Gibson Security, published details of the app's private API, exposing how the exploit could be accomplished. Using this method, Gibson Security says that a hacker could check 10,000 phone numbers in just seven minutes.
Users of the Snapchat app in North America may have been put at risk as a massive database containing the phone numbers, usernames and locations of 4.6 million users has been posted online.
The huge security issue for Snapchat occurred after the profile data of millions of users was uploaded and started to appear on a website called SnapchatDB.info.
The site that is hosting the information is claiming that the information was shared to raise awareness on the issue of widespread Snapchat security vulnerabilities. Information such as the username, phone numbers and locations of many users have been leaked online, however the last two digits of each phone number has been concealed.
“This information was acquired through the recently patched Snapchat exploit and is being shared with the public to raise awareness on the issue,” says the owner of SnapchatDB. “The company was too reluctant at patching the exploit until they knew it was too late and companies that we trust with our information should be more careful when dealing with it.”
Snapchat recently made some statements regarding concerns over user data and security, so this breach will not bode well for the $3.5 billion-valued company.
This giant leak comes just days after Gibson Security’s latest interview in which the company warns of
Snapchat’s vulnerabilities. According to Gibson Security, the Snapchat team had taken far too long to address some very serious issues with the coding of the software, and had left the application wide open to exploits that could compromise user information. It has been less than a week since that interview and now an entire database of phone numbers and usernames is just a click away for everyone to find online.
So if you are a Snapchat user be wary of the details you enter when using the app.
source:gadgethelpline
