It ’s the worst fear of narcissists around the globe : Those confessions , those individual thing , those secret you ’ve been sharing on the popular app Secret are n’t actually secret . Well , narcissist of the globe , your worst awe has come true . Secretisn’t really underground .
A duo of security researchers — Benjamin Caudill and Bryan Seely — latterly describe a hack that allow them to identify the substance abuser behind supposedly anonymous message on Secret . Like good bloodless hat hackers do , they say Secret about the exposure , and Secret say they ’ve now deposit the problem . But the round-eyed fact that it was possible — and frankly , pretty sluttish — to dox secret spillers is reasonableness enough to be nervous about the app ’s security on the whole . This alsoisn’t the first timeSecret ’s bear from security trouble .
The hack was relatively simple . occult only shows you a stream of your friends and friend of admirer if more than eight of your friends use the app . However , the caller failed to report for bots , which Caudill and Seely well created using a simple script . Once they had burden of imitation accounts , they would connect with one admirer and then just learn the flow . The bot did not post , so anything that hit the feed had to occur from that one friend . Anonymous no more ! The duo successfully describe several people and their secret , including those of Secret founder David Byttow .
It almost seems silly that such an easy trick worked . And even though the hack does n’t permit you identify the drug user behind any given secret , it does show how allegedly anonymous services fail to bide secure in the face of a couple of cagey hackers . So even though this hole ’s been patch up , who knows how many more hollow have n’t been fall upon yet ? [ Forbes ]
AnonymityCyber SecurityHackersSecretSecurity
Daily Newsletter
Get the best tech , science , and culture word in your inbox daily .
tidings from the future tense , delivered to your present .
You May Also Like
