I just uncovered a subtle flaw in the latest update of that messaging app's key exchange. Think we can turn it into a silent backdoor.