Keyboard app security gaffe exposes 31mn users' data including passwords, web searches

Keyboard app security gaffe exposes 31mn users' data including passwords, web searches

The personal user data of around 31 million users of the popular virtual keyboard app AI.type has been confirmed to have been compromised and leaked. A big flaw in this kind of database lets anyone access, edit or even delete the data stored on it. Co-founder Eitan Fitusi has since claimed that the server is now secure, but the extent of the damage is not known.

Researchers had attempted to contact the company behind AI.type on multiple occasions but it wasn't until this past weekend that they finally acknowledged it. AI.type says it has now secured the database, and that the leak didn't impact AI.type's nine million iOS users. It was uncovered by Kromtech Security Center researchers.

The database of 577 gigabytes of data collected from users of the keyboard included a huge range of personal information. Dangerously, the records also included a user's precise location, including their city and country.

Other records are significantly more detailed. Data collected from free users includes their phone's unique IMSI and IMEI numbers, SIM cards and mobile networks, and what version of Android the phone has. Accompanying the numbers were the make and model of the device, its screen resolution and the version of Android it was running.

We also found several tables of contact data uploaded from a user's phone. Many records contain specific details of a user's public Google profile, including email addresses, dates of birth, genders, and profile photos.

In total, the database contained more than 10.7 million email addresses and 374.6 million phone numbers, suggesting the app accessed the contacts of its users and uploaded that information to its database.

Homophobic GOP Lawmaker Freaks Out When Colleague Touches Him: 'I'm a Heterosexual!'
The Pittsburgh Post-Gazette mockingly reported the story with the headline, " Daryl Metcalfe comes out as heterosexual ". Bradford ceded his time to talk about the bill after the outburst, saying, " I don't know where we go from here ".

Numerous kinds of records of the app's users were available on the server.

Several tables contained lists of each app installed on a user's device, such as banking apps and dating apps.

It's not uncommon for keyboard apps to ask for wide-ranging permissions to access data on a user's device-and in many cases, users are willing to grant it because the keyboard is an essential tool. Security researchers have continued to warn that these apps could also steal your passwords despite their assurances.ai.type is no innocent in this game of data collection.

AI.type says on its website that user's privacy 'is our main concern'. Any text entered on the keyboard "stays encrypted and private", says the company. Some of the records, however, are far more significant and include phone numbers and IP addresses. Said Bob Diachenko of Kromtech Security Center in a blog post. At this point, Kromtech warns that anyone who had ever downloaded and installed ai.type keyboard should consider their data out in the open. "This presents a real danger to cybercriminals who could commit fraud or scams using such detailed information about the user".

"It raises the question once again if it is really worth it for consumers to submit their data in exchange for free or discounted products or services that gain full access to their devices", he added.

Related news:

Hot News

isis-killer-beheading-video-story-top Why is BBC being accused of Racism by Bollywood Fans?
Dec 06, 2017 - 10:30
Shashi Kapoor was married to English actress Jennifer Kendal for 26 years until her death in 1984. He was the youngest son of Prithviraj Kapoor, a veteran of Bollywood and the theatre.

isis-killer-beheading-video-story-top Naya Rivera Files for Divorce from Ryan Dorsey for Second Time
Dec 06, 2017 - 10:25
However, they called off their divorce in October. "After much consideration, we have made the decision to end our marriage". Naya , 30, who played a cheerleader in the hit Fox show, is citing "irreconcilable differences" according to TMZ .

isis-killer-beheading-video-story-top Blue Angels flying to Myrtle Beach in 2018
Dec 06, 2017 - 10:01
The Air Force Thunderbirds are set for June 16-17, 2018 and the Navy Blue Angels for June 15-16, 2019 (the Navy Blue Angels). John Cowman, president of JLC AirShow Management, said the show could become an annual event at the airport.

isis-killer-beheading-video-story-top Ford to launch 15 new electric cars in China by 2025
Dec 06, 2017 - 09:57
Despite the cost streamlining, Ford plans to grow its China revenue by 50% by 2025. Ford Jr. said China will be the best market to develop and sell electric vehicles.

isis-killer-beheading-video-story-top Sign language interpreter 'makes no sense' in live press conference
Dec 06, 2017 - 09:56
Arguably the biggest news conference to come out of Tampa this year was almost upstaged by someone who didnt even utter a word. We have a contract with Purple Communications in Tampa that's who we request our interpreters from.

