Get the latest tech news
Fertility tracker Glow fixes bug that exposed users’ personal data
The fertility tracking app fixed a leaky API, which a researcher said exposed users’ first and last names, age group, and self-described location.
“I basically had my Android device hooked up with [network analysis tool] Burp and poked around on the forum and saw that API call returning the user data. That’s where I found the IDOR,” Liber said, referring to a type of vulnerability where a server lacks the proper checks to ensure access is only granted to authorized users or developers. “I think that is a pretty big deal,” Eva Galperin, the cybersecurity director at the digital rights non-profit Electronic Frontier Foundation, told TechCrunch, referring to Liber’s research.
Or read this on TechCrunch
