View Single Post
Posts: 12 | Thanked: 25 times | Joined on Feb 2012
#21
The problem you guys are going to have is that the code you are in possession of is way out of date.
It's easy enough to sniff out the new data connections if you use a Man in the middle attack.

I'm still not sure how the activation code is done; The rest I am sure of.
I can successfully get both username and password by providing Phone Number and IMEI.

It's all really simple, and I don't want to say too much on a public here atm, the only thing I can't work out is the activation code.

I'm considering building a web client soon.

Hint for future... don't use iq.php to get a list of available contacts; the current official clients don't use this anymore. It will be obvious to WhatsApp staff that you've gained access.

I do know for sure that the 3 digit verification code can be calculated by NUMBER + NETWORK only. It's not a random number.


If you want more info, circle me on Google+ (and let me know who you are, and that you're a Maemo user)
https://plus.google.com/u/0/105182152373033008678/


Edit: Verification code does not rely on MNC.
Edit2: Verification code does not rely on MCC.
This means it only requires Country Code & Phone Number to be calculated.

What's really annoying...
I thought I got lucky when adding the digits of my MCC + MNC + CC, then multiplying it by my local number, the last 3 digits were my verification code.

Last edited by OzJD; 2012-02-18 at 16:50.
 

The Following 3 Users Say Thank You to OzJD For This Useful Post: