Security Alert! Yik Yak app revealed locations of users

 US-based anonymous social media platform Yik Yak, which allows users to read messages from others nearby, has reportedly revealed the exact locations of at least two million users. David Teather, a computer science student, found last month that the iPhone app's flaw allowed attackers to obtain both the precise location for posts and users' unique IDs. “I was able to access the precise GPS coordinates (within 10-15 feet accuracy) of all posts and comments on the Yik Yak platform, putting at least 2 million users at risk. That number is probably higher than that user count six months ago," he wrote in a blog post.

“I reported what I found to the Yik Yak team on April 11, 2022. Almost a month later, on May 8th, 2022 (1 day before the date of publication), they responded by removing the user id returned for posts and comments which is not enough to protect privacy ", he added.

Yik Yak is a pseudonymous messaging board that allows users to see posts within a 5-mile radius. Each user has an emoji and colour to distinguish individuals. These can be reset if the user so desires.

This feature enables conversation chains to continue in comment areas where users can interact.

Each post has a location associated with it, and when viewing a post, the app will show how far away it is from you.

The app, which originally launched in 2013, was shut down due to its failure to curb cyberbullying and harassment and was relaunched last year. It is now marketed to people ages seventeen and older.

Source