A popular ‘boomoji’ app exposed millions of users’ contact lists and location data

guest · Dec 13, 2018

A popular ‘boomoji’ app exposed millions of users’ contact lists and location data
December 13, 2018
https://techcrunch.com/2018/12/13/popular-boomoji-app-exposed-millions-contact-lists-location-data/

The China-based app developer left the ElasticSearch databases online without passwords — a U.S.-based database for its international customers [...]

The database contained records on all of the company’s iOS and Android users — some 5.3 million users as of this week. Each record contained their username, gender, country, and phone type.
Each record also included a user’s unique Boomoji ID, which was linked to other tables in the database.

Those other tables included if and which school they go to — a feature Boomoji touts as a way for users to get in touch with their fellow students.
Worse, the database contained every phone book entry of every user who had allowed the app access to their contacts.

One table had more than 125 million contacts. [...] Yet, none of the data was encrypted. All of the data was all stored in plaintext.
Click to expand...

Log in or Sign up

A popular ‘boomoji’ app exposed millions of users’ contact lists and location data

guest Guest

Log in or Sign up

A popular ‘boomoji’ app exposed millions of users’ contact lists and location data

guest Guest

Useful Searches