Sunday, April 20, 2014
FAIRFIELD-SUISUN, CALIFORNIA
99 CENTS

Snapchat suffers security breach

Evan Spiegel

This Thursday, Oct. 24, 2013 file photo shows Snapchat CEO Evan Spiegel in Los Angeles. Snapchat, the disappearing-message service, has been quiet following a security breach that allowed hackers to collect the usernames and phone numbers of millions of its users. Snapchat said Thursday, Jan. 2, 2014 that it is assessing the situation, but did not have further comment. Earlier in the week, hackers reportedly published 4.6 million Snapchat usernames and phone numbers on a website called snapchatdb.info, which has since been suspended. (AP Photo/Jae C. Hong)

NEW YORK — Snapchat says it plans to put out a more secure version of its application following a breach that allowed hackers to collect the usernames and phone numbers of some 4.6 million of its users.

The disappearing-message service popular with young people said in a blog post late Thursday that the updated version of its app would allow users to opt out of its “Find Friends” feature, which was apparently at the heart of the breach, and would stem future attempts to abuse its service.

The breach occurred after security experts warned the company at least twice about a vulnerability in its system.

Before announcing its plans to update the app, Snapchat had been quiet. Its seemingly detached response caused some security specialists to wonder whether the young company can handle the spotlight that it’s been thrust into over the last year as its service has become enormously popular.

In response to a warning by Gibson Security on Dec. 25 —which followed an earlier alert in August — Snapchat said in a blog post last Friday that it had implemented “various safeguards” over the past year that would make it more difficult to steal large sets of phone numbers. Snapchat hasn’t detailed the changes it made.

As Americans rang in the New Year, hackers reportedly published 4.6 million Snapchat usernames and phone numbers on a website called snapchatdb.info, which has since been suspended. The breach came less than a week after the most recent warning from security experts that an attack could take place.

The incident bruises the company’s image and may threaten its rapid growth. Los Angeles-based Snapchat has no source of revenue, but its rapid rise to an estimated 20 million U.S. adult users prompted Facebook to extend a reported $3 billion buyout last year. Snapchat’s 23-year-old CEO Evan Spiegel turned down the overture. The user number estimate is based on census data and data from the Pew Research Center.

What should users do? Gibson Security, the firm that warned Snapchat of the security vulnerability on Christmas Day, has created a site, — http://lookup.gibsonsec.org/ — that lets users type in their username to see if their phone number was among those leaked. Of two user accounts that The Associated Press checked, one was found to have been compromised.

Gibson Security did not publish the last two digits of the phone numbers.

Gibson says users can delete their Snapchat account if they wish, but “this won’t remove your phone number from the already circulating leaked database.” Users can also ask their phone company to give them a new phone number.

“Lastly, ensure that your security settings are up to scratch on your social media profiles. Be careful about what data you give away to sites when you sign up — if you don’t think a service requires your phone number, don’t give it to them,” Gibson said.

This was Gibson’s second warning to Snapchat, following one in August that the security firm said was ignored.

“Given that it’s been around four months since our last Snapchat release, we figured we’d do a refresher on the latest version, and see which of the released exploits had been fixed (full disclosure: none of them),” Gibson wrote on the Gibson Security website.

The Snapchat breach comes just two weeks after Target was hit with a massive data security breach that affected as many as 40 million debit and credit card holders.

Gartner security analyst Avivah Litan said phone numbers are not considered “sensitive” personally identifiable information — such as credit card or social security numbers — so they are collected by all sorts of companies to verify a person’s identity.

A phone number is “not as bad as password or magnetic strip information, but it’s the piece of the puzzle that criminals need to impersonate identities,” she said.

Christopher Soghoian, principal technologist with the American Civil Liberties Union, agreed.

“The main problem was that they ignored a responsible report by security researchers,” he said, adding that his concern is not with the specific database of information that was released, but that Snapchat has “demonstrated a cavalier attitude about privacy and security.”

Many people use Snapchat because it feels more private than other messaging apps and social networks. Users can send each other photos and videos that disappear within a few seconds after they are viewed. While the recipient can take a screenshot of the message, a big draw of Snapchat is its ephemeral nature.

