Wednesday, 12 December, 2018

Timehop admits attacker stole 21 million users' data

A massive data breach on Timehop app has exposed the private details of more than 21 million people according to a new report. The service links to users social media accounts and claims to be'reinventing reminiscing by resurfacing old phot Timehop admits attacker stole 21 million users' data
Jean Garcia | 09 July, 2018, 20:40

However, although the hackers stole the "access tokens" provided to Timehop by its social media partners, it claimed these were quickly deauthorized and that there's no evidence of unauthorized access of user data through these tokens. Timehop engineers began to block the attack and lock down the compromised environment less than two hours after the attack began, the company says.

Most of the affected users had their social media names (not full legal ones) and email addresses compromised, but phone numbers were only stolen if you logged into the Timehop app using your phone number.

The breach also led to a loss of access tokens that the service uses to access users' posts on other social networks.

About 4.7 million of those accounts had a phone number attached to them.

In terms of how its network was accessed, it appears that the attacker was able to compromise Timehop's cloud computing environment by targeting an account that had not been protected by multifactor authentication. However, Timehop claims that the tokens were deauthorized and made invalid within a "short time window" and can not be used to gain access to users' social media profiles.

Some data was breached. This affects some 21 million of our users. Another thing the hackers got were the "keys" that allow the app to show you posts from the sources you've chosen. Timehop has "deactivated these keys so they can no longer be used by anyone - so you'll have to re-authenticate to our App". "We have now taken steps that include multifactor authentication to secure our authorization and access controls on all accounts".

Delhi gangrape case: SC to deliver verdict on convicts pleas tomorrow
The verdict has been recieved unanimously with approval by the general public who feel Nirbhaya has recieved justice atlast. The sixth, a minor, was sent to a correction home and has been released after serving his probation period.

We have been working with security experts and incident response professionals, local and federal law enforcement officials, and our social media providers to assure that the impact on our users is minimized. It doesn't store data like credit card information, location data or users' IP addresses either. Doing so may end up leading to a bunch of content being inaccessible for a while whilst a new set of keys establishes itself.

"The damage was limited because of our long-standing commitment to only use the data we absolutely need to provide our service", the company wrote in part.

In fact, the Timehop breach happened before the Gentoo one.

According to its preliminary investigation of the incident, the attacker first accessed Timehop's cloud environment in December - using compromised admin credentials, and apparently conducting reconnaissance for a few days that month, and again for another day in March and one in June, before going on to launch the attack on July 4, during a United States holiday. Following the attack, a number of new security measures have been introduced, including system-wide multi-factor authentication (many people will be concerned that this was not already in place).

There is no such thing as ideal when it comes to cyber security but we are committed to protecting user data.

Recommended

  • EPA Head Scott Pruitt Resigns

    EPA Head Scott Pruitt Resigns

    According to The Washington Post , Pruitt pushed to find his wife a well-paying job with a politically connected group. In fact, he was the subject of multiple congressional and oversight inquiries; he denied wrongdoing in all cases.
    Things to look out for at the royal christening

    Things to look out for at the royal christening

    Prince William and Kate Middleton have opted for friends, rather than immediate family members, as is custom for royal children. The Lily Font is a silver baptismal font which was made in 1840 and has been a fixture at royal christenings since then.
    Person Killed When Helicopter Crashes Into Virginia Home: State Police

    Person Killed When Helicopter Crashes Into Virginia Home: State Police

    The crash happened near the College of William and Mary Dillard Complex, prompting an alert from the university. Neighbors told local news outlets they saw a small, rickety helicopter crash and heard or felt the impact.
  • Eden Hazard lavishes praise on Kylian Mbappe

    Eden Hazard lavishes praise on Kylian Mbappe

    The diminutive winger is among the most-fouled players in the Premier League and the same has been true at the World Cup as well. Romelu Lukaku has been directly involved in 20 goals in his last 13 games for Belgium in all competitions (17 goals, 3 assists).
    Mosquito surveillance in Monona County

    Mosquito surveillance in Monona County

    Residents should also make sure that their window and door screens are in good fix to prevent mosquitoes from getting inside. Empty buckets, flower pots, old tires from holding water. "That includes any place where there is standing water".
    Hartley to miss British GP qualifying after FP3 crash

    Hartley to miss British GP qualifying after FP3 crash

    Hartley was able to walk away from the incident, but the severe damage to his Toro Rosso means he might miss qualifying. The Toro Rosso driver crashed heavily at Brooklands after front left suspension failure pitched him into a spin.
  • Justin Bieber & Hailey Baldwin engaged

    Or maybe Selena really is over her on-again, off-again, on-again, off-again, on-again, off-again flame... Selena and Bieber first got back together following her split from The Weeknd last fall.
    Why Wimbledon white not quite right for Federer

    Why Wimbledon white not quite right for Federer

    Mannarino fought back as he pushed Federer to 4-4, despite being unable to make any dents on his opponent's accurate serving. Djokovic, seeded 12th following time off with injury, will play Karen Khachanov last on the 11,000-seat No.1 Court.
    Watch Travis Pastrana Make History With Evel Knievel Tribute

    Watch Travis Pastrana Make History With Evel Knievel Tribute

    Pastrana ended the event by jumping into the fountain as hundreds of fans on the streets of Las Vegas cheered him on. After finishing with a few burnouts, Pastrana celebrated his triplicating feat by diving into the fountain.
  • Top UK diplomat Boris Johnson quits as Brexit tensions jolt government

