时间:2025-04-03 10:55:56 来源:网络整理编辑:娛樂
It's a bad day for would-be tech watchdogs and gossips.The tech industry whistleblower and survey si
It's a bad day for would-be tech watchdogs and gossips.
The tech industry whistleblower and survey site Blind temporarily exposed user data when it left a server functioning without password protection. That's according to TechCrunch, whose new report not only uncovered the server lapse, but also called into question Blind's claims of privacy and complete user anonymity.
SEE ALSO:Blind: The hot app where all the best Silicon Valley gossip is read right nowA South Korean company, Blind is a site that allows tech industry employees to anonymously discuss their companies with colleagues. It also regularly produces surveys about sensitive topics like workplace harassment and diversity that it then distributes to the press. Blind gained prominence when discussions on the platform exposed sexual harassment at Uber. According to TechCrunch, it just secured $10 million in a new round of funding.
Central to Blind's functioning are its claims of privacy and user anonymity. Without this assurance, employees would likely feel uncomfortable discussing their employers.
The unprotected server reportedly showed logins, messages, and interactions,"allowing anyone to read private comments and posts."
Blind responded to the report saying that the unprotected server was an isolated incident that affected users who logged in between Nov. 1 and Dec. 19. Blind said it sent a push notification to affected users within the app.
“While developing an internal tool to improve our service for our users, we became aware of an error that exposed user data,” Blind reportedly wrote.
In addition to account activity, Blind protects its users by disassociating work email addresses from accounts. Blind says that it does not store email addresses, and only creates unique tokens from emails once you sign up.
"Email verification is safe, as our patented infrastructure is set up so that all user account and activity information is completely disconnected from the email verification process," a Blind FAQ reads. "It is impossible to match your user activity to any profile or email information provided upon sign up."
Despite these claims, TechCrunch was able to view emails of Blind users who had not yet posted. The server also contained pairings of these accounts with their unique member IDs, which could reportedly allow for identification if they did post in the future. The report also showed potentially shoddy encryption work for passwords and user tokens.
The server lapse is a potentially huge breach of trust for Blind users. Blind has the potential to be an important whistle-blowing tool for an industry that certainly needs oversight. But without confidence in its security, its users, and its power, could vanish.
CORRECTION: Dec. 21, 2018, 5:16 p.m. PST
A previous version of this article stated that Blind emailed users about the breach. Blind did not email users. It sent a push notification to affected users within the Blind app.
TopicsCybersecurity
Nate Parker is finally thinking about the woman who accused him of rape2025-04-03 10:50
海港官方 :外援保利尼奧右手舟骨骨折 已返回上海治療2025-04-03 10:49
西媒:皇馬免簽姆巴佩誌在必得 歐冠戰巴黎是關鍵2025-04-03 10:46
35勝!112球!瓜式曼城閃耀英超史冊 進球榜霸前四2025-04-03 10:03
Here's what 'Game of Thrones' actors get up to between takes2025-04-03 09:47
利好!利物浦與埃及隊談妥 薩拉赫戰切爾西後報到2025-04-03 09:03
深度解析魯能奪冠 :花小錢辦大事 十一載不忘初心後橙色終閃耀2025-04-03 09:00
中超前瞻:泰山輕鬆迎戰國安 海港欲雙殺廣州城2025-04-03 08:40
Chinese gymnastics team horrifies crowd with human jump rope2025-04-03 08:26
何塞 :隻要贏重慶就能完成保級任務 我對此很有信心2025-04-03 08:14
Pole vaulter claims his penis is not to blame2025-04-03 10:40
國安迎29歲生日 周金輝:雖然麵臨困難 仍會堅定不移承擔2025-04-03 10:32
周海濱 :11年 ,從球員到教練,再次見證球隊的榮耀2025-04-03 10:11
深度解析魯能奪冠 :花小錢辦大事 十一載不忘初心後橙色終閃耀2025-04-03 10:04
Satisfy your Olympics withdrawals with Nike's latest app2025-04-03 09:55
張外龍:通過5場比賽不是隻拿了2分 而是拿到了2分2025-04-03 09:53
太摳了 !曝拜仁高層將接受調查 涉嫌違反最低工資法2025-04-03 08:48
揭秘申花00後新星成長幕後:用場下加練 場上狂奔贏得認可2025-04-03 08:47
Give your kitchen sponge a rest on this adorable bed2025-04-03 08:35
中超最佳陣容 :鄭智趙明劍兩棲 泰山封王四大功臣2025-04-03 08:18