Archive — US — techcrunch
Security flaws in Freedom Chat app exposed users’ phone numbers and PINs
Freedom Chat app fixed security flaws that exposed users’ phone numbers and PINs, discovered by researcher Eric Daigle. These issues allowed phone numbers to be guessed and PINs leaked in public channels. After notifying the app’s founder, the app reset all user PINs and implemented additional security measures. Previous app Converso was also delisted due to security issues.
Key points
- Security researcher Eric Daigle discovered two severe vulnerabilities in Freedom Chat.
- Flaws allowed guessing of users' phone numbers and leaking of user PINs used for app security.
- Daigle reported flaws to TechCrunch, which informed Freedom Chat founder Tanner Haas.
- Freedom Chat reset user PINs and improved server security to prevent mass guessing.
- The vulnerabilities allowed for the potential exposure of up to 2,000 users' data.
- Problems stemmed from the app's server allowing enumeration and leaking PINs in public channels.
Why it matters
- The issue highlights the ongoing challenges in app security, particularly in messaging platforms.
- Similar vulnerabilities were recently discussed in research involving data scraping of millions of accounts.
- By 2025, data privacy and security will be paramount concerns as apps continue to proliferate globally.
The exposure of user data in Freedom Chat underscores the critical need for robust security measures in messaging apps, reflecting broader trends in digital privacy as users demand safer communication platforms.