6 ms·
App is just extremely badly designed. If service is supposed to be anonymous it's good idea not to store any identifying information. If there's need to store s
by Sami_Lehtinen 12y ago
App is just extremely badly designed. If service is supposed to be anonymous it's good idea not to store any identifying information. If there's need to store some for legal reasons that can be encypted easily. So there's absolutely no way to recover it without the administrator. Even if the servers would be seized. Unfortunately world is full of such crappy broken by design services. Simply bad engineers and engineering does fail. That's how I do it. When you're anonymous use proxy tor and random wifi or anonymous clean cellphone. Even then be very careful about writing style analysis. Anyway it's worth of noting that absolutely nothing is private with Android or iPhones etc. If you're dealing with things which require privacy you're not using mainstream smart phone.
- fps 12y agoIf they don't store identifiying information, the app can't perform it's main purpose, which is to share secrets _with people you know_. In fact, I don't think it's possible for this app to work without this vulnerability. For any set of rules they can provide, a set of sockpuppet accounts can be created to fulfill those rules and only track a single real person.
- Rapzid 12y agoYes, so say they make a rule like "You're account needs 5 friends and 20 secrets". So create a bunch of accounts with different sets of friends and find out where the intersections between friends and posted secrets are. Busted. This application is fundamentally flawed in it's current form. To even approach feasibility you would need to give people the power to view and approve emails that are following them. Then social circles would naturally form within the app along with a form of self governance.