Users from 4chan claim to have discovered an exposed database hosted on Google’s mobile app development platform, Firebase, belonging to the newly popular women’s dating safety app Tea. Users say they are rifling through peoples’ personal data and selfies uploaded to the app, and then posting that data online, according to screenshots, 4chan posts, and code reviewed by 404 Media.

  • prof@infosec.pub
    link
    fedilink
    English
    arrow-up
    18
    arrow-down
    1
    ·
    1 day ago

    This situation would have been easily preventable with basic understanding of what they’re doing is what OP is saying. This leak is not something highly complex, it is painfully stupid on the side of the developers.

    There’s a difference between a hack, where data is exposed, compared to data exposure due to negligence or ignorance on the development side.

    • Eheran@lemmy.world
      link
      fedilink
      English
      arrow-up
      4
      ·
      20 hours ago

      Again, how should the end use know anything about what is going on at their end? How does anyone “vett” that? It is a nonsense “argument” to put blame on the users.

      • prof@infosec.pub
        link
        fedilink
        English
        arrow-up
        2
        ·
        edit-2
        14 hours ago

        Where I’m from there’s certificates a company can get, that confirm a certain level of process and IT security. Also a company existing for at least 5-10 years without incidents is a “vetted” company in my books. At least anything that managed to produce a working IT system before 2021 when AI came around.

        I also believe there’s a bit of bad wording going on with the original comment. Take it up with that guy, lol.