• 2 Posts
  • 42 Comments
Joined 4 months ago
cake
Cake day: January 24th, 2025

help-circle















  • MissGutsy@lemmy.blahaj.zonetoTechnology@lemmy.world*Permanently Deleted*
    link
    fedilink
    English
    arrow-up
    171
    arrow-down
    1
    ·
    edit-2
    2 months ago

    Cybernews researchers have found that BDSM People, CHICA, TRANSLOVE, PINK, and BRISH apps had publicly accessible secrets published together with the apps’ code.

    All of the affected apps are developed by M.A.D Mobile Apps Developers Limited. Their identical architecture explains why the same type of sensitive data was exposed.

    What secrets were leaked?

    • API Key
    • Client ID
    • Google App ID
    • Project ID
    • Reversed Client ID
    • Storage Bucket
    • GAD Application Identifier
    • Database URL

    […] threat actors can easily abuse them to gain access to systems. In this case, the most dangerous of leaked secrets granted access to user photos located in Google Cloud Storage buckets, which had no passwords set up.

    In total, nearly 1.5 million user-uploaded images, including profile photos, public posts, profile verification images, photos removed for rule violations, and private photos sent through direct messages, were left publicly accessible to anyone.

    So the devs were inexperienced in secure architectures and put a bunch of stuff on the client which should probably have been on the server side. This leaves anyone open to just use their API to access every picture they have on their servers. They then made multiple dating apps with this faulty infrastructure by copy-pasting it everywhere.

    I hope they are registered in a country with strong data privacy laws, so they have to feel the consequences of their mismanagement






  • Honest question: why can’t both communities just exist separately? Isn’t this the magic of the Fediverse?

    Your biggest point is that the communities are identical in content and I disagree. Just looking at the top posts of the week, the feddit.uk version has a bunch of memes, while feddid.org seems more news focused. The Fediverse allows us to moderate these communities differently and to have different styles of communities, perfectly shown with this example. They are not identical.

    We shouldn’t build up just one community all the time. That just runs into the same problem why people disliked reddit: centralized moderation. It’s not a problem now, but if it ever will be, why can’t there be alternatives. Let’s not try to become the next reddit, but become something better.

    Also some people left reddit because it all became to big, they want small groups that actually feel like a community. If people prefer a smaller lemmy community, let them have it. They voted against merging, so let them have it. !buyeuropean@feddit.uk is already linked in their sidebar. Everybody that wants to can switch the community or subscribe to both (which is a possibility!!).

    I think you’re in the wrong here, at least on trying to grow the uk community over the org one.