Startups

Not-So-Ephemeral Messaging: New SnapChat “Hack” Lets Users Save Photos Forever

Comment

Even as SnapChat leaves tech reporters and people over 25 scratching their heads — is it the next Instagram, or a massive sexting conspiracy? — the app has succeeded in bringing ephemeral (or self-destructive, if you’re into the whole Mission Impossible thing) messaging to the mainstream. The app has been busy racking up a billion-plus “snaps,” is reportedly raising a huge round of funding, and Zuckerberg himself couldn’t wait to get involved in the coding and launch of Poke, Facebook’s newly-launched “SnapChat clone.”

Nonetheless, evidence has surfaced that could threaten SnapChat’s private world of ephemeral messaging, bringing those innocent photos or salacious sexts to light. Alexia, via Buzzfeed, reported on SnapChat’s first “security loophole,” which showed that “snaps” could be accessed via temporary files stored on users’ iPhones and other iOS devices. While Alexia makes the good point that few beyond tech reporters are likely to go to the trouble of unearthing these snaps, we’ve now been alerted to another hack that allows users to capture “snaps” on their iOS devices and doesn’t require you to use iExplorer or iFunBox.

Instead, this hack allows you to easily save screenshots of “snaps” in a few simple steps, with no more than SnapChat and your multitasking bar.

The loophole comes to you courtesy of college student, hacker and web designer Raj Vir, who tells us that, “unknown to many, photos sent via SnapChat can be easily saved,” which he thinks could just “threaten the very impermanent nature of the app.”

How? Usually, when a user takes a screenshot of a SnapChat photo, the sender is immediately notified, but, according to Vir, it turns out that it’s possible to take “secret screenshots” that don’t in fact notify the sender at all.

But don’t just take Raj’s word for it, try it yourself.

Picture 4Here’s how it works:

  • While viewing a SnapChat photo, take a screenshot by pressing the home and power button at the same time, while making sure to continue holding on the screen in order to ensure that the picture gets captured.
  • After taking the screenshot, the photo won’t show on the screen and you will be brought back to your list of snaps.
  • Before the photo expires, double tap the home button to bring up the multitasking bar. Once you’ve brought that up, SnapChat won’t recognize your screenshot.

If you complete the steps above, a screenshot of the snap should be saved to your camera, without the sender being the wiser.

Picture 2Why does this work? Vir explains that it has to do with the way SnapChat detects screenshots in iOS. Taking a screenshot interrupts any touch events on the screen and, as such, SnapChat intercepts touch cancellation events, determining that you have taken a screenshot. Some other events, however, also interrupt touch events: Namely, notifications and the multitasking bar.

SnapChat generally accounts for this by voiding the screenshot detection of the picture if the app entered the background or became inactive, he says, so if you take a screenshot and then summon the multi-tasking bar — as seen above — SnapChat will determine the action to be a screenshot and not the alternative.

From Vir’s testing, this method works on all versions of SnapChat on iOS. However, it does not work on Facebook’s Poke, which should be of interest to the SnapChat team. Or not. SnapChat CEO Evan Spiegel shrugged off the last reported hack and didn’t seem to fazed. This, however, is easy enough that any novice SnapChat user can do it — even if it requires some dexterity of the fingers, a little legerdemain, if you will.

Of course, while SnapChat will likely be able to close this loophole without moving mountains, Vir says that there isn’t an official iOS method for detecting screenshots, so it’s likely that another method will surface even if this is fixed and that there are several ways — albeit more complicated — to take secret screenshots on iOS without using this method. The point is that this problem could persist.

Whether it truly poses a threat to SnapChat’s ephemeral photo magic remains to be seen — probably not — but it could be enough to make users think twice before sending anything too incriminating. Not that SnapChat is ever used to send incriminating photos. I would know absolutely nothing about that. Nothing.

After all, since Zuckerberg and company launched Poke, others have followed suit with SnapChat clones and, while some may have thought that would put a damper on the app’s growth, it’s continued to hockey-stick nonetheless.

Is it a salacious social network that lures innocent teens into a giant sexting ring, or is it something else entirely? The fact of the matter is, as Jordan so astutely points out, in the world of social media, where everything is public, there can be a lot of pressure to maintain a positive residual/digital self-image. Ephemeral, or self-destructive messaging apps give users the opportunity to be goofy — to be controversial — in privacy, without sharing it with their entire social network. Sure this leads to sexting, but most of the traffic on SnapChat is far less prurient.

Either way, a sexting conspiracy it most definitely is not. SnapChat has been out to put a limit on photo messaging, turning it into a memory and not something that is permanent and forever tangible — and for this reason it’s struck a chord. Whether or not these sorts of hacks can lead to an unravelling of these tenets remains to be seen, but my guess is probably not. The ephemeral message is here to stay, whether a feature or a billion dollar business.

Thanks to Raj Vir for his help and for bringing this to our attention.

More TechCrunch

A feature Google demoed at its I/O confab yesterday, using its generative AI technology to scan voice calls in real-time for conversational patterns associated with financial scams, has sent a…

Google’s call-scanning AI could dial up censorship by default, privacy experts warn

Google’s going all-in on AI — and it wants you to know it. During the company’s keynote at its I/O developer conference on Tuesday, Google mentioned “AI” more than 120…

The top AI announcements from Google I/O

Uber is taking a shuttle product it developed for commuters in India and Egypt and converting it for an American audience. The ride-hail and delivery giant announced Wednesday at its…

Uber has a new way to solve the concert traffic problem

Here are quick hits of the biggest news from the keynote as they are announced.

