{"id":805,"date":"2021-01-23T00:57:03","date_gmt":"2021-01-22T23:57:03","guid":{"rendered":"https:\/\/parlonstechs.com\/all\/?p=805"},"modified":"2021-01-23T00:57:03","modified_gmt":"2021-01-22T23:57:03","slug":"des-bugs-dans-signal-facebook-messenger-et-google-duo-permettaient-des-ecoutes","status":"publish","type":"post","link":"https:\/\/parlonstechs.com\/all\/2021\/01\/23\/des-bugs-dans-signal-facebook-messenger-et-google-duo-permettaient-des-ecoutes\/","title":{"rendered":"Des bugs dans Signal, Facebook Messenger et Google Duo permettaient des \u00e9coutes"},"content":{"rendered":"\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/img-s-msn-com.akamaized.net\/tenant\/amp\/entityid\/BB1cVwMZ.img?h=451&amp;w=799&amp;m=6&amp;q=60&amp;o=f&amp;l=f\" alt=\"Des bugs dans Signal, Facebook Messenger et Google Duo permettaient des \u00e9coutes\"\/><\/figure>\n\n\n\n<p style=\"font-size:24px\"><strong>L\u2019\u00e9tablissement des connexions est souvent mal impl\u00e9ment\u00e9. Dans certaines conditions, il \u00e9tait possible de r\u00e9cup\u00e9rer en douce des flux audio et\/ou vid\u00e9o dans la part d\u2019un interlocuteur, sans aucune interaction.<\/strong><\/p>\n\n\n\n<p>La chercheuse en s\u00e9curit\u00e9 Natalie Silvanovich vient de r\u00e9v\u00e9ler une s\u00e9rie de failles qu\u2019elle a d\u00e9couverte dans cinq messageries de premier plan\u00a0: Signal, Facebook Messenger, Google Duo, JioChat et Mocha. Aujourd\u2019hui corrig\u00e9es, ces failles permettaient de recevoir en douce des donn\u00e9es audio et\/ou vid\u00e9o de la part d\u2019un interlocuteur simplement en initiant un appel et sans aucune interaction de sa part. Elles sont similaires \u00e0 cet \u00e9norme bug trouv\u00e9 en 2019 dans\u00a0FaceTime, et c\u2019est d\u2019ailleurs ce qui a inspir\u00e9 le travail de recherche de Natalie Silvanovich.<\/p>\n\n\n\n<p>Toutes ces applications de messagerie s\u2019appuient sur le protocole WebRTC pour g\u00e9rer les flux audio\/vid\u00e9o. Mais la mani\u00e8re d\u2019\u00e9tablir ces connexions est tr\u00e8s variable et, comme a pu le constater cette experte, la gestion des \u00e9tats de signalisation (\u00ab&nbsp;Signalling State Machines&nbsp;\u00bb) est souvent assez complexe et mal goupill\u00e9e. Dans les cas de Signal et Facebook Messenger, il \u00e9tait ainsi possible de r\u00e9cup\u00e9rer des flux audio. Google Duo permettait de capter des flux vid\u00e9os. Quant \u00e0 JioChat et Mocha, on pouvait avoir le son et l\u2019image. Toutes ces failles ont \u00e9t\u00e9 corrig\u00e9es entre septembre 2019 et novembre 2020.<\/p>\n\n\n\n<p><strong>Source\u00a0<\/strong>:\u00a0Google Project Zero<\/p>\n","protected":false},"excerpt":{"rendered":"<p>L\u2019\u00e9tablissement des connexions est souvent mal impl\u00e9ment\u00e9. Dans certaines conditions, il \u00e9tait possible de r\u00e9cup\u00e9rer en douce des flux audio et\/ou vid\u00e9o dans la part d\u2019un interlocuteur, sans aucune interaction. [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":806,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[21,11,41],"tags":[],"class_list":["post-805","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-actualite","category-cybersecurite","category-reseaux-sociaux"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Des bugs dans Signal, Facebook Messenger et Google Duo permettaient des \u00e9coutes - Parlons Techs - Store<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/parlonstechs.com\/all\/2021\/01\/23\/des-bugs-dans-signal-facebook-messenger-et-google-duo-permettaient-des-ecoutes\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Des bugs dans Signal, Facebook Messenger et Google Duo permettaient des \u00e9coutes - Parlons Techs - Store\" \/>\n<meta property=\"og:description\" content=\"L\u2019\u00e9tablissement des connexions est souvent mal impl\u00e9ment\u00e9. Dans certaines conditions, il \u00e9tait possible de r\u00e9cup\u00e9rer en douce des flux audio et\/ou vid\u00e9o dans la part d\u2019un interlocuteur, sans aucune interaction. [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/parlonstechs.com\/all\/2021\/01\/23\/des-bugs-dans-signal-facebook-messenger-et-google-duo-permettaient-des-ecoutes\/\" \/>\n<meta property=\"og:site_name\" content=\"Parlons Techs - Store\" \/>\n<meta property=\"article:published_time\" content=\"2021-01-22T23:57:03+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/parlonstechs.com\/all\/wp-content\/uploads\/2021\/01\/pt-66.