    Top UK diplomat Boris Johnson quits as Brexit tensions jolt government

    For a long time it had been clear Boris Johnson was not happy with the prime minister's Brexit strategy. "I'm seeking Brexit. If Theresa May wants to break her manifesto pledges that is up to her [but] these things have consequences.
    UK's Brexit Secretary David Davis has resigned

    UK's Brexit Secretary David Davis has resigned

    Other Brexit-supporting Conservative MPs have criticized the Chequers deal, saying May's plans offered Brexit in name only . Davis' resignation was followed by that of Exiting the EU Minister Steve Baker.
    Starbucks to ditch plastic straws globally by 2020 to help environment

    Starbucks to ditch plastic straws globally by 2020 to help environment

    Frappuccino drinks will still be served with dome lids, but with straws made from paper or compostable plastic. Plastic straws never completely decompose and can be harmful, even fatal, to animals that ingest them.

Amazon Offers Free Echo Dot Ahead Of Prime Day Amazon Offers Free Echo Dot Ahead Of Prime Day In the years since, Prime Day has grown into a shopping extravaganza in its own right, with deep discounts on all kinds of items. Amazon is offering Prime subscriptions in the Netherlands for €3.99 for the first month rising to €5.99 in September.

Dick Cheney Signs Waterboarding Kit For Sacha Baron Cohen's New Show Dick Cheney Signs Waterboarding Kit For Sacha Baron Cohen's New Show Joaquin Phoenix tried to do something similar all the way back in 2010 with I'm Still Here and got called on it in record time. Now, the first teaser for his new series for United States network Showtime has dropped, and it looks very promising, indeed.

Leaders of bitter foes Ethiopia, Eritrea meet for historic peace talks Leaders of bitter foes Ethiopia, Eritrea meet for historic peace talks The two embraced again at the state dinner, hosted by Isaias and broadcast on both countries' state television. Full-blown fighting ended in 2000, but their troops have faced off across their disputed border ever since.

Trump administration takes another swipe at 'ObamaCare' Still, insurers are grappling with changes that the Trump administration and Congress have made to Obamacare for 2019. The move is expected to add to premium increases next year.

Starbucks is eliminating plastic straws from all stores Starbucks is eliminating plastic straws from all stores A plastic-straw ban in Seattle , Starbucks' hometown, took effect on July 1 , making it the first major city to take action. A number of local governments have recently passed legislation restricting the use and distribution of plastic straws.

South Africa releases Zuma's son on bail after corruption charges South Africa releases Zuma's son on bail after corruption charges The young Zuma was nabbed by officials and questioned upon his arrival at OR Tambo International Airport from Dubai on Thursday. Zuma agreed to hand in his passport and will make arrangements with the investigating officer if he wants to travel overseas .

Disgraced Harvey Weinstein still wants to make movies, lawyer says Disgraced Harvey Weinstein still wants to make movies, lawyer says Vance Jr. said the 66-year-old Weinstein is charged with "some of the most serious sexual offenses" that exist under state law. Courthouse guards told people arriving for jury duty to wait or use a different entrance as Weinstein arrived on Monday.

China’s Xiaomi makes underwhelming public debut in Hong Kong IPO China’s Xiaomi makes underwhelming public debut in Hong Kong IPO Xiaomi's IPO began on Monday in Hong Kong to a fairly slow start, with trade slipping more than 2%, sometimes dropping by 5.88%. Despite Xiaomi's challenging debut, Reuters notes that Hang Seng - the Hong Kong stock market index - was 1.7 percent higher.

Three Lions Is Officially Number 1 In The UK Fans had descended at Clapham Junction and were clapping and cheering when the man chose to climb on top of the bus. Police have now confirmed that a woman suspected of having taken part in the vandalism has now been identified.

Conte returns for Chelsea preseason training as club continues to chase Sarri Conte returns for Chelsea preseason training as club continues to chase Sarri Chelsea are reportedly seeking to lure midfielder Jorginho from Napoli during their ongoing negotiations for manager Maurizio Sarri.

Michael Appleton on success of England's Harry Maguire Michael Appleton on success of England's Harry Maguire The Leicester centre-half has impressed in Russian Federation this summer, helping England reach the World Cup quarter-finals. England's quarter-final triumph over Sweden will have at least doubled Harry Maguire's value.

Federer, Serena aim to advance on Wimbledons Manic Monday Federer, Serena aim to advance on Wimbledons Manic Monday Below is a breakdown of each draw and a look at the four players with the best chances to advance to the men's and women's finals. Thirteen Wimbledon championships between them and 49 grand slam titles overall, it was quite the historic training run.

Jack Wilshere completes free transfer to West Ham on three-year deal Jack Wilshere completes free transfer to West Ham on three-year deal However, the club suits him down to the ground and he should settle in quickly, assuming he avoids injury. West Ham have been very active in the summer transfer window and have already made a number of signings.

Roger Federer suggests Wimbledon organisers reconsider all-white playing gear rule Her exit means eight of the top 10 seeded women have gone out before the end of Week 1. That leaves Serena as the only remaining woman to have won the tournament.

North Korea may have offered its clearest view yet of denuclearization North Korea may have offered its clearest view yet of denuclearization US Secretary of State Mike Pompeo yesterday brushed aside North Korea's accusation of "gangster-like" denuclearization demands.