Facebook's Leaky Data Bucket: App Stored User Data Online

guest · Feb 18, 2019

Facebook's Leaky Data Bucket: App Stored User Data Online
Android App Left User Data Open Without Authentication or TLS/SSL
February 18, 2019
https://www.inforisktoday.com/facebooks-leaky-data-bucket-app-stored-user-data-online-a-12026

For years, Facebook allowed app developers liberal access to user data. It served as powerful bait to draw developers to Facebook's platform, which in turn helped the social network develop one of the internet's largest user bases.

One of those bug reports has been revealed. On Thursday, the cybersecurity consultancy Nightwatch Security wrote that it discovered an Android app that had been storing Facebook user data in two unsecured places, a Firebase database and an API server.
Neither location required authentication or was protected by TLS/SSL. The Firebase database has been configured in a test mode, which allowed anyone to visit it by entering its URL, Nightwatch writes.

The name of the app, which first appeared in Google's Play Store in early 2017, hasn't been made public.
Nightwatch writes that it notified Facebook in September 2018, but the two locations where the data was stored weren't secured until November 2018.
Click to expand...

Log in or Sign up

Facebook's Leaky Data Bucket: App Stored User Data Online

guest Guest

Log in or Sign up

Facebook's Leaky Data Bucket: App Stored User Data Online

guest Guest

Useful Searches