Hacker News new | past | comments | ask | show | jobs | submit login
Get any snapchat user's email (privacy leak)
8 points by tensafefrogs on Jan 2, 2013 | hide | past | favorite | 1 comment
Snapchat has a terrible privacy leak: If you know anyone's username, you can get their email address very easily.

I reported this to snapchat on Dec. 14th via their support email, and tweeted at them as well with no response. I sent a follow-up yesterday and still haven't heard back at all (not even an acknowledgement that they got the message).

I'm posting this in the hope that they fix the issue quickly.

How to get any snapchat user's email:

Start by logging out of the app (via settings)

1) Try to log in using the username whose email you would like to see. (use any password or no password)

2) After login fails, hit "reset password"

3) View the user's full email in the "password reset" dialog.

[edit: formatting]

Update: They just fixed it. Thanks, snapchat!




Emailed them myself about this yesterday and also reached out via LinkedIn but not sure if they got it. You can see an example of what it does here: https://www.dropbox.com/s/0p63pc89s5mhwe5/2013-01-02%2004.33...




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: