New York’s attorney general has settled a complaint over gay, bisexual, and queer dating app Jack’d, whose parent company left users’ private photos exposed online for at least a year. The company, Online Buddies, will pay $240,000 and implement a “comprehensive security program” to prevent similar incidents in the future.
The Register and Ars Technica first reported on the Jack’d security flaw in February of 2019, noting that security researcher Oliver Hough had informed the company a year earlier to no avail. The popular dating app had uploaded photos to a publicly accessible Amazon Web Services storage bucket, even when users believed the pictures were private. The exposed data included nude photos and pictures that revealed a user’s…
from The Verge – All Posts https://ift.tt/2NA7jkf