Anonymous social app Yik Tak left users' precise locations exposed

J. Fingas@jonfingasMay 13th, 2022In this posting: privateness, doxxing, Internet, information, gear, chat, stalking, Social Media, messaging, Security, Social network, Yik YakDGLimages through Getty Visuals

Yik Yak’s revived messaging application was supposed to carry back again the times of actually anonymous neighborhood chat, but it may possibly have inadvertently built life a lot easier for creeps. Computer science student David Teather educated Motherboard that Yik Yak experienced a flaw that allow attackers acquire each the exact site for posts (in just 10 to 15 ft) and users’ one of a kind IDs. Mix the two parts of data and it is feasible to keep track of a user’s movement designs.

Teather employed a proxy tool to determine that YikYak despatched each the exact GPS situation and user ID with each and every information, even if customers would typically only see vague distances and metropolis identifiers. An independent researcher verified the conclusions for Motherboard, whilst it’s not obvious if everyone has exploited the flaw so considerably.

Yik Yak hasn’t responded to requests for remark so far. The developer launched 3 updates in between April 28th and Might 10th, but it’s not yet certain if they wholly tackle exposed locations. Nonetheless, it is really safe to say that the issue still left buyers at risk, especially if they shared any delicate details with neighborhood chatters.

All products encouraged by Engadget are selected by our editorial team, unbiased of our mother or father enterprise. Some of our tales include things like affiliate back links. If you acquire one thing as a result of a single of these back links, we might receive an affiliate fee.


Some parts of this article are sourced from:
engadget.com