News for hackers. Stuff that matters.

A comment on Good Heavens 10M Impacted in Pray.com Data Exposure. Parent comment

Re:Good Heavens 10M Impacted in Pray.com Data Exposure by Zenst on Monday November 23, 2020 @08:35AM (#25186579)
It would seem that `mysterious ways` was never the best security approach.

Still to impact 10M users given "It has been downloaded by more than 1 million people on Google Play, and ranks as the #24 lifestyle app in the Apple App store" does seem interesting and would love a breakdown upon that as not sure that 9M Apple app users of this. So, probably some deeper breachers of GDPR and the like going on here.

[ Parent | on HN ]
Re:Good Heavens 10M Impacted in Pray.com Data Exposure by plorg on Monday November 23, 2020 @09:27AM (#25187034)
From the article:

"Most damningly, the cloud database included whole phone books from users. Whenever a person joins the Communities social network, the app asks if it can invite friends to join. If a user says yes, the app uploads the user’s entire ‘phonebook’ from their device, containing all contacts and associated information."

[ Parent | on HN ]
Re:Good Heavens 10M Impacted in Pray.com Data Exposure by alisonkisk on Monday November 23, 2020 @10:41AM (#25187885)
"more than 1million" just means "1-10million" or whatever the bucket boundary is in the Play UI. Don't try to read too much specifics into these broad estimates.
[ Parent | on HN ]
Re:Good Heavens 10M Impacted in Pray.com Data Exposure by netsharc on Monday November 23, 2020 @08:45AM (#25186670)
Hah, do they have an "Add a contact to pray for" feature? A Zuckerbergian personal information hoarder/reseller would salivate at the thought of having such info.
[ Parent | on HN ]
Re:Good Heavens 10M Impacted in Pray.com Data Exposure by mfer on Monday November 23, 2020 @08:50AM (#25186711)
"Zuckerbergian personal information hoarder/reseller"

I'm going to have to remember that one. Ha.

[ Parent | on HN ]