Researchers spot thousands of Android apps leaking user data through misconfigured Firebase databases

Researchers spot thousands of Android apps leaking user data through misconfigured Firebase databases

Take care what data you enter into apps, it may be stored insecurely


Security researchers at Comparitech have reported that an estimated 24,000 Android apps are leaking user data because of misconfigured Firebase databases.


Firebase is a popular backend service with SDKs for multiple platforms, including Android, iOS, web, C++ and Unity (for games). Features include two NoSQL database managers, Cloud Firestore and the older Realtime Database. Data is secured using rules which "work by matching a pattern against database paths, and then applying custom conditions to allow access to data at those paths", according to the docs. This is combined with authentication to lock up confidential data while also allowing access to shared ..

Support the originator by clicking the read the rest link below.