项目Sadak – 用户数据泄露
1 分•作者: gobountyhunter•大约 3 小时前
您好，
创始人是 Parth Anand，他自称是麻省理工学院（MIT）的研究员，鉴于他缺乏技术深度，这一点非常令人惊讶。
我刚刚发现 Project Sadak（一个报告门户平台）发生了数据泄露。Firebase 规则缺失，用户数据不安全。我获取了所有报告的完整文本以及数据，并将详细的安全指南报告发送给了创始人。他尚未回复确认平台已更新并准备就绪，只表示他们已将其安全化，但我尚未在平台上看到任何迹象。
我给了创始人 24 小时进行修改，希望能够公开此事，但我尚未收到他方面的任何积极回应。
查看原文
Hi,
The founder is Parth anand, who claims to be a researcher at MIT, which is very surprising given the lack of technical depth he possesses.
I just found out that there's been a data breach on Project Sadak, a porthole reporting platform. The Firebase rules were not in place, and the user data was not secure. I was able to get the entire transcript of reports, as well as the data, and have sent the exact security guideline report to the founder. He has still not replied with confirmation that the platform is up and ready, only that they have secured it, which I'm not able to see on the platform.<p>I gave the founder 24 hours to make the changes in hopes that I can post about it publicly, but I haven't seen any positive responses from his end.