Caution! This app is leaking your private conversations, delete it immediately

Image: Facebook

Ahmedabad, 22 February 2023, Wednesday

If you also use voice chat apps, you should be careful. Recently an app leaked the private calls of all its users. This is an Android app called OyeTalk. The app left its database open for public access. OyeTalk has been downloaded by over 5 million people so far and the app has over 21000 reviews and a 4.1 out of 5 star rating on the Google Play Store.

This is how the data leak happened

According to information, OyeTalk's user data and conversations were leaked through unprotected access to Google Firebase. The leaked data included users' chat, username and IMEI number of the phone. Hackers or anyone else could misuse this data. Additionally, sensitive data was hardcoded into the app's client site, including Google API keys and links to Google storage buckets, making the app vulnerable to reverse engineering. The app developer failed to shut down public access to the database upon learning of the data leak.

Data has been leaked before

This is not the first time that the data of OyeTalk users has been leaked. The app's database was previously leaked by unknown people. A fingerprint is used to identify Open Firebase in the database. Which indicates lack of proper authentication and authorization for data. This flaw could allow hackers etc. to access sensitive data such as email logins.

Comments

Popular posts from this blog

What does Apple say to care for a soaked phone?

100 km in the last layer of Arctic ice. Long pit scary for the world

Alert! If you do this mistake then understand dead, WhatsApp will be hijacked, then don't say that data is leaked.

Do-Not Disturb Mode in WhatsApp

Are you also tired of slow internet on phone? So make this change in immediate setting, the speed will increase

New beta versions of Android, iOS launched

Nokia won the case against Oppo and OnePlus, cannot sell the phone in this country

App-cab companies hide their secret data from police

Know, how likely is Vikram Lander and Pragyan Rover to be operational again?

Russia's cyber-attack threat to scientists working on corona vaccine: report