Get the latest tech news

Male-Oriented App 'TeaOnHer' Also Had Security Flaws That Could Leak Men's Driver's License Photos


The women-only dating-advice app Tea "has been hit with 10 potential class action lawsuits in federal and state court," NBC News reported last week, "after a data breach led to the leak of thousands of selfies, ID photos and private conversations online." The suits could result in Tea having to p...

The women-only dating-advice app Tea "has been hit with 10 potential class action lawsuits in federal and state court," NBC News reported last week, "after a data breach led to the leak of thousands of selfies, ID photos and private conversations online." The records returned from TeaOnHer's server contained users' unique identifiers within the app (essentially a string of random letters and numbers), their public profile screen name, and self-reported age and location, along with their private email address. Worse, these photos of driver's licenses, government-issued IDs, and selfies were stored in an Amazon-hosted S3 cloud server set as publicly accessible to anyone with their web addresses.

Get the Android app

Or read this on Slashdot

Read more on:

Photo of driver

driver

Photo of Men

Men

Photo of Security flaws

Security flaws

Related news:

News photo

Security Flaws In Carmaker's Web Portal Let a Hacker Remotely Unlock Cars

News photo

How we found TeaOnHer spilling users’ driver’s licenses in less than 10 minutes

News photo

Security flaws in a carmaker’s web portal let one hacker remotely unlock cars from anywhere