SoylentNews is people
SoylentNews
Submitted via IRC for BoyceMagooglyMonkey
Anyone can track a Venmo user's purchase history and glean a detailed profile – including their drug deals, eating habits and arguments – because the payment app lacks default privacy protections.
This was the finding of a Berlin-based researcher, Hang Do Thi Duc, who analysed the more than 200 million public Venmo transactions made in 2017. Her aim was to highlight the privacy risk from using a seemingly innocuous peer-to-peer app.
By accessing the data through a public application programming interface, Do Thi Duc was able to see the names of every user who hadn't changed their settings to private, along with the dates of every transaction and the message sent with the payment. This allowed her to explore the lives of unsuspecting Venmo users and learn "an alarming amount about them".
The default state for transactions when a user signs up to the app is "public", which means they can be seen by anyone on the internet. Users can change this to "private" by navigating to the app's settings, but it's not clearly highlighted during sign-up.
(Score: 3, Insightful) by archfeld on Monday July 23 2018, @10:00PM (2 children)
It doesn't matter if the transaction can be set to private. Buying drugs, legal or not using anything but cash is foolish. Why leave a trail, paper or otherwise for a transaction that has a high probability of coming back to bite you in the a$$ if it is made public. Haven't the huge number of 'recovered' email scandals and 'hacked' data exposures taught anyone anything ? There is a reason most drug dealers don't take American Express or checks, and it isn't Squares' card processing fees either...
For the NSA : Explosives, guns, assassination, conspiracy, primers, detonators, initiators, main charge, nuclear charge
(Score: 0) by Anonymous Coward on Tuesday July 24 2018, @09:37AM (1 child)
It's a good thing pharmacies don't require any paperwork because those meds can be really embarrassing.
(Score: 2) by archfeld on Tuesday July 24 2018, @08:50PM
Pharmacy deals that are really embarrassing are usually prescription and covered under HIPAA, so I won't have to hear about it over beers with co-workers at Fridays taco lunch hour.
https://en.wikipedia.org/wiki/Health_Insurance_Portability_and_Accountability_Act [wikipedia.org]
For the NSA : Explosives, guns, assassination, conspiracy, primers, detonators, initiators, main charge, nuclear charge