Indecent disclosure: Gay dating app left “private” images, data exposed to web

From Ars Technica

The Jack'd dating app allowed men to upload "private" photos--but stored them open to public viewing, the same as the rest.
Enlarge / The Jack’d dating app allowed men to upload “private” photos–but stored them open to public viewing, the same as the rest.

Amazon Web Services’ Simple Storage Service powers countless numbers of web and mobile applications. Unfortunately, many of the developers who build those applications do not adequately secure their S3 data stores, leaving user data exposed—sometimes directly to web browsers.  And while that may not be a privacy concern for some sorts of applications, it’s potentially dangerous when the data in question is “private” photos shared via a dating application.

Jack’d, a “gay dating and chat” application with over 1 million downloads from the Google Play store, has been leaving images posted by users and marked as “private” in chat sessions open to browsing on the Internet, potentially exposing the privacy of thousands of users. Photos were uploaded to an AWS S3 bucket accessible over an unsecured web…

Read More – Indecent disclosure: Gay dating app left “private” images, data exposed to web

Recommended For You

About the Author: TechNews