时间:2025-04-04 04:59:00 来源:网络整理编辑:熱點
It's a bad day for would-be tech watchdogs and gossips.The tech industry whistleblower and survey si
It's a bad day for would-be tech watchdogs and gossips.
The tech industry whistleblower and survey site Blind temporarily exposed user data when it left a server functioning without password protection. That's according to TechCrunch, whose new report not only uncovered the server lapse, but also called into question Blind's claims of privacy and complete user anonymity.
SEE ALSO:Blind: The hot app where all the best Silicon Valley gossip is read right nowA South Korean company, Blind is a site that allows tech industry employees to anonymously discuss their companies with colleagues. It also regularly produces surveys about sensitive topics like workplace harassment and diversity that it then distributes to the press. Blind gained prominence when discussions on the platform exposed sexual harassment at Uber. According to TechCrunch, it just secured $10 million in a new round of funding.
Central to Blind's functioning are its claims of privacy and user anonymity. Without this assurance, employees would likely feel uncomfortable discussing their employers.
The unprotected server reportedly showed logins, messages, and interactions,"allowing anyone to read private comments and posts."
Blind responded to the report saying that the unprotected server was an isolated incident that affected users who logged in between Nov. 1 and Dec. 19. Blind said it sent a push notification to affected users within the app.
“While developing an internal tool to improve our service for our users, we became aware of an error that exposed user data,” Blind reportedly wrote.
In addition to account activity, Blind protects its users by disassociating work email addresses from accounts. Blind says that it does not store email addresses, and only creates unique tokens from emails once you sign up.
"Email verification is safe, as our patented infrastructure is set up so that all user account and activity information is completely disconnected from the email verification process," a Blind FAQ reads. "It is impossible to match your user activity to any profile or email information provided upon sign up."
Despite these claims, TechCrunch was able to view emails of Blind users who had not yet posted. The server also contained pairings of these accounts with their unique member IDs, which could reportedly allow for identification if they did post in the future. The report also showed potentially shoddy encryption work for passwords and user tokens.
The server lapse is a potentially huge breach of trust for Blind users. Blind has the potential to be an important whistle-blowing tool for an industry that certainly needs oversight. But without confidence in its security, its users, and its power, could vanish.
CORRECTION: Dec. 21, 2018, 5:16 p.m. PST
A previous version of this article stated that Blind emailed users about the breach. Blind did not email users. It sent a push notification to affected users within the Blind app.
TopicsCybersecurity
Dog elected for third term as mayor of Minnesota town2025-04-04 04:51
再演文藝片 電影《兔子暴力》大潘潘斌龍殺青2025-04-04 04:49
《伏妖天師》今日登陸騰訊視頻 打造亦真亦幻夢境世界2025-04-04 04:41
文化傳承出新篇 少林係列網絡電影重磅發布2025-04-04 04:29
J.K. Rowling makes 'Harry Potter' joke about Olympics event2025-04-04 04:20
《葉問之九龍城寨》定檔10.24 唐文龍版一代宗師引期待2025-04-04 03:37
《鼠膽英雄》曝光喜劇特輯 佟麗婭烤羊肉串狂飆方言2025-04-04 03:03
劉如軒《李白之天火燎原》熱播 少年李白驚豔出場2025-04-04 02:58
Darth Vader is back. Why do we still care?2025-04-04 02:51
《愛寵大機密2》高能冒險奇趣無窮 寵物大集結可戰可萌點燃暑期2025-04-04 02:49
5 people Tim Cook calls for advice on running the biggest company in the world2025-04-04 04:53
全宇宙最能折騰的鳥要來了 《憤怒的小鳥2》確定引進中國2025-04-04 04:47
潘劭珺《忘川茶舍之獸神詛咒》熱播 動心演繹“衛辭”唯美虐戀2025-04-04 04:07
《黑衣人 :全球追緝》即將上映,應用寶上線“黑衣密令”2025-04-04 04:01
Sound the alarms: Simone Biles finally met Zac Efron2025-04-04 03:56
電影《葉問之少年激鬥》開機 苦學詠春成就一代宗師2025-04-04 03:55
《封神三部曲》首次媒體探班 獲讚中國電影工業化新標杆2025-04-04 03:42
中國版《速度與激情》首發概念海報 致敬機車英雄2025-04-04 03:39
Despite IOC ban, Rio crowds get their political messages across2025-04-04 03:37
《我的青春都是你》今日上映 宋威龍帶你解讀青春與陪伴2025-04-04 03:12