Forensics on WhatsA...
 
Notifications
Clear all

Forensics on WhatsApp

6 Posts
4 Users
0 Likes
549 Views
CopyRight
(@copyright)
Posts: 184
Estimable Member
Topic starter
 

The images that are sent and received using the APP "Whatsapp" have thier EXIF details stripped off. Is there a way where we can analyze the photos and know stuff like when it was taken and where and so on?

Or the EXIF info are permanently stripped off by WhatsApp?
We'de like to track the original sender of the picture.

 
Posted : 03/03/2013 11:49 am
keydet89
(@keydet89)
Posts: 3578
Famed Member
 

The images that are sent and received using the APP "Whatsapp" have thier EXIF details stripped off.

I'd think that you pretty much answered your own question.

If you have the source device from which the images were sent, you may find copies of the images before they were run through WhatsApp.

 
Posted : 03/03/2013 6:20 pm
DaveAllen
(@daveallen)
Posts: 12
Active Member
 

I'm not sure about WhatsApp, but I've been told in training that although Facebook removes EXIF data on the site, they retain the originals which can be retrieved with a warrant. Maybe WhatsApp still has what you need. Happy Hunting.

-Dave

 
Posted : 04/03/2013 12:09 am
CopyRight
(@copyright)
Posts: 184
Estimable Member
Topic starter
 

Thanks Folks..

Yeah we do have the device and there aren't any original photos on the device itself.

EXIF details are stripped off for higher uploading speeds or protecting privacy, what do you think?

All i know is that its making our lives harder =P!!

 
Posted : 04/03/2013 11:05 am
Passmark
(@passmark)
Posts: 374
Reputable Member
 

I assume you looked for deleted files that can be recovered on the original device?

Did you confirm that it really does strip all the data and not overwrite it with nulls or something?

Did you try searching the net for a second copy of the same image without the data stripped. See,
http//images.google.com/imghp?hl=en

 
Posted : 04/03/2013 2:53 pm
CopyRight
(@copyright)
Posts: 184
Estimable Member
Topic starter
 

Passmark thats right, and yes i have searched on google images, nothing similar.
Please check your Personal Messages Inbox .

 
Posted : 04/03/2013 3:21 pm
Share:
Share to...