Take the pledge to vote

For a better tommorow#AajSawaroApnaKal
  • I agree to receive emails from News18

  • I promise to vote in this year's elections no matter what the odds are.
  • Please check above checkbox.

    SUBMIT

Thank you for
taking the pledge

Vote responsibly as each vote counts
and makes a diffrence

Disclaimer:

Issued in public interest by HDFC Life. HDFC Life Insurance Company Limited (Formerly HDFC Standard Life Insurance Company Limited) (“HDFC Life”). CIN: L65110MH2000PLC128245, IRDAI Reg. No. 101 . The name/letters "HDFC" in the name/logo of the company belongs to Housing Development Finance Corporation Limited ("HDFC Limited") and is used by HDFC Life under an agreement entered into with HDFC Limited. ARN EU/04/19/13618
»
1-min read

Be careful: Sarahah is Covertly Uploading Your Contacts

A senior security analyst Zachary Julian who works for IT security consulting firm Bishop Fox was the first to discover Sarahah uploading private information, using a monitoring software BURP Suite.

IANS

Updated:August 28, 2017, 1:38 PM IST
facebookTwitterskypewhatsapp
Be careful: Sarahah is Covertly Uploading Your Contacts
Be careful: Sarahah is Covertly Uploading Your Contacts
Loading...

The viral 'honesty app' Sarahah, where you can send or receive anonymous messages, is not as anonymous as it appears as the app has been found uploading the user's phone contacts on to the company's servers. A senior security analyst Zachary Julian who works for IT security consulting firm Bishop Fox was the first to discover Sarahah uploading private information, using a monitoring software BURP Suite.

"As soon as you log into the application, it transmits all of your email and phone contacts stored on the Android operating system," a report in The Intercept on Sunday quoted Julian as saying. Though the app asks for user's permission to access contacts, there is no such feature in the app where these contacts would be required or even a search feature where users can look up for a friend using a contact number.

However, Sarahah's founder Zain al-Abidin Tawfiq said contact lists were being uploaded "for a planned 'find your friends' feature" that was not yet released. In a tweet, Tawfiq wrote that the data request will be removed on next update. It often seems suspicious if users do not get anything out of granting access to apps to their contact lists.

For example, earlier in 2017, the newsletter unsubscription service Unroll.I drew a lot of criticism following allegations that it sold user data to cab-hailing service Uber.

Watch video: Tech And Auto Show | EP10 | BlackBerry KEYone, Honda Africa Twin & More

| Edited by: ---
Read full article
Loading...
Next Story
Next Story

Also Watch

facebookTwitterskypewhatsapp

Live TV

Loading...
Countdown To Elections Results
To Assembly Elections 2018 Results