Secret-sharing app Whisper shared secrets like last known location and actual password tokens in exposed database

Secret-sharing app Whisper shared secrets like last known location and actual password tokens in exposed database

900 million records detailing country, interests and more left in full view


Whisper, a mobile app for sharing those thoughts you'd rather not make public, turns out to be better at sharing secrets than keeping them, spilling a whopping 90 metadata fields associated with users in an exposed database.


The app, launched in 2012, is intended as a way for people to "share real thoughts and feelings, forge relationships and engage in conversations on an endless variety of topics – without identities or profiles."


But as reported by The Washington Post, security researchers found 900 million user records publicly accessible online, exposing both deliberately public and private metadata that could serve to identify supposedly anonymous users of the app.


That 5TB, 75-node database, which has been locked away since Monday, when the company an ..

Support the originator by clicking the read the rest link below.