Hacker News new | ask | show | jobs
by RandomDistort 559 days ago
A lot of WhatsApp's features are enforced client-side, which means on Web they just break with DevTools.

I've done some research into this (haven't published it) but also can't get Facebook's bug bounty report tool to work (whenever I create a facebook account it gets autobanned) so I haven't been able to report them either. I wonder if stuff like this would be eligible, I don't see why it wouldn't.
1 comments
loncat4215 559 days ago
> A lot of WhatsApp's features are enforced client-side, which means on Web they just break with DevTools. This is true. IIRC, there is also a "bug", I think it's unfixable due to WhatsApp's nature at the time, where you can send a message with a tampered quoted reply. It's also done in the DevTools by modifying the quoted message ID to something that doesn't exist.

> I wonder if stuff like this would be eligible, I don't see why it wouldn't. I just reported it, let's see if it's eligible

link
RandomDistort 559 days ago
Ok, can you let me know if they say it's valid, as if it is considered valid I'll try again with investigating and reporting some issues I found.
link