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"265\" \/>\n\t<meta property=\"og:image:height\" content=\"119\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"wisdom\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"wisdom\" \/>\n\t<meta name=\"twitter:label2\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/parlonstechs.com\\\/all\\\/2021\\\/01\\\/23\\\/des-bugs-dans-signal-facebook-messenger-et-google-duo-permettaient-des-ecoutes\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/parlonstechs.com\\\/all\\\/2021\\\/01\\\/23\\\/des-bugs-dans-signal-facebook-messenger-et-google-duo-permettaient-des-ecoutes\\\/\"},\"author\":{\"name\":\"wisdom\",\"@id\":\"https:\\\/\\\/parlonstechs.com\\\/all\\\/#\\\/schema\\\/person\\\/a93526e9c6c72ccb484abb7008892823\"},\"headline\":\"Des bugs dans Signal, Facebook Messenger et Google Duo permettaient des \u00e9coutes\",\"datePublished\":\"2021-01-22T23:57:03+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/parlonstechs.com\\\/all\\\/2021\\\/01\\\/23\\\/des-bugs-dans-signal-facebook-messenger-et-google-duo-permettaient-des-ecoutes\\\/\"},\"wordCount\":261,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/parlonstechs.com\\\/all\\\/2021\\\/01\\\/23\\\/des-bugs-dans-signal-facebook-messenger-et-google-duo-permettaient-des-ecoutes\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/parlonstechs.com\\\/all\\\/wp-content\\\/uploads\\\/2021\\\/01\\\/pt-66.jpg\",\"articleSection\":[\"Actualit\u00e9\",\"CyberS\u00e9curit\u00e9\",\"R\u00e9seaux Sociaux\"],\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/parlonstechs.com\\\/all\\\/2021\\\/01\\\/23\\\/des-bugs-dans-signal-facebook-messenger-et-google-duo-permettaient-des-ecoutes\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/parlonstechs.com\\\/all\\\/2021\\\/01\\\/23\\\/des-bugs-dans-signal-facebook-messenger-et-google-duo-permettaient-des-ecoutes\\\/\",\"url\":\"https:\\\/\\\/parlonstechs.com\\\/all\\\/2021\\\/01\\\/23\\\/des-bugs-dans-signal-facebook-messenger-et-google-duo-permettaient-des-ecoutes\\\/\",\"name\":\"Des bugs dans Signal, Facebook Messenger et Google Duo permettaient des \u00e9coutes - Parlons Techs - Store\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/parlonstechs.com\\\/all\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/parlonstechs.com\\\/all\\\/2021\\\/01\\\/23\\\/des-bugs-dans-signal-facebook-messenger-et-google-duo-permettaient-des-ecoutes\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/parlonstechs.com\\\/all\\\/2021\\\/01\\\/23\\\/des-bugs-dans-signal-facebook-messenger-et-google-duo-permettaient-des-ecoutes\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/parlonstechs.com\\\/all\\\/wp-content\\\/uploads\\\/2021\\\/01\\\/pt-66.jpg\",\"datePublished\":\"2021-01-22T23:57:03+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/parlonstechs.com\\\/all\\\/#\\\/schema\\\/person\\\/a93526e9c6c72ccb484abb7008892823\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/parlonstechs.com\\\/all\\\/2021\\\/01\\\/23\\\/des-bugs-dans-signal-facebook-messenger-et-google-duo-permettaient-des-ecoutes\\\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/parlonstechs.com\\\/all\\\/2021\\\/01\\\/23\\\/des-bugs-dans-signal-facebook-messenger-et-google-duo-permettaient-des-ecoutes\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/parlonstechs.com\\\/all\\\/2021\\\/01\\\/23\\\/des-bugs-dans-signal-facebook-messenger-et-google-duo-permettaient-des-ecoutes\\\/#primaryimage\",\"url\":\"https:\\\/\\\/parlonstechs.com\\\/all\\\/wp-content\\\/uploads\\\/2021\\\/01\\\/pt-66.jpg\",\"contentUrl\":\"https:\\\/\\\/parlonstechs.com\\\/all\\\/wp-content\\\/uploads\\\/2021\\\/01\\\/pt-66.jpg\",\"width\":265,\"height\":119},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/parlonstechs.com\\\/all\\\/2021\\\/01\\\/23\\\/des-bugs-dans-signal-facebook-messenger-et-google-duo-permettaient-des-ecoutes\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/parlonstechs.com\\\/all\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Des