[Infowarrior] - Researchers publish Snapchat vuln code

[Richard Forno]

Researchers publish Snapchat code allowing phone number matching after exploit disclosures ignored

After having its security disclosure go ignored since August, Gibson Security has published Snapchat's previously undocumented developer hooks (API) and code for two exploits that allow mass matching of phone numbers with names and mass creation of bogus accounts.

The Australian hackers announced its publication of Snapchat's API and the two exploits on the GibSec Twitter account on Christmas Eve — which by time difference is Christmas Day in Australia.

< - >

http://www.zdnet.com/researchers-publish-snapchat-code-allowing-phone-number-matching-after-exploit-disclosures-ignored-7000024629/


Code @ http://gibsonsec.org/snapchat/fulldisclosure/

---
Just because i'm near the punchbowl doesn't mean I'm also drinking from it.