Caution! This app is leaking your private conversations, delete it immediately

Image: Facebook

Ahmedabad, 22 February 2023, Wednesday

If you also use voice chat apps, you should be careful. Recently an app leaked the private calls of all its users. This is an Android app called OyeTalk. The app left its database open for public access. OyeTalk has been downloaded by over 5 million people so far and the app has over 21000 reviews and a 4.1 out of 5 star rating on the Google Play Store.

This is how the data leak happened

According to information, OyeTalk's user data and conversations were leaked through unprotected access to Google Firebase. The leaked data included users' chat, username and IMEI number of the phone. Hackers or anyone else could misuse this data. Additionally, sensitive data was hardcoded into the app's client site, including Google API keys and links to Google storage buckets, making the app vulnerable to reverse engineering. The app developer failed to shut down public access to the database upon learning of the data leak.

Data has been leaked before

This is not the first time that the data of OyeTalk users has been leaked. The app's database was previously leaked by unknown people. A fingerprint is used to identify Open Firebase in the database. Which indicates lack of proper authentication and authorization for data. This flaw could allow hackers etc. to access sensitive data such as email logins.

Comments

Popular posts from this blog

In a first in history, NASA lost contact with the ISS in a power outage, leaving scientists confused.

The watch was worn by David Scott during the Apollo 12 mission in 191

Habits to cultivate in work-from-home ...

Global warming: 28 trillion tons of ice melted on Earth in last 26 years

5G will be launched in the country from Gandhinagar: PM Modi will inaugurate

Does moisture in the air prevent the spread of corona virus?

Internet's own energy consumption

Microsoft copied Facebook

Peek into the world of naturally pink lakes around the world

An app with a similar feature can be compared in Playstore