Brown Advisory Inc. Has $10.88 Million Holdings in Norfolk Southern Corp. (NSC)
Dec 06, 2017 - 09:28
This repurchase authorization authorizes the railroad operator to repurchase shares of its stock through open market purchases. Public Employees Retirement System of OH raised its position in shares of Norfolk Southern by 0.4% during the third quarter.

isis-killer-beheading-video-story-top Beyoncé Presents Colin Kaepernick With SI Muhammad Ali Legacy Award
Dec 06, 2017 - 09:25
The award is given to athletes who use their platform to change the world, and Kaepernick has undoubtedly filled the requirements. Music icon Beyonce introduced the 30-year-old, who last played during Week 17 of the 2016 National Football League season.

Analyst Opinion Summary: Eli Lilly and Company (LLY), DelMar Pharmaceuticals, Inc. (DMPI)
Dec 06, 2017 - 09:24
Eli Lilly and Company (NYSE:LLY) attracted a higher number of shares in volume with 4.23 million contracts traded on 04-Dec-17. The (Simple Month Average) SMA20 is at 2.24 percent, its SMA50 Value is 1.02% and SMA200 value is reported as 3.46 Percent.

isis-killer-beheading-video-story-top Director Bryan Singer Fired From Freddie Mercury Movie
Dec 06, 2017 - 08:51
The studio is said to be looking for a replacement director on the film to finish the final two weeks of shooting. Unfortunately, the studio was unwilling to accommodate me and terminated my services.

Price Target Analysis of Dynegy Inc. (NYSE:DYN)
Dec 06, 2017 - 08:48
Lasry Marc sold 2.45M shares as the company's stock rose 0.88% with the market. (NYSE: DYN ) to report earnings on February, 22. Oppenheimer Asset Management Inc. boosted its position in shares of Dynegy by 11.2% during the 2nd quarter. (NYSE: DYN ).

Analysts See $0.42 EPS for Golar LNG Partners LP (GMLP)
Dec 06, 2017 - 08:48
It increased, as 59 investors sold WMT shares while 517 reduced holdings. 159 funds opened positions while 684 raised stakes. The stock has a market cap of $1,416.77, a price-to-earnings ratio of 6.75, a PEG ratio of 1.19 and a beta of 0.88.

Eagle Bancorp, Inc. (EGBN) Insider Trading: DWORKEN DUDLEY C sold 2000 Shares
Dec 06, 2017 - 08:48
Anadarko Petroleum Corporation (NYSE:APC) has risen 8.29% since December 4, 2016 and is uptrending. Barclays Capital downgraded the stock to "Underweight" rating in Wednesday, June 14 report.

isis-killer-beheading-video-story-top GoFundMe page set up for Arnold officer who was shot
Dec 06, 2017 - 08:48
Higginbotham said the suspect ran into the woods and police heard shots fired, though it wasn't clear if shots were fired at them. Arnold Police Chief Robert Shockey says the shooting took place during the ride from the gas station to the police station.

McDonald's Corporation (MCD) Holdings Reduced by Patriot Financial Group Insurance Agency LLC
Dec 06, 2017 - 08:45
Symmetry Peak Management Llc decreased Zillow Group Inc (Put) stake by 57,500 shares to 100,000 valued at $4.90 million in 2017Q2. The fast-food giant reported $1.76 earnings per share for the quarter, beating analysts' consensus estimates of $1.75 by $0.01.

isis-killer-beheading-video-story-top NNPC Reveals Fuel Price Increase Not On The Cards
Dec 06, 2017 - 08:38
NNPC General Manager, Group Public Affairs Division, Ndu Ughamadu said this in a statement on Monday. The NNPC had assured motorists that there was enough fuel at depots to last the yuletide and beyond.