Re:Yo hack
by diwo on Friday June 20, 2014 @04:21PM
(#7922675)
Why are they even storing phone numbers in plain text. According to their Privacy Policy, the numbers are only used for finding friends; i.e. they look up your contacts from their database.
In which case, to do that they do not need the plain phone number, but only a hash derived from it. This is like storing passwords in plain-text.
Re:Yo hack
by gregr401 on Friday June 20, 2014 @03:29PM
(#7922420)
Mostly apps that take advantage of tracking users via UDID / IDFA and not showing ads. At some level, developers still need a UDID for things like APN.
In which case, to do that they do not need the plain phone number, but only a hash derived from it. This is like storing passwords in plain-text.