Hackers Pair SnapChat Numbers with Users on Mass Scale

snoopy · Dec 29, 2013

After claiming the makers of SnapChat repeatedly ignored their disclosures over a period of four months, Gibson Security recently published the full details of a pair of bugs in the photo and video sharing application. One could give an attacker the ability to connect phone numbers with usernames on a massive scale, while another could enable the creation fake accounts.

The researchers claim their exploits impact the latest version of SnapChat on the iOS and Android operating systems. The so-called “find_friends” exploit essentially gives any logged in user the ability to enter a random (or not so random) U.S. phone number and figure out if there is a SnapChat account associated with that number.

This is the bug that Gibson Security claims to have disclosed to SnapChat back in August. The researchers claim that SnapChat has done nothing to fix the issue in the meantime.

With a little quick math, the researchers claim they could burn through 292 million standard, U.S.-style phone numbers in a month with their specially made python script and a virtual server. Whichever of these hundreds of millions of numbers are associated with a SnapChat accounts would be known to the attacker running the script.
Click to expand...

REad more here: http://threatpost.com/hackers-pair-snapchat-numbers-with-users-on-mass-scale/103322

Log in or Sign up

Hackers Pair SnapChat Numbers with Users on Mass Scale

snoopy Registered Members

Share This Page

Log in or Sign up

Hackers Pair SnapChat Numbers with Users on Mass Scale

snoopy Registered Members

Share This Page

Useful Searches