VK can remotely enable surveillance functions in Max, and the user will not even notice

VK can remotely enable surveillance functions in Max, and the user will not even notice

Researchers from the digital security lab InterSecLab, together with RKS Global, came to this conclusion.

The InterSecLab report notes that Max has no end-to-end encryption, which means “secret chats” are not protected — every message can be read on VK’s servers. The “secret chat” function is simply a disappearing-message timer, the researchers warn.

The surveillance functions allow VK to read all content; every text message contains a flag instructing the server to check it for links and content.

Max uploads the entire address book to VK’s servers in plain text, the InterSecLab report says: any user can find a registered phone number and learn the account creation date, as well as the user’s status.

For more details, read on Dozhd’s website.

🩷 Subscribe — @tvrain