bugs dans Signal, Facebook Messenger et Google Duo permettaient des \u00e9coutes\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/parlonstechs.com\\\/all\\\/#website\",\"url\":\"https:\\\/\\\/parlonstechs.com\\\/all\\\/\",\"name\":\"Parlons Techs - Store\",\"description\":\"Toute L&#039;Actualit\u00e9 sur La Technologie et La Science\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/parlonstechs.com\\\/all\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/parlonstechs.com\\\/all\\\/#\\\/schema\\\/person\\\/a93526e9c6c72ccb484abb7008892823\",\"name\":\"wisdom\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e752642935d05c7ef20c7ff136e0baadd18b8f39f34dbcffed7f1221cb763284?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e752642935d05c7ef20c7ff136e0baadd18b8f39f34dbcffed7f1221cb763284?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/e752642935d05c7ef20c7ff136e0baadd18b8f39f34dbcffed7f1221cb763284?s=96&d=mm&r=g\",\"caption\":\"wisdom\"},\"sameAs\":[\"https:\\\/\\\/parlonstechs.com\\\/all\"],\"url\":\"https:\\\/\\\/parlonstechs.com\\\/all\\\/author\\\/wisdom\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Des bugs dans Signal, Facebook Messenger et Google Duo permettaient des \u00e9coutes - Parlons Techs - Store","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/parlonstechs.com\/all\/2021\/01\/23\/des-bugs-dans-signal-facebook-messenger-et-google-duo-permettaient-des-ecoutes\/","og_locale":"fr_FR","og_type":"article","og_title":"Des bugs dans Signal, Facebook Messenger et Google Duo permettaient des \u00e9coutes - Parlons Techs - Store","og_description":"L\u2019\u00e9tablissement des connexions est souvent mal impl\u00e9ment\u00e9. Dans certaines conditions, il \u00e9tait possible de r\u00e9cup\u00e9rer en douce des flux audio et\/ou vid\u00e9o dans la part d\u2019un interlocuteur, sans aucune interaction. [&hellip;]","og_url":"https:\/\/parlonstechs.com\/all\/2021\/01\/23\/des-bugs-dans-signal-facebook-messenger-et-google-duo-permettaient-des-ecoutes\/","og_site_name":"Parlons Techs - Store","article_published_time":"2021-01-22T23:57:03+00:00","og_image":[{"width":265,"height":119,"url":"https:\/\/parlonstechs.com\/all\/wp-content\/uploads\/2021\/01\/pt-66.jpg","type":"image\/jpeg"}],"author":"wisdom","twitter_card":"summary_large_image","twitter_misc":{"\u00c9crit par":"wisdom","Dur\u00e9e de lecture estim\u00e9e":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/parlonstechs.com\/all\/2021\/01\/23\/des-bugs-dans-signal-facebook-messenger-et-google-duo-permettaient-des-ecoutes\/#article","isPartOf":{"@id":"https:\/\/parlonstechs.com\/all\/2021\/01\/23\/des-bugs-dans-signal-facebook-messenger-et-google-duo-permettaient-des-ecoutes\/"},"author":{"name":"wisdom","@id":"https:\/\/parlonstechs.com\/all\/#\/schema\/person\/a93526e9c6c72ccb484abb7008892823"},"headline":"Des bugs dans Signal, Facebook Messenger et Google Duo permettaient des \u00e9coutes","datePublished":"2021-01-22T23:57:03+00:00","mainEntityOfPage":{"@id":"https:\/\/parlonstechs.com\/all\/2021\/01\/23\/des-bugs-dans-signal-facebook-messenger-et-google-duo-permettaient-des-ecoutes\/"},"wordCount":261,"commentCount":0,"image":{"@id":"https:\/\/parlonstechs.com\/all\/2021\/01\/23\/des-bugs-dans-signal-facebook-messenger-et-google-duo-permettaient-des-ecoutes\/#primaryimage"},"thumbnailUrl":"https:\/\/parlonstechs.com\/all\/wp-content\/uploads\/2021\/01\/pt-66.jpg","articleSection":["Actualit\u00e9","CyberS\u00e9curit\u00e9","R\u00e9seaux Sociaux"],"inLanguage":"fr-FR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/parlonstechs.com\/all\/2021\/01\/23\/des-bugs-dans-signal-facebook-messenger-et-google-duo-permettaient-des-ecoutes\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/parlonstechs.com\/all\/2021\/01\/23\/des-bugs-dans-signal-facebook-messenger-et-google-duo-permettaient-des-ecoutes\/","url":"https:\/\/parlonstechs.com\/all\/2021\/01\/23\/des-bugs-dans-signal-facebook-messenger-et-google-duo-permettaient-des-ecoutes\/","name":"Des