Snapchat Has A Huge Security Hole That Allows Hackers To Identify Exactly Who You Are

Snapchat Has A Huge Security Hole That Allows Hackers To Identify Exactly Who You Are
Technology

A group of young Australian hackers called Gibson Security posted information on Christmas Eve exploiting loopholes in Snapchat‘s security that “allows mass matching of phone numbers with names and mass creation of bogus accounts,” reports ZDNet.

According to ZDNet, Gibson published the codes because they had warned Snapchat of the vulnerability last August, but were ignored by the $2 billion company.

The loopholes are accessed by reverse-engineering Snapchat’s API, or re-writing a script of code.

But the security glitches are just the start of Gibson’s Snapchat revelations.

First off, Gibson claims Snapchat could have closed the loopholes by writing just 10 more lines of code. They also said that Snapchat, along with its investors, lied to the press not too long ago when they said that 70% of its users are female because there is no way such statistics could be obtained.

Gibson’s security exploits state that a 1:1 link can be established between a person’s phone number and Snapchat account.

The hackers told ZDNet that the first loophole, called the “find friends exploit,” generates phone numbers and then obtains the Snapchat usernames of any phone number that matches the record of a Snapchat user.

From ZDNet:

“People could operate a service similar to ssndob.cc, where you could pay a few dollars and obtain the phone number and social media profiles of a person, just by their username.

“[Snapchat could have fixed this] by adding rate limiting; Snapchat can limit the speed someone can do this, but until they rewrite the feature, they’re vulnerable. They’ve had four months, if they can’t rewrite ten lines of code in that time they should fire their development team. This exploit wouldn’t have appeared if they followed best practices and focused on security (which they should be, considering the use cases of the app).”

The most significant finding here seems to be that it is incredibly easy to register a false Snapchat account and access the phone numbers of virtually any user, even if the account is private.

It is therefore impossible to determine what percentage of Snapchat accounts are actually valid.

Via: Valley Wag, Top Photo Courtesy: Gaterr

Share Tweet
React
Like Us On Facebook
Like Us On Facebook

Sean Levinson

Sean Levinson loves writing almost as much as he loves ranting about politics. Elite Daily lets him do both, and he couldn't be happier now that he's finally putting his years at SUNY New Paltz to good use. When he's not writing, Sean enjoys nature excursions, playing the guitar and the Ultimate Fighting Championship. Look for him on "Real Time with Bill Maher," where he regularly appears in his most precious fantasies.

Original Video

Everything You Need To Know About Marijuana

Jesus has risen, but how high did he get? While Easter and 4/20 falling on the same day is most definitely a weird coincidence, it will also highlight a pretty important public opinion on what’s more important: weed or candy eggs? Sto...

More In Technology

Technology Sean Levinson

This New App Promises To Be The Answer To Getting Rid Of Jet Lag

Mathematicians from the University of Michigan have developed an app that can cure jet lag by calculating how to most efficiently adjust your biological clock to a new time zone. According to Mashable, exposing your body to light at different times of day is the most effective way to minimize jet lag. Entrain determines how […]

Technology Sean Levinson

Google Unveils Smart Contact Lens With Built-In Camera

For any who feels that recent developments in wearable technology is borderline invasive, this one will take the cake. Google has invented a “smart contact lens” that literally brings technology in direct contact with your corneas. If Old Gregg had anything to add here, he’d call this “as close as you can get to the […]

Technology lexichronic

You Can Now Grow Your Own Weed Anywhere In The World With The GrowLab Tent

Cultivating marijuana has long been an ambition of anyone who understands its potential. College kids, scientists, even non-smokers recognize the economic opportunities of legally growing and selling weed. The GrowLab Horticultural Grow Room is the a perfect starter kit for a first timer, or a much-needed upgrade for a veteran. One of the biggest holdbacks to starting […]

Also On Elite

Motivation

5 Books To Put Wanderers On The Track To Finding Themselves

J.R. R. Tolkien famously wrote that, “Not all who wander are lost.” But it seems that sometimes, we wander for so long contemplating what to do with ourselves that we forget who we were when we started. Or, alternately, we are pushed and prodded along for 20-some years and by the time we graduate from college, […]

Life

Which Type Of Narcissist Are You? What Your Favorite Social Media Site Says About You

I’m about to blow up every Coachella-Instagramming-Vine-star-in-the-making’s spot: On some level, we’re all a bunch of narcs. And true-to-form, we want everyone to know it. Behind every post is a hint of self-promotion. Don’t lie to yourself. Why else would you Snapchat that picture of yourself sitting bored at work? It’s clearly not because you’re […]

Sports

Teen Gets Barred From Track Meet For Sporting Pink Mohawk For Mom With Cancer

To honor his mother, Wendy Pawlicki, who is currently battling breast cancer, 17-year-old Mike Barker showed up to his school’s track meet this week sporting a pink mohawk. But according to Fox News, the junior from West Iron County High School in Iron River, Michigan, was told by his head coach that he wasn’t allowed to […]

Sports

The NBA’s 10 Best Crossovers Of The Year Will Have Your Ankles Hurting (Video)

Ah, it’s that time of year again; the couple of days between the end of the NBA’s regular season and the start of the playoffs. This is a time that always calls for season reviews, post-season predictions and lots of “best of” compilations. Yesterday, a fan favorite was posted on the league’s official YouTube account: the […]