2014/01/03

Snapchat leaked

For those of you which do not know, Snapchat is a very popular social platform that enables users to share their videos and photos to a certain group of people for a limited period of time. This means that after the the set amount of time (the range is between 1 and 10 seconds) the video or a photo is deleted from the viewers device and removed from Snapchat's servers. Snapchat allows users to share private media with a level of security. The newly released page SnapchatDB.info leaked 4.6 million user's private data such as usernames and telephone numbers, this caused great chaos and shakened the very surface on which Snapchat is based - privacy.

Snapchat data stolen
Snapchat
Now the page is suspended, but for couple of days time, everyone could of joined and downloaded a set of telephone numbers and usernames. The telephone number's last two diggets was however blurred, saving some privacy. The hackers claimed that the actions were taken to raise the levels of attention towards user's safety and that the company would put more time and effort towards it's users satisfaction. Hack in was made in regard to the new updates that were implemented concerning the time span of video.

Here is what the hackers had to say about the incident: "Our motivation behind the release was to raise the public awareness around the issue, and also put public pressure on Snapchat to get this exploit fixed. It is understandable that tech startups have limited resources but security and privacy should not be a secondary goal. Security matters as much as user experience does." They also made the point that even full leak of phone numbers were in question and the users can not continue to feel safe. The developers quickly took action and set up a page that allowed to view whether your personal information has been encrypted. However, the company did not release any kind of statement towards the incident and ignored any of questions that has been asked.

Last week, a group of Gibson Security "white hat" hackers, meaning they do not release any information that could harm the user or the company, released a code that could of allowed for such an action to take place. SnapchatDB group also highlighted that there has been little or no action taken after the incident, meaning the user's are still in danger regarding their personal data. Gibson Security quickly released a statement that they have nothing to do with SnapchatDB community and that the incident was just a matter of time.

No comments:

Post a Comment