“This probably won’t be the last problem with Snapchat,” Soghoian said. Companies like Microsoft and Google, he added, actively court security researchers and even pay bounties for people to expose flaws in their systems.

“Snapchat may be too small to pay bounties, but they certainly should be treating researchers with respect and addressing issues as soon as they are told about them,” he said.

In its blog post Thursday, Snapchat listed an email address that security experts could use to contact the company “when they discover new ways to abuse our service so that we can respond quickly to address those concerns.”

The Associated Press

The Associated Press

LEAVE A COMMENT

Discussion | No comments

The Daily Republic does not necessarily condone the comments here, nor does it review every post. Read our full policy

.

Solano News

Bay Area makes growth plans

By Barry Eberling | From Page: A1, 1 Comment

 
Supervisor candidates vary on Plan Bay Area

By Barry Eberling | From Page: A1, 14 Comments | Gallery

Earth Day means cleanup Day for Suisun City

By Susan Hiland | From Page: A1, 5 Comments | Gallery

 
Hop to it: Couple lights up home, yard for Easter

By Amy Maginnis-Honey | From Page: C1

Ranking the best Bay Area athletes

By Brad Stanhope | From Page: A2

 
The Edge hosts Easter egg hunt

By Adrienne Harris | From Page: A3

Alooma Temple keeps children in mind

By Adrienne Harris | From Page: A3 | Gallery

 
Fairfield author to speak at women’s expo

By Susan Hiland | From Page: A3

Piano scholarship competition set in Vallejo

By Susan Hiland | From Page: A3

 
The resurrection has changed the lives of Christians

By Perry W. Polk | From Page: C3

 
Armijo graduate completes basic training

By Nick DeCicco | From Page: C4

 
Understanding your health insurance

By Morgan Westfall | From Page: D4, 1 Comment

 
Record Store Day a commercial hit

By Adrienne Harris | From Page: A5 | Gallery

Easter egg hunt brings out the smiles

By Susan Hiland | From Page: A5, 2 Comments | Gallery

 
Dutch Bros. joins Fairfield coffee corridor

By Barry Eberling | From Page: B7, 6 Comments | Gallery

City sets plan to dispose of property assets

By Brian Miller and Karl Dumas | From Page: B7, 1 Comment

 
Fairfield police log: April 17, 2014

By Susan Hiland | From Page: A12

Suisun City police log: April 17, 2014

By Susan Hiland | From Page: A12

 
.

US / World

Counties tell Brown they need money for his law

By The Associated Press | From Page: A1, 1 Comment

 
San Francisco probe leading to entrapment claims

By The Associated Press | From Page: A6

Exhibit recreates Warhol’s 1964 World’s Fair mural

By The Associated Press | From Page: A10

 
NASA’s space station Robonaut finally getting legs

By The Associated Press | From Page: A10 | Gallery

Ohio couple married 70 years die 15 hours apart

By The Associated Press | From Page: A11 | Gallery

 
Documents detail another delayed GM recall

By The Associated Press | From Page: A11, 1 Comment

At barricades, Ukraine insurgents await Easter

By The Associated Press | From Page: A13

 
Official: 3 bodies retrieved from inside ferry

By The Associated Press | From Page: A13 | Gallery

13th body pulled from snow in Everest avalanche

By The Associated Press | From Page: A13

 
Costa Rican a celebrity after certified miracle

By The Associated Press | From Page: A14 | Gallery

.

Opinion

Government … for the government?

By Bill James | From Page: A8, 9 Comments

 
Editorial Cartoons for April 20, 2014

By Daily Republic Syndicated Content | From Page: A8

Question of the week: Will Flight 370 be found?

By Daily Republic | From Page: A8

 
Neighborhood speeders don’t get it

By Letter to the Editor | From Page: A8, 7 Comments

 
Why would a person do this?

By Letter to the Editor | From Page: A8, 3 Comments

Sound off for April 20, 2014

By Daily Republic | From Page: A8, 1 Comment

 
Jeb Bush, love, and today’s GOP

By Ruben Navarrette | From Page: A9, 1 Comment

 
 
.

