&gt; If WhatsApp is trustworthy and secure, then the QR code might be a hash of the public key, but to be completely frank, it could be anything.<p>Sure, but we&#x27;re talking about this specific attack&#x27;s effect on WhatsApp, if you want to debate the relative merits of open source vs closed source End-To-End encryption tools, you may have a point, but it&#x27;s not one that&#x27;s relevant here as it has nothing to do with this attack. Unless the attack can be used to update the app or something with a modified malicious version.<p>Say it were Signal instead of WhatsApp if you must. Is there any effect made by this attack?