementation in the future.



Comments

Post a Comment

Popular posts from this blog

Vurra Constituency MP Adriko Yovan gets six months imprisonment for failing to repay loan.

📸: Hon Adriko Yovan. Story By Andrew Cohen Amvesi. ARUA . Yovan Adriko, the Vurra County Member of Parliament (MP) in Arua district has been committed to six months civil prison for failing to clear debts amounting to shs55,677,400. Adriko was on Thursday evening sent to Arua government prison to serve six months shortly after his arrest at Slumberland hotel in Arua City. MP Adriko warrant of committal judgement debtor to jail. Paul Mawa of T/A Vitality Associates, the court bailiff assigned to arrest the MP, duped him to come and pick some money for a land transaction at Slumberland hotel where he picked him like a baby after a long hunt. Adriko was immediately arraigned before Her Worship Karungi Leo, the Deputy Registrar of Arua High Court who later committed him to imprisonment not exceeding six months. Part of Adriko’s warrant of arrest issued b court Adriko was sent to the coolers for failing to clear shs48m which is the princip
1 comment
Read more

Arrested Arua City Officials Taken to Kampala this Night.

Wednesday 8-November-2023. 📸: The arrest of Arua City Physical Planner Mr Findru Moses on 6-Nov-2023 at around 2pm. 📸: Mr Jobile Cornelius the City Deputy town clerk who was arrested on 7-Nov-2023 at around 4pm. 📸: Mrs Lillian Aleni (in red cloth) and Mr Edoni Benard being handcuffed by police officer on 6-Nov-2023 at around 6pm. The bail that was to be issued last night 8pm 7-Nov-2023 to release the arrested City Deputy town clerk Mr Jobile Cornelius and CFO Mr Sam Adriko over mismanagement of government properties and monies was canceled, and by this time of the night 11pm, highly placed sources leaked that, all the arrested suspects (Mr Findru Moses the Arua City Physical Planner, Mr Jobile Cornelius the Deputy City clerk, Mr Adriko Sam the CFO, Mr Edoni Benard the PDM BOG Chairperson for Pangisa ward and Mrs Lillian Aleni the parish chief for Pangisa ward) are being transported by State House Anti-corruption Unit officers who will soon be reac
Post a Comment
Read more

Wedded Ayivu West MP Lematia John Fights Over Another Woman.

  📸: Hon Lematia John. By URN. Police in Arua district are investigating a case of assault and threatening violence involving the Member of Parliament for Ayivu West Constituency John Lematia and James Ariko, a DSTV technician in Arua city. Drama ensued on Easter Sunday 31-3-2024 at Dream Land Hotel located at Kuluva trading center along Arua-Nebbi highway in Arua district when the legislator and the technician engaged in a fight reportedly over a woman identified as Faith Eyotaru 25, a relationship officer at Victoria University Kampala. The scuffle started after Ayivu West Mp John Lematia went to swim at Dreamland Hotel with Faith Eyotaru only to find Ariko, who had gone to the same hotel earlier. However, upon seeing the duo coming out of the vehicle, Ariko confronted Lematia with both men claiming to be having a relationship with the lady. It took the intervention of the staff at the hotel who intervened and separated the fight between the men. Josephine Angucia, the West Nile re
Post a Comment
Read more