Living

Today in History for April 20, 2014

By The Associated Press | From Page: A2

 
Community Calendar: April 20, 2014

By Susan Hiland | From Page: A2

Bill Nye says he underestimated debate’s impact

By The Associated Press | From Page: C3, 10 Comments

 
Book details lives of cloistered nuns

By The Associated Press | From Page: C3

Horoscopes for April 20, 2014

By Holiday Mathis | From Page: D4

 
Pete spends weekends at my house but he never invites me to his

By Kathy Mitchell and Marcy Sugar | From Page: D4

.

Entertainment

Flea of Red Hot Chili Peppers has book deal

By The Associated Press | From Page: C2

 
Tartt, Goodwin finalists for Carnegie medals

By The Associated Press | From Page: C2

New book on fracking illuminates pros, cons

By The Associated Press | From Page: C2

 
PUBLISHERS WEEKLY BEST-SELLERS

By The Associated Press | From Page: C2

TVGrid

By Daily Republic Syndicated Content | From Page: B11

 
.

Sports

A’s score 3 in 9th, rally past Astros 4-3

By The Associated Press | From Page: B1 | Gallery

 
Warriors beat Clippers 109-105 in playoff opener

By The Associated Press | From Page: B1 | Gallery

 
Kings, Sharks look to put Game 1 in past

By The Associated Press | From Page: B1 | Gallery

Stults, Padres hand Giants third straight loss

By The Associated Press | From Page: B1

 
Hawks take 1-0 lead by rolling past Pacers 101-93

By The Associated Press | From Page: B2

Calathes suspension a reminder of supplement risk

By The Associated Press | From Page: B2

 
Raptors GM Ujiri uses profanity about Brooklyn

By The Associated Press | From Page: B2

Williams scores 24 as Nets beat Raptors 94-87

By The Associated Press | From Page: B2 | Gallery

 
Durant leads Thunder past Grizzlies 100-86

By The Associated Press | From Page: B2

Federer beats injured Djokovic to reach final

By The Associated Press | From Page: B3 | Gallery

 
Indians set two new school records for track

By Daily Republic staff | From Page: B4

Wie shoots 67, wins LPGA LOTTE Championship

By The Associated Press | From Page: B4

 
Rapids, Earthquakes play to scoreless tie

By The Associated Press | From Page: B4

Travis Bowl Highlights

By Daily Republic | From Page: B4

 
Jimenez leads Langer by 1 shot in Greater Gwinnett

By The Associated Press | From Page: B4

Stars Recreation bowling results

By Daily Republic | From Page: B4

 
Donald shoots 66, takes lead at RBC Heritage

By The Associated Press | From Page: B4

Big names among prospective Buffalo Bills buyers

By The Associated Press | From Page: B4

 
Award-winning archery champ shoots with his teeth

By The Associated Press | From Page: B6 | Gallery

Survivors keep busy as Boston Marathon approaches

By The Associated Press | From Page: B6

 
.

Business

Why high oil prices are actually good for airlines

By The Associated Press | From Page: B7

 
US delays review of contentious Keystone pipeline

By The Associated Press | From Page: B7

Subscription sample boxes shake up beauty routines

By The Associated Press | From Page: B8

 
Girls from modest families get lift in technology

By The Associated Press | From Page: B12

Haunted house part of San Antonio apartment lofts

By The Associated Press | From Page: B13

 
Recalls this week: lanterns, exercise devices

By The Associated Press | From Page: B13

Review: Siri-like Cortana fills Windows phone gap

By The Associated Press | From Page: B14

 
.

Obituaries

Sealwyn Shirley Brucefield Shepherd Malkiewicz

By Nancy Green | From Page: A4

 
Margaret Elizabeth Silva

By Susan Hiland | From Page: A4

Lloyd G. Hoffmeister

By Nancy Green | From Page: A4

 
Ramon Isidro

By Adrienne Harris | From Page: A4

Rogelio Tinoco-Zamudio

By Susan Hiland | From Page: A4

 
James Leroy Barbour

By Nancy Green | From Page: A4

William Paul Wehrly

By Nancy Green | From Page: A4

 
.

Comics