Look,define auto eroticism we get it. Cybersecurity is hard. But maybe, just maybe, a conference dedicated to computer security and encryption should know better than to leave attendee information exposed via its conference mobile app.
And yet.
SEE ALSO: Tech conferences like RSA still have a diversity problemAs the RSA Conference winds down today in San Francisco organizers have been forced to acknowledge that all has not been right with their own house. Specifically, a security engineer looking into the RSA Conference Mobile App discovered that at least some user information was exposed to anyone who knew where to look.
This Tweet is currently unavailable. It might be loading or has been removed.
"[It] was the API from http://eventbase.com that was used by the RSA conference app," the researcher, who goes by svbl, explained over Twitter direct message. "[The] vulnerability was on eventbase' side."
Svbl tweeted out the steps he took to access the information and alerted organizers to what might generously be called an oversight.
This Tweet is currently unavailable. It might be loading or has been removed.
The RSA Conference responded and quickly resolved the vulnerability, but, shall we say, the response didn't really cop to the fact that organizers baked a vulnerability into their app.
"Our initial investigation shows that 114 first and last names of RSA Conference Mobile App users were improperly accessed," read a statement. "No other personal information was accessed, and we have every indication that the incident has been contained."
This Tweet is currently unavailable. It might be loading or has been removed.
That only 114 first and last names were accessed isn't because of some magic cybersecurity protections. Rather, it's because svbl limited his probing to just a peek — merely to confirm the vulnerability — before reporting it.
This Tweet is currently unavailable. It might be loading or has been removed.
Notably, this isn't the first time the RSA Conference has blundered with its conference app.
"This isn’t surprising," tweeted the engineer and hacker Ming Chow. "Let me remind you of the RSA Conference 2014 app that downloaded all attendees’ names into SQLite DB."
This Tweet is currently unavailable. It might be loading or has been removed.
And, to make matters worse, this wasn't the only problem members of the cybersecurity community had with the conference app. Specifically, the permissions the app required raised a lot of eyebrows.
This Tweet is currently unavailable. It might be loading or has been removed.
Thankfully for attendees, svbl appears to have had no ill intentions.
"[I] only pulled a sample of data (~100 records) before i reported it to RSA directly and as you saw they fixed it very quick (which is awesome)," the researcher wrote to us.
And while a fast response is great, still, come on. Security professionals like those at the RSA Conference shouldn't count on the goodwill of third-party researchers to keep attendee data secure. But somehow, though, that's exactly where we are.
Topics Cybersecurity
Best free ChatGPT courses
The Whole Fucking Paradigm by Andre Perry
We Lived Here by Jill Talbot
Selected Utopias by Lucas Adams
Brest vs. PSG 2025 livestream: Watch Champions League for free
Thanksgiving with Laura Ingalls Wilder by Valerie Stivers
Staff Picks: Sex, Stand
Redux: Revolve on the Past Year by The Paris Review
Amazon Kindle Paperwhite Kids: $139.99 at Amazon
They Think They Know You, Lionel Messi by Rowan Ricardo Phillips
In Paris Agreement speech, Trump never acknowledged the reality of global warming
Trash Talk: On Translating Garbage by Lina Mounzer
The Exceptional Dovey Johnson Roundtree by Tayari Jones
Loitering Is Delightful by Ross Gay
GPU Pricing Update, Year in Review: Price Trends Charted
Redux: Revolve on the Past Year by The Paris Review
Objects of Despair: Fake Meat by Meghan O’Gieblyn
Redux: Your Name Means Open by The Paris Review
Donald Trump talked about space and Buzz Aldrin's face says it all
Redefining the Black Mountain Poets by Jonathan C. Creasy
The crab emoji, explainedFlooded PenthouseWhat is Shibari or Kinbaku? Everything you need to know about BDSM rope play.Three Fragments from ‘The Selected Prose of Franz Kafka’What is Shibari or Kinbaku? Everything you need to know about BDSM rope play.Juul agrees to pay $439 million for getting teenagers addicted to vapesWhy Diane di Prima Went to San FranciscoWhat is rejection sensitive dysphoria? Everything you need to know about RSD.One Solution for DownBefriending George PlimptonStairs to Nowhere: Thomas Heatherwick’s “Vessel”'Quordle' today: See each 'Quordle' answer and hints for September 12TikTok's air fryer banana bread recipe is super easy and pretty tasty'Quordle' today: See each 'Quordle' answer and hints for September 9'Quordle' today: See each 'Quordle' answer and hints for September 7What Our Contributors Are Reading This FallThree Fragments from ‘The Selected Prose of Franz Kafka’The internet documents a British monarch's death — for the first timeThe internet documents a British monarch's death — for the first timeReading Cy Twombly: Poetry in Paint Mrs. ‘Stoner’ Speaks: An Interview with Nancy Gardner Williams The Poetic Consequences of K Nothing Is Like Anything Else: On Amy Hempel by Alice Blackhurst There’s No Dying in Baseball by Jason Novak T. S. Eliot’s “The Cultivation of Christmas Trees” by Casey N. Cep Athena, Goddess of Copyediting by Mary Norris Redux: Desire Is Curled by The Paris Review Letters From W. S. Merwin by Grace Schulman To Believe or Not to Believe: That Is Not the Question by Peter Bebergal Staff Picks: Spells, Cephalopods, and Smug Salads by The Paris Review In Search of William Gass by Zachary Fine Balzac and the Reassembly of France by Jérôme David ‘The Left Hand of Darkness’ at Fifty Cooking with Colette by Valerie Stivers Nudes by The Paris Review Redux: The Geography of Self and Soul by The Paris Review A Poet’s Complaints Against Fiction by Anthony Madrid Whiting Awards 2019: Terese Marie Mailhot, Nonfiction Whiting Awards 2019: Tyree Daye, Poetry Whiting Awards 2019: Vanessa Angélica Villarreal, Poetry
3.3179s , 10193.2890625 kb
Copyright © 2025 Powered by 【define auto eroticism】,Information Information Network