Hacker News new | past | comments | ask | show | jobs | submit login

> would likely break a popular WhatsApp feature that allows anyone to join a group simply by clicking on a URL

I think this is false, I wrote that on the Wired thread, but here's a way to fix it:

1. when you create a joining link, it creates a secret uuid

2. this uuid is shared with the rest of the group

3. if Alice joins the group, every uuid created is shared to Alice (except the one Alice used, if Alice used a joining link)

4. when Bob attempts to join the group via the group id, if Bob does not have a known code Bob is refused

5. if Bob uses a known code, Bob is accepted and everyone deletes the code

This does not prevent different participant views to be created, but this is already a problem in WA anyway.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: