It's a bad day for would-be tech watchdogs and be eroticism kutekussaa ... ♪ dangerous temptation of the madamgossips.
The tech industry whistleblower and survey site Blind temporarily exposed user data when it left a server functioning without password protection. That's according to TechCrunch, whose new report not only uncovered the server lapse, but also called into question Blind's claims of privacy and complete user anonymity.
SEE ALSO: Blind: The hot app where all the best Silicon Valley gossip is read right nowA South Korean company, Blind is a site that allows tech industry employees to anonymously discuss their companies with colleagues. It also regularly produces surveys about sensitive topics like workplace harassment and diversity that it then distributes to the press. Blind gained prominence when discussions on the platform exposed sexual harassment at Uber. According to TechCrunch, it just secured $10 million in a new round of funding.
Central to Blind's functioning are its claims of privacy and user anonymity. Without this assurance, employees would likely feel uncomfortable discussing their employers.
The unprotected server reportedly showed logins, messages, and interactions,"allowing anyone to read private comments and posts."
Blind responded to the report saying that the unprotected server was an isolated incident that affected users who logged in between Nov. 1 and Dec. 19. Blind said it sent a push notification to affected users within the app.
“While developing an internal tool to improve our service for our users, we became aware of an error that exposed user data,” Blind reportedly wrote.
In addition to account activity, Blind protects its users by disassociating work email addresses from accounts. Blind says that it does not store email addresses, and only creates unique tokens from emails once you sign up.
"Email verification is safe, as our patented infrastructure is set up so that all user account and activity information is completely disconnected from the email verification process," a Blind FAQ reads. "It is impossible to match your user activity to any profile or email information provided upon sign up."
Despite these claims, TechCrunch was able to view emails of Blind users who had not yet posted. The server also contained pairings of these accounts with their unique member IDs, which could reportedly allow for identification if they did post in the future. The report also showed potentially shoddy encryption work for passwords and user tokens.
The server lapse is a potentially huge breach of trust for Blind users. Blind has the potential to be an important whistle-blowing tool for an industry that certainly needs oversight. But without confidence in its security, its users, and its power, could vanish.
CORRECTION: Dec. 21, 2018, 5:16 p.m. PST
A previous version of this article stated that Blind emailed users about the breach. Blind did not email users. It sent a push notification to affected users within the Blind app.
Topics Cybersecurity
There's still no good dating app for nonMWC 2020 might be in trouble as another company bails due to coronavirus outbreakSamsung Galaxy S20 leaks again, this time on Samsung's own websiteSamsung Galaxy Z Flip isn't even out yet and there's already a golden, JokerAustralian firefighters get their own Funko Pop to help animals impacted by the bushfiresThe easiest ways to watch the Super Bowl without cableMartin Luther King Jr.'s daughter takes down Pepsi in one heartbreaking tweetColdplay's Chris Martin visits sick fan hours before concertSamsung Galaxy Z Flip isn't even out yet and there's already a golden, JokerRacist posters targeting Chinese students stir controversy at the University of Texas at AustinHow to welcome refugees wherever you areMartin Luther King Jr.'s daughter takes down Pepsi in one heartbreaking tweetUber gets California permit to restart selfTwitter reveals its employees have equitable pay on #EqualPayDayKid slips the most adorable note into her dad's suitcase before a tripAustralian firefighters get their own Funko Pop to help animals impacted by the bushfiresApple News' 2020 election hub shows promise despite a few misstepsKid slips the most adorable note into her dad's suitcase before a tripDo you use dating apps at your desk? You're not alone.4chan trolls reportedly behind part of the Iowa caucus chaos “Own It!”: The Most Grating Phrase of the Moment “Be Bold with Bananas” and Other Awful Library Books Two Poems by Nathaniel Mackey Coins, Pincushions, Stagecoaches—They’ve All Starred in Novels The Political Novel: An Interview with Édouard Louis Fabric of Our Lives Staff Picks: Castellanos Moya, John Koethe, Esopus Don't Use “I Feel Like,” and Other News Now Online: Our Interviews with Gordon Lish and Jane & Michael Stern The Secret’s Out: We’re BORING AS FUCK Remember When NYC Had Natural Springs? Me Either… Try First Thyself: In Praise of the Campus Dining Hall Time Diptychs and Mirrored Rooms: Art by Eric Green The Joys of the Flea Market Branded Man: The Long Tradition of Outlaw Poets Kill Thurber, a Comic by Matthew Thurber Waterworks: The Original Robots Poem: “April to May,” by Joyce E. Peseroff Timbuktu’s Massive Book Heist I Feel Sorry for People Who Don’t Suffer Fools
3.5141s , 8288.3046875 kb
Copyright © 2025 Powered by 【be eroticism kutekussaa ... ♪ dangerous temptation of the madam】,Charm Information Network