Caution! This app is leaking your private conversations, delete it immediately
Image: Facebook |
Ahmedabad, 22 February 2023, Wednesday
If you also use voice chat apps, you should be careful. Recently an app leaked the private calls of all its users. This is an Android app called OyeTalk. The app left its database open for public access. OyeTalk has been downloaded by over 5 million people so far and the app has over 21000 reviews and a 4.1 out of 5 star rating on the Google Play Store.
This is how the data leak happened
According to information, OyeTalk's user data and conversations were leaked through unprotected access to Google Firebase. The leaked data included users' chat, username and IMEI number of the phone. Hackers or anyone else could misuse this data. Additionally, sensitive data was hardcoded into the app's client site, including Google API keys and links to Google storage buckets, making the app vulnerable to reverse engineering. The app developer failed to shut down public access to the database upon learning of the data leak.
Data has been leaked before
This is not the first time that the data of OyeTalk users has been leaked. The app's database was previously leaked by unknown people. A fingerprint is used to identify Open Firebase in the database. Which indicates lack of proper authentication and authorization for data. This flaw could allow hackers etc. to access sensitive data such as email logins.
Comments
Post a Comment