bugs dans Signal, Facebook Messenger et Google Duo permettaient des \u00e9coutes - Parlons Techs - Store","isPartOf":{"@id":"https:\/\/parlonstechs.com\/all\/#website"},"primaryImageOfPage":{"@id":"https:\/\/parlonstechs.com\/all\/2021\/01\/23\/des-bugs-dans-signal-facebook-messenger-et-google-duo-permettaient-des-ecoutes\/#primaryimage"},"image":{"@id":"https:\/\/parlonstechs.com\/all\/2021\/01\/23\/des-bugs-dans-signal-facebook-messenger-et-google-duo-permettaient-des-ecoutes\/#primaryimage"},"thumbnailUrl":"https:\/\/parlonstechs.com\/all\/wp-content\/uploads\/2021\/01\/pt-66.jpg","datePublished":"2021-01-22T23:57:03+00:00","author":{"@id":"https:\/\/parlonstechs.com\/all\/#\/schema\/person\/a93526e9c6c72ccb484abb7008892823"},"breadcrumb":{"@id":"https:\/\/parlonstechs.com\/all\/2021\/01\/23\/des-bugs-dans-signal-facebook-messenger-et-google-duo-permettaient-des-ecoutes\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/parlonstechs.com\/all\/2021\/01\/23\/des-bugs-dans-signal-facebook-messenger-et-google-duo-permettaient-des-ecoutes\/"]}]},{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/parlonstechs.com\/all\/2021\/01\/23\/des-bugs-dans-signal-facebook-messenger-et-google-duo-permettaient-des-ecoutes\/#primaryimage","url":"https:\/\/parlonstechs.com\/all\/wp-content\/uploads\/2021\/01\/pt-66.jpg","contentUrl":"https:\/\/parlonstechs.com\/all\/wp-content\/uploads\/2021\/01\/pt-66.jpg","width":265,"height":119},{"@type":"BreadcrumbList","@id":"https:\/\/parlonstechs.com\/all\/2021\/01\/23\/des-bugs-dans-signal-facebook-messenger-et-google-duo-permettaient-des-ecoutes\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/parlonstechs.com\/all\/"},{"@type":"ListItem","position":2,"name":"Des bugs dans Signal, Facebook Messenger et Google Duo permettaient des \u00e9coutes"}]},{"@type":"WebSite","@id":"https:\/\/parlonstechs.com\/all\/#website","url":"https:\/\/parlonstechs.com\/all\/","name":"Parlons Techs - Store","description":"Toute L&#039;Actualit\u00e9 sur La Technologie et La Science","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/parlonstechs.com\/all\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"},{"@type":"Person","@id":"https:\/\/parlonstechs.com\/all\/#\/schema\/person\/a93526e9c6c72ccb484abb7008892823","name":"wisdom","image":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/secure.gravatar.com\/avatar\/e752642935d05c7ef20c7ff136e0baadd18b8f39f34dbcffed7f1221cb763284?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/e752642935d05c7ef20c7ff136e0baadd18b8f39f34dbcffed7f1221cb763284?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e752642935d05c7ef20c7ff136e0baadd18b8f39f34dbcffed7f1221cb763284?s=96&d=mm&r=g","caption":"wisdom"},"sameAs":["https:\/\/parlonstechs.com\/all"],"url":"https:\/\/parlonstechs.com\/all\/author\/wisdom\/"}]}},"_links":{"self":[{"href":"https:\/\/parlonstechs.com\/all\/wp-json\/wp\/v2\/posts\/805","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/parlonstechs.com\/all\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/parlonstechs.com\/all\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/parlonstechs.com\/all\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/parlonstechs.com\/all\/wp-json\/wp\/v2\/comments?post=805"}],"version-history":[{"count":1,"href":"https:\/\/parlonstechs.com\/all\/wp-json\/wp\/v2\/posts\/805\/revisions"}],"predecessor-version":[{"id":807,"href":"https:\/\/parlonstechs.com\/all\/wp-json\/wp\/v2\/posts\/805\/revisions\/807"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/parlonstechs.com\/all\/wp-json\/wp\/v2\/media\/806"}],"wp:attachment":[{"href":"https:\/\/parlonstechs.com\/all\/wp-json\/wp\/v2\/media?parent=805"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/parlonstechs.com\/all\/wp-json\/wp\/v2\/categories?post=805"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/parlonstechs.com\/all\/wp-json\/wp\/v2\/tags?post=805"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}