Your secret posts may not be as secret as you think. A new report from Wired reveals a new attack on the service, allowing researchers to reveal all the posts written by a given author. The attack is simple: researchers at Rhino Security created a network of dummy accounts and left the target's email as the only real name in their contact list. From afar, it looked like they had a big group of friends, so Secret let them use the app normally, but really it was one real person surrounded by dummies. Since there was only one real account, they could conclude that any posts that showed up were written by the target. The result is a full list of your favorite friend's Secret posts, all indelibly tied to his or her name.
via The Verge - All Posts http://ift.tt/1q1FXPi
No comments:
Post a Comment