Tuesday, April 7, 2020

Keyboard App that Collects Personal Data

Latest articles

Oregon reports four COVID-19 deaths, 49 new cases

COVID-19 has claimed four more lives in Oregon, raising the state’s death toll to 33, the Oregon Health Authority reported at 8 a.m. today.

Otis armed robbery fugitive in custody after high-speed chase

Wanted fugitive Jacob Leeland Lunstedt was taken into custody today after a tip to Salem Police led to his capture by local law enforcement after a high-speed chase on Forest Service Road 1726.

Child care openings available to essential workers

Samaritan Early Learning Center in Lincoln City has been approved by the state to provide emergency child care for a prioritized group of essential workers.

Reporter rides bike in Lincoln City, takes pictures

I rode my bike through the seven miles that is Lincoln City Monday and took some pictures along the way. 

Oregon reports 1 COVID-19 death, 69 new cases

COVID-19 has claimed one more life in Oregon, raising the state’s death toll from 26 to 27, the Oregon Health Authority reported at 8 a.m. today.

Oregon reports four new COVID-19 deaths, 100 new cases

COVID-19 has claimed four more lives in Oregon, raising the state’s death toll from 22 to 26, the Oregon Health Authority reported at 8 a.m. today.

Coalition of state agencies ask for voluntary hold on burning

In response to the "Stay Home, Save Lives" Executive Order to reduce the effects of the COVID-19 virus, a coalition of Oregon state agencies are asking Oregonians to voluntarily refrain from conducting outdoor burning. 

Lincoln County receives more high ratings for social distancing

Today, Google announced the release of its COVID-19 Community Mobility Reports that use data from their user’s smartphone location history, to compare how social distancing efforts are working.

Officers use deadly force in Lincoln City

Lincoln City Police officers shot and killed a man late Thursday night who witnesses say was wielding a knife and "acting crazy."

Fourth Lincoln County resident tests positive for COVID-19

Lincoln County Public Health announced today another positive case of COVID-19. The new case brings Lincoln County’s total to 4 confirmed cases.
ai-type-keyboard-data-breach

In the digital age, one of the most popular sayings is—if you’re not paying, then you’re not the customer, you’re the product.

While downloading apps on their smartphones most users may not realize how much data they collect on you.

It’s way more than you can imagine.

Many app developers are following irresponsible practices that are worth understanding, and we don’t have a better example than this newly-reported incident about a virtual keyboard app.

A team of security researchers at the Kromtech Security Center has discovered a massive trove of personal data belonging to more than 31 million users of the popular virtual keyboard app, AI.type, accidentally leaked online for anyone to download without requiring any password.

Founded in 2010, Ai.type is a customizable and personalizable on-screen keyboard for mobile phones and tablets, with more than 40 million users worldwide.Apparently, a misconfigured MongoDB database, owned by the Tel Aviv-based startup AI.type, exposed their entire 577 GB of the database online that includes a shocking amount of sensitive details on their users, which is not even necessary for the app to work.

…they appear to collect everything from contacts to keystrokes.

The leaked database of over 31 million users includes:

  • Full name, phone number, and email address
  • Device name, screen resolution and model details
  • Android version, IMSI number, and IMEI number
  • Mobile network name, country of residence and even user enabled languages
  • IP address (if available), along with GPS location (longitude/latitude).
  • Links and the information associated with the social media profiles, including birth date, emails, photos.

“When researchers installed Ai.Type they were shocked to discover that users must allow ‘Full Access’ to all of their data stored on the testing iPhone, including all keyboard data past and present,” the researchers say.

What’s more?Moreover, the leaked database also reveals that the virtual keyboard app is also stealing users’ contact books, including the contacts’ names and phone numbers—and already scraped more than 373 million records.

“There was a range of other statistics like the most popular users’ Google queries for different regions. Data like average messages per day, words per message, the age of users, words_per_day’: 0.0, ‘word_per_session and a detailed look at their customers,” the researchers say.

Researchers go on to raise the question: “why would a keyboard, and emoji application need to gather the entire data of the user’s phone or tablet?

The recent data breaches have taught us that once our personal data gets in the hands of cyber criminals, it makes us vulnerable forever.

Therefore, the best defense to protect yourself is always—awareness.

- Advertisement -
Justin Werner
Justin Wernerhttps://wernerhost.com/
Justin Werner is founder and publisher of Lincoln City Homepage and a journalist reporting news for the fine citizens of Lincoln City, Oregon and beyond. He's on a mission to seek out truth and isn't afraid to be the tip of the spear for freedom of the press. When he's not wearing his reporter hat, you can find him enjoying the Oregon Coast with his wife and three children.

Related articles

LEAVE A REPLY

Please enter your comment!
Please enter your name here

Comment with Facebook

Trending