Keyboard app security gaffe exposes 31mn users' data including passwords, web searches

Keyboard app security gaffe exposes 31mn users' data including passwords, web searches

The personal user data of around 31 million users of the popular virtual keyboard app AI.type has been confirmed to have been compromised and leaked. A big flaw in this kind of database lets anyone access, edit or even delete the data stored on it. Co-founder Eitan Fitusi has since claimed that the server is now secure, but the extent of the damage is not known.

Researchers had attempted to contact the company behind AI.type on multiple occasions but it wasn't until this past weekend that they finally acknowledged it. AI.type says it has now secured the database, and that the leak didn't impact AI.type's nine million iOS users. It was uncovered by Kromtech Security Center researchers.

The database of 577 gigabytes of data collected from users of the keyboard included a huge range of personal information. Dangerously, the records also included a user's precise location, including their city and country.

Other records are significantly more detailed. Data collected from free users includes their phone's unique IMSI and IMEI numbers, SIM cards and mobile networks, and what version of Android the phone has. Accompanying the numbers were the make and model of the device, its screen resolution and the version of Android it was running.

We also found several tables of contact data uploaded from a user's phone. Many records contain specific details of a user's public Google profile, including email addresses, dates of birth, genders, and profile photos.

In total, the database contained more than 10.7 million email addresses and 374.6 million phone numbers, suggesting the app accessed the contacts of its users and uploaded that information to its database.

Were Analysts Bullish Lexington Realty Trust (NYSE:LXP) This Week?
The 14-day RSI is now sitting at 62.73, the 7-day is at 61.92, and the 3-day is spotted at 59.33 for Arbor Realty Trust (ABR). Ten research analysts have rated the stock with a hold rating and seven have given a buy rating to the company's stock.

Numerous kinds of records of the app's users were available on the server.

Several tables contained lists of each app installed on a user's device, such as banking apps and dating apps.

It's not uncommon for keyboard apps to ask for wide-ranging permissions to access data on a user's device-and in many cases, users are willing to grant it because the keyboard is an essential tool. Security researchers have continued to warn that these apps could also steal your passwords despite their is no innocent in this game of data collection.

AI.type says on its website that user's privacy 'is our main concern'. Any text entered on the keyboard "stays encrypted and private", says the company. Some of the records, however, are far more significant and include phone numbers and IP addresses. Said Bob Diachenko of Kromtech Security Center in a blog post. At this point, Kromtech warns that anyone who had ever downloaded and installed ai.type keyboard should consider their data out in the open. "This presents a real danger to cybercriminals who could commit fraud or scams using such detailed information about the user".

"It raises the question once again if it is really worth it for consumers to submit their data in exchange for free or discounted products or services that gain full access to their devices", he added.

Related news:

Hot News

isis-killer-beheading-video-story-top Champions League: Final group round preview
Dec 06, 2017 - 10:28
Group C: Atletico Madrid needs a lot to happen to keep alive its streak of four consecutive appearances in the knockout stage. Liverpool go into their final game one point ahead of second place Sevilla and three points ahead of Spartak Moscow.

isis-killer-beheading-video-story-top Naya Rivera Files for Divorce from Ryan Dorsey for Second Time
Dec 06, 2017 - 10:25
However, they called off their divorce in October. "After much consideration, we have made the decision to end our marriage". Naya , 30, who played a cheerleader in the hit Fox show, is citing "irreconcilable differences" according to TMZ .

isis-killer-beheading-video-story-top Concealed Carry Reciprocity bill heads to House floor as debate continues
Dec 06, 2017 - 10:13
Sell said attorneys general are the top law enforcement officers in their respective states. Gun control advocates are adamantly opposed to the bill.

isis-killer-beheading-video-story-top American Eagle Outfitters (AEO) Declares $0.13 Quarterly Dividend
Dec 06, 2017 - 10:05
Zurcher Kantonalbank Zurich Cantonalbank boosted its position in American Eagle Outfitters by 9.3% during the second quarter. The stock has a market capitalization of $2,870.00, a P/E ratio of 13.62, a PEG ratio of 1.58 and a beta of 1.19.

isis-killer-beheading-video-story-top Slow up on punishing bus company for offensive ad
Dec 06, 2017 - 09:47
In a follow-up email, the company doubled down on their complaint that the Unviersity of IL admits too many students from China. U of I is a state school that is funded by taxpayers and is built on land granted by the people of the State of IL .

isis-killer-beheading-video-story-top Dave & Buster's Entertainment, Inc. (PLAY) Soars on Earnings Beat
Dec 06, 2017 - 09:26
This repurchase authorization permits the restaurant operator to purchase up to 4.7% of its shares through open market purchases. Aperio Group LLC acquired a new stake in shares of Dave & Buster's Entertainment in the 2nd quarter valued at about $202,000.

isis-killer-beheading-video-story-top Beyoncé Presents Colin Kaepernick With SI Muhammad Ali Legacy Award
Dec 06, 2017 - 09:25
The award is given to athletes who use their platform to change the world, and Kaepernick has undoubtedly filled the requirements. Music icon Beyonce introduced the 30-year-old, who last played during Week 17 of the 2016 National Football League season.

isis-killer-beheading-video-story-top Mike Minor, Rangers Agree To Contract
Dec 06, 2017 - 09:14
He was briefly a free agent after not being offered a major league contract before Friday's non-tender deadline. He underwent shoulder surgery in May 2015 and did not pitch in the big leagues that year or in 2016.

isis-killer-beheading-video-story-top Director Bryan Singer Fired From Freddie Mercury Movie
Dec 06, 2017 - 08:51
The studio is said to be looking for a replacement director on the film to finish the final two weeks of shooting. Unfortunately, the studio was unwilling to accommodate me and terminated my services.

Price Target Analysis of Dynegy Inc. (NYSE:DYN)
Dec 06, 2017 - 08:48
Lasry Marc sold 2.45M shares as the company's stock rose 0.88% with the market. (NYSE: DYN ) to report earnings on February, 22. Oppenheimer Asset Management Inc. boosted its position in shares of Dynegy by 11.2% during the 2nd quarter. (NYSE: DYN ).

Eagle Bancorp, Inc. (EGBN) Insider Trading: DWORKEN DUDLEY C sold 2000 Shares
Dec 06, 2017 - 08:48
Anadarko Petroleum Corporation (NYSE:APC) has risen 8.29% since December 4, 2016 and is uptrending. Barclays Capital downgraded the stock to "Underweight" rating in Wednesday, June 14 report.

isis-killer-beheading-video-story-top GoFundMe page set up for Arnold officer who was shot
Dec 06, 2017 - 08:48
Higginbotham said the suspect ran into the woods and police heard shots fired, though it wasn't clear if shots were fired at them. Arnold Police Chief Robert Shockey says the shooting took place during the ride from the gas station to the police station.

$0.55 dividends are within arm's reach for Kohl's Corporation (NYSE:KSS) shareholders
Dec 06, 2017 - 08:45
The stock has a market capitalization of $8,072.63, a price-to-earnings ratio of 12.74, a PEG ratio of 1.92 and a beta of 1.24. The company reported $0.70 earnings per share for the quarter, missing the Zacks' consensus estimate of $0.72 by ($0.02).

isis-killer-beheading-video-story-top NNPC Reveals Fuel Price Increase Not On The Cards
Dec 06, 2017 - 08:38
NNPC General Manager, Group Public Affairs Division, Ndu Ughamadu said this in a statement on Monday. The NNPC had assured motorists that there was enough fuel at depots to last the yuletide and beyond.

Brief Overview on Stock's Performances: The Walt Disney Company (DIS)
Dec 06, 2017 - 08:35
Moreover, Logan Capital Management has 0.58% invested in Exxon Mobil Corporation (NYSE:XOM). (NYSE:SXC) for 28,338 shares. It has underperformed by 7.44% the S&P500.The move comes after 9 months negative chart setup for the $161.57B company.