Look,Desperate Housewives XXX Porn Parody we get it. Cybersecurity is hard. But maybe, just maybe, a conference dedicated to computer security and encryption should know better than to leave attendee information exposed via its conference mobile app.
And yet.
SEE ALSO: Tech conferences like RSA still have a diversity problemAs the RSA Conference winds down today in San Francisco organizers have been forced to acknowledge that all has not been right with their own house. Specifically, a security engineer looking into the RSA Conference Mobile App discovered that at least some user information was exposed to anyone who knew where to look.
This Tweet is currently unavailable. It might be loading or has been removed.
"[It] was the API from http://eventbase.com that was used by the RSA conference app," the researcher, who goes by svbl, explained over Twitter direct message. "[The] vulnerability was on eventbase' side."
Svbl tweeted out the steps he took to access the information and alerted organizers to what might generously be called an oversight.
This Tweet is currently unavailable. It might be loading or has been removed.
The RSA Conference responded and quickly resolved the vulnerability, but, shall we say, the response didn't really cop to the fact that organizers baked a vulnerability into their app.
"Our initial investigation shows that 114 first and last names of RSA Conference Mobile App users were improperly accessed," read a statement. "No other personal information was accessed, and we have every indication that the incident has been contained."
This Tweet is currently unavailable. It might be loading or has been removed.
That only 114 first and last names were accessed isn't because of some magic cybersecurity protections. Rather, it's because svbl limited his probing to just a peek — merely to confirm the vulnerability — before reporting it.
This Tweet is currently unavailable. It might be loading or has been removed.
Notably, this isn't the first time the RSA Conference has blundered with its conference app.
"This isn’t surprising," tweeted the engineer and hacker Ming Chow. "Let me remind you of the RSA Conference 2014 app that downloaded all attendees’ names into SQLite DB."
This Tweet is currently unavailable. It might be loading or has been removed.
And, to make matters worse, this wasn't the only problem members of the cybersecurity community had with the conference app. Specifically, the permissions the app required raised a lot of eyebrows.
This Tweet is currently unavailable. It might be loading or has been removed.
Thankfully for attendees, svbl appears to have had no ill intentions.
"[I] only pulled a sample of data (~100 records) before i reported it to RSA directly and as you saw they fixed it very quick (which is awesome)," the researcher wrote to us.
And while a fast response is great, still, come on. Security professionals like those at the RSA Conference shouldn't count on the goodwill of third-party researchers to keep attendee data secure. But somehow, though, that's exactly where we are.
Topics Cybersecurity
'The Last of Us' Season 2, episode 1: Why 'Curtis and Viper' is importantBest Echo deal: Save $25 on Amazon Echo Show 5'The Last of Us' Season 2, episode 1: Ellie's bedroom is filled with Easter eggsGet the Samsung Galaxy S25 Ultra for $400 of at AmazonToday's Hurdle hints and answers for April 15, 2025NYT Connections Sports Edition hints and answers for April 13: Tips to solve Connections #202NYT Strands hints, answers for April 15NYT mini crossword answers for April 15, 2025NYT Strands hints, answers for April 11MotoGP 2025 livestream: Watch Qatar Grand Prix for freeNYT Strands hints, answers for April 11OpenAI is retiring GPTNYT mini crossword answers for April 12, 2025OpenAI is retiring GPTNYT Strands hints, answers for April 15NYT Connections Sports Edition hints and answers for April 12: Tips to solve Connections #201With iPadOS 19, Apple might once again try to make the iPad more like a MacNYT mini crossword answers for April 15, 2025Trump admin already walks back smartphone, laptop tariff exemptionNYT Strands hints, answers for April 13 Hundreds of marines accused of sharing nude photos in secret Facebook group Chance the Rapper is donating millions to Chicago public schools—and is asking for your help, too The tool that forces you to take a quiz before commenting is now available to everyone Nintendo to Switch owners: Avoid aquariums if you're having Joy Huge 'Logan' opening might not beat 'X The office furniture of the future actually looks pretty good India hoists its tallest flag at the border but some are highly unimpressed Mike Pence wants an apology after the AP publishes second lady's email address Inventor of lithium Pizza dipped in milk is the most disrespectful pizza crime yet Chrissy Teigen gives more unwavering honesty in an essay on postpartum depression This airline just flew around the world with an all Two of the NBA's shortest players face off in best jump ball ever Police find an antique Yeah, Twitter's watching you even when you're not tweeting Looks like Hillary Clinton and the internet are on the same page about this Mike Pence email thing Kate McKinnon's Kellyanne Conway will sit and text just about anywhere on 'SNL' Cricketer imitating his opponent's face is definitely a novel strategy 'Counter Sorry Arian Foster, but you probably couldn't take down a wolf (we checked)
2.3074s , 8225.96875 kb
Copyright © 2025 Powered by 【Desperate Housewives XXX Porn Parody】,Wisdom Convergence Information Network