Chinese facial recognition company left database of people's locations exposed

guest · Feb 13, 2019

Chinese facial recognition company left database of people's locations exposed
February 13, 2019
https://www.cnet.com/news/chinese-f...ny-left-database-of-peoples-location-exposed/

A Chinese facial recognition company left its database exposed online, revealing information about millions of people, a security researcher discovered.
SenseNets, a company based in Shenzhen, China, offers facial recognition technology and crowd analysis, which the company boasted in a promotional video could track people across cities and pick them out in large groups.

But the company failed to protect that database with a password, Victor Gevers, a Dutch security researcher with the GDI Foundation, discovered Wednesday. The database contained more than 2.5 million records on people, including their ID card number, their address, birthday, and locations where SenseNets' facial recognition has spotted them.

"Knowing when someone is not in the office or at home can be useful for simple burglar crimes, but also social engineering attacks to get into buildings," Gevers said in a message.
Click to expand...

The database was available online for anyone to find, and it allowed for full access -- meaning a malicious actor could add or delete records from the database, Gevers said.
Click to expand...

Log in or Sign up

Chinese facial recognition company left database of people's locations exposed

guest Guest

Log in or Sign up

Chinese facial recognition company left database of people's locations exposed

guest Guest

Useful Searches