A competitive tea application for men leaks the personal data of its users and driver licenses

Teooonher, an application designed for men to share images and information about women who are supposed to be historians, have revealed the personal information of users, including government identity and personal photos, can confirm Techcrunch.

The application, which was launched on the Apple App Store earlier this week, is a response to another viral application tea that allows women to spread men who suffer from their history. Tea is announced as an application for women’s safety with more than 6 million resemblanceders.Do we return to the same man?“Facebook networks. However, the application is controversial, because many allegations that women cannot be verified yet.

The reversal reaction surrounding the tea escalated last week, after it informed 404 media outlets from 4chand users Discover an open database for the public Belonging to the application, which open More than 72,000 photos, including thousands of personal photos and images of the image to check the account. A Later penetration More than a million private messages were revealed through the application, which prompted the application to revocation Correspondence feature.

TEONHER, which is now ranked second among iOS lifestyles, seems to be a direct refute of the tea application, even copying the language from describing the Tea App Store in its own list.

But like the application that sought to simulate this, Teoonher has its own security defects.

Techcrunch has found at least one safety defect that allows anyone to access data that belongs to Teooonher users, including user names and associated email addresses, as well as driver licenses and personal photos that users have uploaded to Teoonher. These driver’s licenses are accessible to the public, allowing anyone with links to access them using their web browser.

In one case, Techcrunch watched a list of joint publications on Teooonher attached to the email entitled to each user, the name and self -reported site.

Techcrunch blocks some details of errors so that harmful actors do not help to reach anyone’s data. The application maker did not respond to the Techcrunch emails asking who we can report defects. As such, Techcrunch publishes this report with limited details about the problem, given the current application of the application and the risks facing the use of the application.

Teooonher has been downloaded on the iOS app by a developer called Newville Media Corporation. According to LinkedIn, the founder and CEO of this company is Xavier Lampkin.

Select the techcrunch record teooonher, at least one associated with special lambkin data.

The security decrease may affect any user who has registered or shared identity documents with the application. The error also displays the number of users owned by the Teoonher application, which is about 53,000 users at the time of publication.

TECHRUNCH also identified a possible second safety problem, where an email address and the normal text password that belongs to the creator of the application, Lampkin, exposed to the server. Accreditation data seems to grant access to the “responsible” plate of the application. Techcrunch did not use accreditation data, because doing so will be illegal, but it highlights the risk of leaving the supervisor’s accreditation data unintentionally exposed to the web.

Along with its security disadvantages, the content that was filmed inside Teoonher worries itself. While the application requires personal knowledge and photos from its users to check their identities – a non -automatic process – users can access the “guest” offer for the application without logging in.

Immediately after opening “Guest”, Techcrunch seen several pictures of the naked woman themselves, published under different names in the form of random mail. It is not clear whether this woman has agreed to share this image. Other posts share the pictures and names of women, as well as the comments they call “easy”, or accuse them of spreading sexually transmitted infections.

In all free applications, Teooonher ranks 17th, higher than Instagram, Netflix, Uber and Spotify. Tea is currently ranked second.