Caution! This app is leaking your private conversations, delete it immediately

Image: Facebook

Ahmedabad, 22 February 2023, Wednesday

If you also use voice chat apps, you should be careful. Recently an app leaked the private calls of all its users. This is an Android app called OyeTalk. The app left its database open for public access. OyeTalk has been downloaded by over 5 million people so far and the app has over 21000 reviews and a 4.1 out of 5 star rating on the Google Play Store.

This is how the data leak happened

According to information, OyeTalk's user data and conversations were leaked through unprotected access to Google Firebase. The leaked data included users' chat, username and IMEI number of the phone. Hackers or anyone else could misuse this data. Additionally, sensitive data was hardcoded into the app's client site, including Google API keys and links to Google storage buckets, making the app vulnerable to reverse engineering. The app developer failed to shut down public access to the database upon learning of the data leak.

Data has been leaked before

This is not the first time that the data of OyeTalk users has been leaked. The app's database was previously leaked by unknown people. A fingerprint is used to identify Open Firebase in the database. Which indicates lack of proper authentication and authorization for data. This flaw could allow hackers etc. to access sensitive data such as email logins.

Comments

Popular posts from this blog

Five decades after man's arrival, 'moon trip' difficult, 60 out of 146 missions fail

If you are interested in astronomy due to solar eclipse, let us know about an app to install in your phone.

The transmission power of Corona virus sticking to the surface decreases after 5 days - research

Meta Accounts Center: Have you checked it out?

For the first time, NASA is sending a drone helicopter to Mars

Solid evidence of flowing water on Mars, the red planet of the Solar System: Images of pebbles and rocks found

How were the Himalayas formed? One minute breathtaking video, find out how long it took…

Did dinosaurs that could fly in the sky live on earth?

Govt orders social media platforms to remove ads on all fraud loan apps and betting apps within a week

IIT researchers develop real-time underwater marine robot, eases deep-sea surveillance