Google I/O 2024: Here’s everything Google just announced

Google is preparing to launch a new system to help address the problem of malware on Android. Its new live threat detection service leverages Google Play Protect’s on-device AI to…

Google takes aim at Android malware with an AI-powered live threat detection service

Users will be able to access the AR content by first searching for a location in Google Maps.

Google Maps is getting geospatial AR content later this year

The heat pump startup unveiled its first products and revealed details about performance, pricing and availability.

Quilt heat pump sports sleek design from veterans of Apple, Tesla, and Nest

The space is available from the launcher and can be locked as a second layer of authentication.

Google’s new Private Space feature is like Incognito Mode for Android

Gemini, the company’s family of generative AI models, will enhance the smart TV operating system so it can generate descriptions for movies and TV shows.

Google TV to launch AI-generated movie descriptions

When triggered, the AI-powered feature will automatically lock the device down.

Android’s new Theft Detection Lock helps deter smartphone snatch and grabs

The company said it is increasing the on-device capability of its Google Play Protect system to detect fraudulent apps trying to breach sensitive permissions.

Google adds live threat detection and screen-sharing protection to Android

This latest release, one of many announcements from the Google I/O 2024 developer conference, focuses on improved battery life and other performance improvements, like more efficient workout tracking.

Wear OS 5 hits developer preview, offering better battery life

For years, Sammy Faycurry has been hearing from his dietician mom and sister about how poorly many Americans eat and their struggles with delivering nutritional counseling. Although nearly half of…

Dietitian startup Fay has been booming from Ozempic patients and emerges from stealth with $25M from General Catalyst, Forerunner

Apple is bringing new accessibility features to iPads and iPhones, designed to cater to a diverse range of user needs.

Apple announces new accessibility features for iPhone and iPad users

TechCrunch Disrupt, our flagship startup event held annually in San Francisco, is back on October 28-30 — and you can expect a bustling crowd of thousands of startup enthusiasts. Exciting…

Startup Blueprint: TC Disrupt 2024 Builders Stage agenda sneak peek!

Mike Krieger, one of the co-founders of Instagram and, more recently, the co-founder of personalized news app Artifact (which TechCrunch corporate parent Yahoo recently acquired), is joining Anthropic as the…

Anthropic hires Instagram co-founder as head of product

Seven orgs so far have signed on to standardize the way data is collected and shared.

Venture orgs form alliance to standardize data collection

As cloud adoption continues to surge toward the $1 trillion mark in annual spend, we’re seeing a wave of enterprise startups gaining traction with customers and investors for tools to…

Alkira connects with $100M for a solution that connects your clouds

Charging has long been the Achilles’ heel of electric vehicles. One startup thinks it has a better way for apartment dwelling EV drivers to charge overnight.

Orange Charger thinks a $750 outlet will solve EV charging for apartment dwellers

So did investors laugh them out of the room when they explained how they wanted to replace Quickbooks? Kind of.

Embedded accounting startup Layer secures $2.3M toward goal of replacing QuickBooks

While an increasing number of companies are investing in AI, many are struggling to get AI-powered projects into production — much less delivering meaningful ROI. The challenges are many. But…

Weka raises $140M as the AI boom bolsters data platforms

PayHOA, a previously bootstrapped Kentucky-based startup that offers software for self-managed homeowner associations (HOAs), is an example of how real-world problems can translate into opportunity. It just raised a $27.5…

Meet PayHOA, a profitable and once-bootstrapped SaaS startup that just landed a $27.5M Series A

Restaurant365, which offers a restaurant management suite, has raised a hot $175M from ICONIQ Growth, KKR and L Catterton.

Restaurant365 orders in $175M at $1B+ valuation to supersize its food service software stack 

Venture firm Shilling has launched a €50M fund to support growth-stage startups in its own portfolio and to invest in startups everywhere else. 

Portuguese VC firm Shilling launches €50M opportunity fund to back growth-stage startups

Chang She, previously the VP of engineering at Tubi and a Cloudera veteran, has years of experience building data tooling and infrastructure. But when She began working in the AI…

LanceDB, which counts Midjourney as a customer, is building databases for multimodal AI

Trawa simplifies energy purchasing and management for SMEs by leveraging an AI-powered platform and downstream data from customers. 

Berlin-based trawa raises €10M to use AI to make buying renewable energy easier for SMEs

Lydia is splitting itself into two apps — Lydia for P2P payments and Sumeria for those looking for a mobile-first bank account.

Lydia, the French payments app with 8 million users, launches mobile banking app Sumeria

Cargo ships docking at a commercial port incur costs called “disbursements” and “port call expenses.” This might be port dues, towage, and pilotage fees. It’s a complex patchwork and all…

Shipping logistics startup Harbor Lab raises $16M Series A led by Atomico

AWS has confirmed its European “sovereign cloud” will go live by the end of 2025, enabling greater data residency for the region.

AWS confirms it will launch European ‘sovereign cloud’ in Germany by 2025, plans €7.8B investment over 15 years

Go Digit, an Indian insurance startup, has raised $141 million from investors, including Goldman Sachs, ADIA, and Morgan Stanley, as part of its IPO.

Indian insurance startup Go Digit raises $141M from anchor investors ahead of IPO