It's a bad day for would-be tech watchdogs and costume eroticegossips.
The tech industry whistleblower and survey site Blind temporarily exposed user data when it left a server functioning without password protection. That's according to TechCrunch, whose new report not only uncovered the server lapse, but also called into question Blind's claims of privacy and complete user anonymity.
SEE ALSO: Blind: The hot app where all the best Silicon Valley gossip is read right nowA South Korean company, Blind is a site that allows tech industry employees to anonymously discuss their companies with colleagues. It also regularly produces surveys about sensitive topics like workplace harassment and diversity that it then distributes to the press. Blind gained prominence when discussions on the platform exposed sexual harassment at Uber. According to TechCrunch, it just secured $10 million in a new round of funding.
Central to Blind's functioning are its claims of privacy and user anonymity. Without this assurance, employees would likely feel uncomfortable discussing their employers.
The unprotected server reportedly showed logins, messages, and interactions,"allowing anyone to read private comments and posts."
Blind responded to the report saying that the unprotected server was an isolated incident that affected users who logged in between Nov. 1 and Dec. 19. Blind said it sent a push notification to affected users within the app.
“While developing an internal tool to improve our service for our users, we became aware of an error that exposed user data,” Blind reportedly wrote.
In addition to account activity, Blind protects its users by disassociating work email addresses from accounts. Blind says that it does not store email addresses, and only creates unique tokens from emails once you sign up.
"Email verification is safe, as our patented infrastructure is set up so that all user account and activity information is completely disconnected from the email verification process," a Blind FAQ reads. "It is impossible to match your user activity to any profile or email information provided upon sign up."
Despite these claims, TechCrunch was able to view emails of Blind users who had not yet posted. The server also contained pairings of these accounts with their unique member IDs, which could reportedly allow for identification if they did post in the future. The report also showed potentially shoddy encryption work for passwords and user tokens.
The server lapse is a potentially huge breach of trust for Blind users. Blind has the potential to be an important whistle-blowing tool for an industry that certainly needs oversight. But without confidence in its security, its users, and its power, could vanish.
CORRECTION: Dec. 21, 2018, 5:16 p.m. PST
A previous version of this article stated that Blind emailed users about the breach. Blind did not email users. It sent a push notification to affected users within the Blind app.
Topics Cybersecurity
Chinese company offers lifetime's supply of liquor for just $1,673The UK again says Uber drivers should get minimum wage, time off—next stop is the Supreme CourtFacebook asks for nude photos. Days later clarifies what it will doFacebook now lets you export posts directly to Google Docs and WordPressCarrie Underwood and Brad Paisley brilliantly trolled Donald Trump at the CMAs'The Falcon and the Winter Soldier' introduced another new villainThese organizers just won big in Virginia. They're coming for your state next.Snap is selling its unsold Spectacles in LondonCadillac's first electric SUV will arrive early for just under $60,0007 entry level vibrators if you are new to the sex toy gamePuppy thieves return dog to little girl, after seemingly feeling bad about the whole thingApparently Drake is just as obsessed with 'Harry Potter' as you areSony is giving away 'Horizon Zero Dawn' for free on PS4 and PS5Politician who made fun of Women's March loses mightily to womanApple rebooted the iMac line with a splash of color and its M1 chipNASA plans rescheduled Mars Ingenuity helicopter flight for April 19Rebel Wilson says she was sexually harassed by a Hollywood coApple TV no longer comes with the worst remote of all timeCarrie Underwood and Brad Paisley brilliantly trolled Donald Trump at the CMAsObama is at jury duty and jury duty doesn't seem so bad anymore The Lean, Mean, Star To Serve and Protect India's moon lander makes history as first to reach coveted south pole How to watch 2023 U.S. Open Tennis Championships online The TikTok controversy over collecting human bones, explained The Morning News Roundup for August 6, 2014 Hollywood sign erected in Wrexham and locals think Ryan Reynolds is responsible Incident / Resurrection FDA begs people to stop taking animal drug ivermectin to treat COVID Still Slacking After All These Years How to Win Friends and Influence People Whither the Breadfruit? What is digital domestic abuse? The Misery of Seasonal Allergies in Literature Xbox Series X console wraps: Preorder info, price, release dates Threads is now available on desktop for some users The Morning News Roundup for July 30, 2014 Best TV and gaming deal: Sony 4K Ultra HD TV and PS5 bundles on sale for up to 27% off How Does Weird Al Write His Songs? Read Everywhere with The Paris Review and LRB
2.0379s , 8286.0625 kb
Copyright © 2025 Powered by 【costume erotice】,Wisdom Convergence Information Network