Sweet Chat: Chinese 'Tinder' with 10M users, exposes chats and private photos

guest · Aug 13, 2019

Sweet Chat: Chinese 'Tinder' with 10M users, exposes chats and private photos
August 12, 2019
https://blog.burke-consulting.net/sweet-chat/

Sweet Chat, an Android based chatting and photo sharing application with over 10 million users, has been exposing its users chat content, and photos on an unsecured server. By using common MQTT related tools anyone can view real-time, the chats and private photos of all online Sweet Chat users.
Fake "Phantom" chat messages can be created between any users
Due to the nature of Sweet Chat's use of unsecure MQTT as a communications mechanism, chat messages can be forged and published to any user on the system. This creates a message which only exists within MQTT and not the main Sweet Chat server.
Private Image Exposure
One of the most troubling aspects of the Sweet Chat exposure, is the ability for 3rd parties to be able to download the private image files of other users on Sweet Chat.
Click to expand...

Log in or Sign up

Sweet Chat: Chinese 'Tinder' with 10M users, exposes chats and private photos

guest Guest

Log in or Sign up

Sweet Chat: Chinese 'Tinder' with 10M users, exposes chats and private photos

guest Guest

Useful Searches