WhatsApp has resolved an issue wherein some of its private groups and user profiles were accessible on Google Search.

The development comes at a time when WhatsApp is facing a backlash from its users over its new privacy policy and terms of service that seeks to share more user data with parent Facebook. There is a strong shift in the messaging platform as many user moving out to other Secured Messaging service like Signal and Telgram.

The bug, spotted by cybersecurity researcher Rajshekhar Rajaharia, Bug allowed users to join a private WhatsApp group, see their participants and phone numbers along with updates shared within the group.

Rajaharia tweeted over 1,700 group invite links and more than 7,000 profiles were appearing in Google search results.Some of these links led to groups sharing pornography, while others were for groups dedicated to specific interests or communities. These links are, however, no longer appearing in search results.

WhatsApp had not included the robots.txt file for ‘chat.whatsapp.com’ subdomain which had led to the indexing of these groups and profiles, he added.Robots.txt is a global standard used by developers to instruct search engine crawlers as to which pages can or cannot be processed from their websites.

Rajaharia also confirmed that bug has been fixed, but he doubts whether it was done by Google search or Whatapp.

“Since March 2020, WhatsApp has included the “noindex” tag on all deep link pages which, according to Google, will exclude them from indexing. We have given our feedback to Google to not index these chats. As a reminder, whenever someone joins a group, everyone in that group receives a notice and the admin can revoke or change the group.

LEAVE A REPLY

Please enter your comment!
Please enter your name here