Comment on Women Dating Safety App 'Tea' Breached, Users' IDs Posted to 4chan

<- View Parent
JackbyDev@programming.dev ⁨5⁩ ⁨days⁩ ago

One of the definitions of hacking is illegally gaining access to a computer system. It doesn’t need to involve any sort of exploit. Stealing from an unlocked home is still stealing. Gaining access to a system by phishing is still hacking. Leaking data that is technically publicly accessible that isn’t meant to be publicly accessible is still hacking.

Not that I suspect anything good from 4chan but the proper thing to do would be to disclose to Tea that their data is public and allow them to fix the problem. The ethics of vulnerability disclosure still apply when the vulnerability is “hey you literally didn’t secure this at all.”

source
Sort:hotnewtop