WeChat devs introduced security flaws when they modded TLS, say researchers
October 17, 2024 at 04:41AM Researchers from the University of Toronto’s Citizen Lab found that WeChat’s modified cryptographic protocol, MMTLS, introduces security weaknesses. Key issues include the business-layer encryption not securing metadata and the potential for network-based attacks. The app lacks end-to-end encryption, allowing Tencent to access user messages, raising privacy concerns. ### Meeting Summary … Read more