It's a bad day for would-be tech watchdogs and Kairaku Jigoku no Toriko (2019)gossips.
The tech industry whistleblower and survey site Blind temporarily exposed user data when it left a server functioning without password protection. That's according to TechCrunch, whose new report not only uncovered the server lapse, but also called into question Blind's claims of privacy and complete user anonymity.
SEE ALSO: Blind: The hot app where all the best Silicon Valley gossip is read right nowA South Korean company, Blind is a site that allows tech industry employees to anonymously discuss their companies with colleagues. It also regularly produces surveys about sensitive topics like workplace harassment and diversity that it then distributes to the press. Blind gained prominence when discussions on the platform exposed sexual harassment at Uber. According to TechCrunch, it just secured $10 million in a new round of funding.
Central to Blind's functioning are its claims of privacy and user anonymity. Without this assurance, employees would likely feel uncomfortable discussing their employers.
The unprotected server reportedly showed logins, messages, and interactions,"allowing anyone to read private comments and posts."
Blind responded to the report saying that the unprotected server was an isolated incident that affected users who logged in between Nov. 1 and Dec. 19. Blind said it sent a push notification to affected users within the app.
“While developing an internal tool to improve our service for our users, we became aware of an error that exposed user data,” Blind reportedly wrote.
In addition to account activity, Blind protects its users by disassociating work email addresses from accounts. Blind says that it does not store email addresses, and only creates unique tokens from emails once you sign up.
"Email verification is safe, as our patented infrastructure is set up so that all user account and activity information is completely disconnected from the email verification process," a Blind FAQ reads. "It is impossible to match your user activity to any profile or email information provided upon sign up."
Despite these claims, TechCrunch was able to view emails of Blind users who had not yet posted. The server also contained pairings of these accounts with their unique member IDs, which could reportedly allow for identification if they did post in the future. The report also showed potentially shoddy encryption work for passwords and user tokens.
The server lapse is a potentially huge breach of trust for Blind users. Blind has the potential to be an important whistle-blowing tool for an industry that certainly needs oversight. But without confidence in its security, its users, and its power, could vanish.
CORRECTION: Dec. 21, 2018, 5:16 p.m. PST
A previous version of this article stated that Blind emailed users about the breach. Blind did not email users. It sent a push notification to affected users within the Blind app.
Topics Cybersecurity
Woman paints dress with every comment made about her appearance10 'sexy' Halloween costumes that offend the animal kingdomRussia Today claims UK bank accounts have been 'frozen'Why it's completely legal to trade votes across state linesChrissy Teigen has a budget friendly birthday gift idea: NudesVisa issues resolved for 12 teams in the ESL 'CS:GO' Pro League playoffsPeople believe Pamela Anderson poisoned Julian Assange with vegan foodReality TV show accused of 'casual racism' after face paint sceneBob Dylan doesn't give a damn about your Nobel PrizeOmran has not died in Aleppo strikes, but many other Syrian children have'Stranger Things' actor answers questions about his character's sexualityAccording to Little Mix's new track, Zayn isn't as good at sex as he thinks he isMoto Z, the modular smartphone, goes on sale in India tonightTwitter now has an emoji for India's 'Bigg Boss' TV showTigers get summer ready with a new pool and conservation facilitiesAuntie Kylie lets North West try on her lip kitsFilm director perfectly sums up the feelings of all the 'Downton Abbey' hatersIf you refrigerate your tomatoes, you're doing it wrongChrissy Teigen has a budget friendly birthday gift idea: NudesPeople are freaking out over these 'sexist' T Win Tickets to BAM’s Artist Talk! by Sadie Stein The Desert’s Daughters by Jenna Wortham Kate Beaton on ‘Hark! A Vagrant’ by Nicole Rudick On the Shelf by Sadie Stein Locker Room Freud; Travel Writing by Lorin Stein and Sadie Stein L.A. Advice: Writers Dating, Fear of the Blank Page by Sadie Stein Unread Books; Changing Character Names by Lorin Stein The Sporting Life by Louisa Thomas Life Outside of Academia; Ghost Stories by Lorin Stein and Sadie Stein Help Us Support St. Mark’s! by Natalie Jacoby Cycling; Second Staff Picks: Food Rules, the American Dream by The Paris Review Charles Hardin Holly; Clovis, New Mexico; May 27, 1957 by John Jeremiah Sullivan The Disaster Year by C.I. Shelton Staff Picks: Barbie's Dream House, All the Single Ladies by The Paris Review A Week in Culture: Sadie Stein, Editor by Sadie Stein On ‘Holiday’ by Josh Lieberman Staff Picks: ‘Proud Beggars,’ A Brilliant Invalid by The Paris Review The Smartest Gifts of the Season by The Paris Review Pulling Teeth; Cold Calling by Chris Flynn
2.1308s , 10129.9453125 kb
Copyright © 2025 Powered by 【Kairaku Jigoku no Toriko (2019)】,Information Information Network