A cyber security researcher Jaime Sanchez today exposed a security bug in Snapchat app that allows an attacker to send thousands of messages within few seconds. Users can only recover the phone by hard reset.
The app generates a new token whenever user send a message, in order to verify their identity.
According to Los Angeles Times, vulnerability allows to reuse the old tokens generated by the app to send new messages. A cyber criminal can use these old tokens to send a large amount of spam messages.
The researcher hasn't informed Snapchat about the vulnerability and told Los Angeles times that Snapchat has no respect for the cyber security research community.
The reason why researcher is saying that is because Snapchat recently ignored a security bug reported by security researchers that could be used to expose user data.
0 comments: