Like Tree7Likes
  • 2 Post By shri
  • 1 Post By shri
  • 1 Post By timonoj
  • 3 Post By mrgoodkat

WeChat - Guess what happened....

Reply
  1. #1

    Join Date
    Dec 2002
    Location
    ???
    Posts
    32,129

    WeChat - Guess what happened....

    Guess what happened when Axios' China correspondant / reporter changed their password...

    https://twitter.com/BethanyAllenEbr/...11996007559168

    Last edited by shri; 05-06-2020 at 08:37 AM.
    drumbrake and Mrs. Jones like this.

  2. #2

    Join Date
    Jan 2010
    Posts
    4,124

    Doesn't that imply WeChat stores the passwords in plain text? I'm sure that's safe.


  3. #3

    Join Date
    Dec 2002
    Location
    ???
    Posts
    32,129

    Or all raw text / API requests go through their filters before it is processed.

    Rob2020 likes this.

  4. #4

    Join Date
    Jan 2015
    Posts
    97

    Like any good government-influenced software/hardware/IT company, there'll be backdoors where necessary to facilitate spying or information gathering. Not limited to China here, either. Plenty of American companies to choose from too.


  5. #5

    Join Date
    Aug 2013
    Location
    The World
    Posts
    1,131

    An amusing story!


  6. #6

    Join Date
    Mar 2020
    Posts
    1

    Did that all the time at places where an email address is asked for wifi access. Wonder how many similar addresses are collected in a day from McDonald's


  7. #7

    Join Date
    Nov 2009
    Location
    /home/timonoj
    Posts
    807
    Quote Originally Posted by mrgoodkat:
    Doesn't that imply WeChat stores the passwords in plain text? I'm sure that's safe.
    Quote Originally Posted by shri:
    Or all raw text / API requests go through their filters before it is processed.
    I'd say they just use a two-way encription, not just a hashing method...So it's encrypted, but they can decrypt it too. But that's just my take.
    shri likes this.

  8. #8

    Join Date
    Nov 2005
    Location
    Cramped island
    Posts
    4,115

    Do they really care much what is typed in english ?


  9. #9

    Join Date
    Jan 2010
    Posts
    4,124
    Quote Originally Posted by freeier:
    Do they really care much what is typed in english ?
    Give it a try and report back
    Mrs. Jones, eIIe and TheBrit like this.

  10. #10

    Join Date
    Jun 2020
    Posts
    3
    Haha, that's not how that works. You need a friend in China (or other long-time WeChat user) that will vouch for you. It's very hard or impossible to create an account as a foreigner without Chinese friends. My wild guess is that the password was intercepted in the plaintext by the Firewall (yes, it's sent with SSL, but I'm pretty sure China has appropriate privkeys), correlated with the WeChat user, and blocked automatically with some very internal Firewall - WeChat integration.