It's a bad day for would-be tech watchdogs and gossips.
The tech industry whistleblower and survey site Blind temporarily exposed user data when it left a server functioning without password protection. That's according to TechCrunch, whose new report not only uncovered the server lapse, but also called into question Blind's claims of privacy and complete user anonymity.
SEE ALSO:Blind: The hot app where all the best Silicon Valley gossip is read right nowA South Korean company, Blind is a site that allows tech industry employees to anonymously discuss their companies with colleagues. It also regularly produces surveys about sensitive topics like workplace harassment and diversity that it then distributes to the press. Blind gained prominence when discussions on the platform exposed sexual harassment at Uber. According to TechCrunch, it just secured $10 million in a new round of funding.
Central to Blind's functioning are its claims of privacy and user anonymity. Without this assurance, employees would likely feel uncomfortable discussing their employers.
The unprotected server reportedly showed logins, messages, and interactions,"allowing anyone to read private comments and posts."
Blind responded to the report saying that the unprotected server was an isolated incident that affected users who logged in between Nov. 1 and Dec. 19. Blind said it sent a push notification to affected users within the app.
“While developing an internal tool to improve our service for our users, we became aware of an error that exposed user data,” Blind reportedly wrote.
In addition to account activity, Blind protects its users by disassociating work email addresses from accounts. Blind says that it does not store email addresses, and only creates unique tokens from emails once you sign up.
"Email verification is safe, as our patented infrastructure is set up so that all user account and activity information is completely disconnected from the email verification process," a Blind FAQ reads. "It is impossible to match your user activity to any profile or email information provided upon sign up."
Despite these claims, TechCrunch was able to view emails of Blind users who had not yet posted. The server also contained pairings of these accounts with their unique member IDs, which could reportedly allow for identification if they did post in the future. The report also showed potentially shoddy encryption work for passwords and user tokens.
The server lapse is a potentially huge breach of trust for Blind users. Blind has the potential to be an important whistle-blowing tool for an industry that certainly needs oversight. But without confidence in its security, its users, and its power, could vanish.
CORRECTION: Dec. 21, 2018, 5:16 p.m. PST
A previous version of this article stated that Blind emailed users about the breach. Blind did not email users. It sent a push notification to affected users within the Blind app.
TopicsCybersecurity
(责任编辑：時尚)
Major earthquake and multiple aftershocks rock central Italy
Trump spokesperson reorganizes U.S. timeline, says Obama led invasion of Afghanistan
Tesla removes 'self
Niantic is cracking down on 'Pokémon Go' cheaters with permanent bansAly Raisman catches Simone Biles napping on a plane like a championFyvush Finkel, Emmy winner for 'Picket Fences,' dies at 93
NEW YORK (AP) — Actor Fyvush Finkel, the plastic-faced Emmy Award-winning character actor whos
...[详细]Louisiana residents make best of 'historic' flood on social media
Heavy rains forced at least a thousand rescues and caused three deaths across Louisiana over the wee
...[详细]Louisiana residents make best of 'historic' flood on social media
Heavy rains forced at least a thousand rescues and caused three deaths across Louisiana over the wee
...[详细]No, Shaunae Miller didn't cheat by diving past Allyson Felix in Rio
When Shaunae Miller of the Bahamas dove across the finish to beat Team USA's Allyson Felix in the 40
...[详细]Mom discovers security cameras hacked, kids' bedroom livestreamed
A mother in Houston, Texas woke up one morning to pretty much every parent's worst-case scenario. 。 "
...[详细]Motel has the most relatable reason for rebuilding
No matter how tough you might be, you can still be brought down by a tiny spider.Imgur user admirals
...[详细]Millions of sunflowers bloom in Japan and the images are stunning.
More than a million sunflowers are in full bloom at the Serakogen Nojo flower farm in Sera, Japan. T
...[详细]I tested out a virtual reality fart simulator and it was as odd as it sounds
LONDON -- It's not every day you get invited to Paris to spend three hours smelling farts.SEE ALSO:T
...[详细]17 questions you can answer if you're a good communicator
Whether you regularly speak in public and write online, or you mostly express yourself over email, b
...[详细]LeBron James signs new contract that will make him highest
Fresh off delivering the Cleveland Cavaliers their first-ever NBA championship, LeBron James finally
...[详细]Make money or go to Stanford? Katie Ledecky is left with an unfair choice.
Now you can wear Grindr apparel while you grind
