The primary function remains intact. You can send and receive individual and group messages, see typing indicators, and receive read receipts (if enabled).
| Risk | Severity | Explanation | |-------|----------|-------------| | TLS 1.0 only | Critical | All network traffic can be intercepted (POODLE, BEAST attacks). | | No security patches | Critical | No fixes for Log4Shell, Stagefright, or any post-2014 exploits. | | Side-loaded APK | High | Potentially modified version could contain spyware or session token stealers. | | Expired certificates | High | App cannot verify server identity, enabling MITM. |
Recommendation: Do not enter Facebook credentials into Messenger v6 on Android 2.3. Credential theft is highly feasible.
Published: October 2023
Reading Time: 6 minutes
The primary function remains intact. You can send and receive individual and group messages, see typing indicators, and receive read receipts (if enabled).
| Risk | Severity | Explanation | |-------|----------|-------------| | TLS 1.0 only | Critical | All network traffic can be intercepted (POODLE, BEAST attacks). | | No security patches | Critical | No fixes for Log4Shell, Stagefright, or any post-2014 exploits. | | Side-loaded APK | High | Potentially modified version could contain spyware or session token stealers. | | Expired certificates | High | App cannot verify server identity, enabling MITM. |
Recommendation: Do not enter Facebook credentials into Messenger v6 on Android 2.3. Credential theft is highly feasible.
Published: October 2023
Reading Time: 6 minutes