The viral 'honesty app' Sarahah where you can send or receive anonymous messages is
not as anonymous as it appears as the app has been found uploading the user's phone
contacts on to the company's servers.
not as anonymous as it appears as the app has been found uploading the user's phone
contacts on to the company's servers.
A senior security analyst Zachary Julian who works for IT security consulting firm Bishop
Fox was the first to discover Sarahah uploading private information, using a monitoring
software BURP Suite.
Fox was the first to discover Sarahah uploading private information, using a monitoring
software BURP Suite.
"As soon as you log into the application, it transmits all of your email and phone contacts
stored on the Android operating system," a report in The Intercept on Sunday quoted
Julian as saying.
stored on the Android operating system," a report in The Intercept on Sunday quoted
Julian as saying.
Though the app asks for user's permission to access contacts, there is no such feature in
the app where these contacts would be required or even a search feature where users can
look up for a friend using a contact number.
the app where these contacts would be required or even a search feature where users can
look up for a friend using a contact number.
However, Sarahah's founder Zain al Abidin Tawfiq said contact lists were being uploaded
"for a planned 'find your friends' feature" that was not yet released.
"for a planned 'find your friends' feature" that was not yet released.
In a tweet, Tawfiq wrote that the data request will be removed on next update.
It often seems suspicious if users do not get anything out of granting access to apps to their contact lists.
FUN TIMES
The recently popular Sarahah app is said to be uploading the contacts in your phone
Reviewed by Fun Times
on
August 28, 2017
Rating:
No comments: