Tea payments itself as a security courting app for ladies, permitting customers to anonymously share particulars about males they’ve met. A brand new app known as TeaOnHer has emerged that makes an attempt to flip the script, with males sharing details about ladies they date. And whereas Tea drew scrutiny final month after an information breach revealed person info, together with probably figuring out particulars resembling telephone numbers and private anecdotes, the copycat app appears to be affected by the identical drawback.
TechCrunch found a number of safety points at TeaOnHer, which is at present second hottest life-style app on iOS. (Tea is the present chief regardless of the problems). The publication reported that it recognized a safety flaw that allowed anybody to entry TeaOnHer person information, together with usernames, electronic mail addresses, uploaded driver’s licenses and selfies. It additionally discovered a doable second situation the place the e-mail handle and plaintext password for Xavier Lampkin, founder and CEO of the app’s developer, was left uncovered. These credentials seem to supply entry to TeaOnHer’s admin panel, which is one other safety threat.
The total report at TechCrunch additionally raises considerations in regards to the content material shared on the app, which included spam posts with nude images of girls. It is unclear how lots of the roughly 53,000 customers for TeaOnHer may be bots, or whether or not the app was ever meant for use critically; chunks of its description within the iOS retailer use near-identical language to Tea’s itemizing.
