A rival Tea app for men is leaking its users’ personal data and driver’s licenses

Teonhar, an application designed to share photos and information about the women they have dated for men, can confirm the personal information of users, including government IDs and selfie.

The app launched in the Apple App Store earlier this week is a response to another viral app tea that allows women to post about men on their date. Tea is advertised with more than 6 million users as a female security app that is “similar”Are we dating the same guy?“Facebook Networks. But the app is controversial, as there are many claims that female posts cannot be verified.

404 The reaction of tea surrounding tea has increased further last week after a revenge by 4 Chan users To discover a publicly exposed database Belonging to the app, which Published More than 72,000 images with thousands of selfies and photo ID submitted for account verification. Ay The next hack Overaits of more than 1 million seated above the app sent to the app is exposed to more than 1 million Disable Its message feature.

Among the lifestyle applications of iOS, the second -ranked Teonhar Tea app seems to be the direct rejection of the Tea app, even the language from the Tea’s App Store details to its own list.

However, it is like the application that I wanted to imitate, it has its own protection error in the tion.

TechCrunch has found at least one security error that lets anyone access the users ‘license and selfie that users have uploaded to the Tion with the users’ data access with their username and related email address. The images of this driver’s licens are universally accessible web addresses, with links to access anyone using their web browser.

In one case, the TechCrunch saw a list of posts shared on each user’s email address, display name and self-reported location.

TechCrunch is preventing some of the details of bugs so that the contaminated actors do not help anyone access data. The creator of the app did not respond to TechCrunch emails asking who we could report to the error. As a result, the current popularity of the TechCrunch App and the risk of using the app is publishing this report with limited details of the issue.

A developer named Naveel Media Corporation uploaded the Tionor to the IOS App Store. According to Linkedin, the founder and chief executive officer of the organization is Javia’s Lampkin.

TechCrunch has detected at least one teoner record associated with Lampkin’s own data.

Protection Laps will probably affect a user who has signed up or shared identity documents with the app. The bug also reveals the number of users of the Tionahar app, which is about 53,000 users at the time of publication.

TechCrunch has also identified a possible second security problem, where the app creator Lampkin was published on an email address and platext password server. Certificate seems to have access to the app’s “Admin” panel. TechCrunch has not used certificates, because it will be illegal, but inadvertently highlighting the risk of leaving admin credentials in contact with the web.

In addition to its security defects, the contents of the tion are disturbing themselves. The app has requested IDs and selfies to verify their identities – a process that is not automatic – users can access a “guest” scene of the app without sign in.

With the opening of the “guest” scene, TechCrunch saw several images of the same nude woman, which was posted in different names in the form of spam. It is not clear whether this woman agreed to share this image. Other posts share pictures and names of women in addition to commenting on women as “easy” or spreading sexual infections.

Throughout all the free applications, the Tionahar is more than 17 apps like Instagram, Netflix, Uber and Spotify. Tea is currently number 2.