A top free iOS app uploads address book data in plain text without permission and shares personal contact information with random users

  • Beitrags-Autor:
  • Lesedauer:1 min Lesezeit

However in the case of QuizUp they actually send you other users’ personal information via plain-text(un-hashed); right to your iPhone or iPod touch. This information includes but isn’t limited to: full names, Facebook IDs, email addresses, pictures, genders, birthdays, and even location data for where the user currently is. I have been able to access the personal information of hundreds of people who I have never met, and had no interaction with other than we both used QuizUp. These people likewise had access to my personal information. It is important to keep in mind these were not people who added me as friends inside of the app, these were complete strangers in every sense.

Das Beispiel zeigt mal wieder, dass man nicht blind jede App runterladen soll und überall seine Account-Daten ohne nachzudenken eingibt. Auch bei Top-bewerteten Apps wie diesem QuizUp (besser nicht downloaden) ist man nicht davor gefeilt, mehr preiszugeben als einem lieb ist.