Apple's Beats brand in April unveiled the Powerbeats Pro, a redesigned wire-free version of its popular fitness-oriented Powerbeats earbuds.
Thousands of Apple ID Passwords Leaked by Teen Phone Monitoring App Server
ZDNet reports that a server used by an app for parents to monitor their teenagers' phone activity has leaked tens of thousands of login credentials, including the Apple IDs of children.
The leaked data belonged to customers of TeenSafe, a "secure" monitoring app for iOS and Android that allows parents to view their child's text messages and location, call history, web browsing history, and installed apps.
The customer database was reportedly stored on two servers hosted by Amazon Web Services, where it remained unprotected and accessible without a password. The discovery was made by a U.K.-based security researcher specializing in public and exposed data, and the servers were only taken offline after ZDNet alerted the California-based company responsible for the TeenSafe app.
Compounding the lax security is the app's requirement that two-factor authentication is turned off for the child's Apple account so that parents can monitor the phone without consent. This means a malicious actor could potentially access a child's account using the login credentials that were stored on the exposed server.
TeenSafe counts over a million parents as customers, although the database was reportedly limited to 10,200 records gleaned from the past three months of customer usage. The company said it would continue to assess the situation and provide additional information to customers as soon as it became available.
The leaked data belonged to customers of TeenSafe, a "secure" monitoring app for iOS and Android that allows parents to view their child's text messages and location, call history, web browsing history, and installed apps.
The customer database was reportedly stored on two servers hosted by Amazon Web Services, where it remained unprotected and accessible without a password. The discovery was made by a U.K.-based security researcher specializing in public and exposed data, and the servers were only taken offline after ZDNet alerted the California-based company responsible for the TeenSafe app.
"We have taken action to close one of our servers to the public and begun alerting customers that could potentially be impacted," said a TeenSafe spokesperson told ZDNet on Sunday.The information in the exposed database included the email addresses of parents who used TeenSafe, the Apple ID email addresses of their children, and children's device name and unique identifier. Plaintext passwords for the children's Apple ID were also among the data set, despite claims on the company's website that it uses encryption to protect customer data.
Compounding the lax security is the app's requirement that two-factor authentication is turned off for the child's Apple account so that parents can monitor the phone without consent. This means a malicious actor could potentially access a child's account using the login credentials that were stored on the exposed server.
TeenSafe counts over a million parents as customers, although the database was reportedly limited to 10,200 records gleaned from the past three months of customer usage. The company said it would continue to assess the situation and provide additional information to customers as soon as it became available.
Tag: security
[ 154 comments ]
Top Rated Comments
(View all)
14 months ago
Jesus H, this product is abominable. True helicopter parent dystopian BS. Just let kids be kids!
14 months ago
If you’re in need to use such kind of apps to monitor your children you’re in problems anyway.
14 months ago
As I read these comments, it's easy to tell who are parent's and who are not.
To those who are not, you really have no basis to be criticizing a parent for monitoring their child's activities. As long as I am responsible for my children, I will do what I can to monitor and protect them even if that means they give up a little privacy.
To those who are not, you really have no basis to be criticizing a parent for monitoring their child's activities. As long as I am responsible for my children, I will do what I can to monitor and protect them even if that means they give up a little privacy.
14 months ago
Jesus H, this product is abominable. True helicopter parent dystopian BS. Just let kids be kids!
Just saying.
14 months ago
I guess there's nothing like having your privacy violated to prepare you for adulthood.
14 months ago
Jesus H, this product is abominable. True helicopter parent dystopian BS. Just let kids be kids!
Because of thir limited life experiences, kids will do stupid things. Monitoring apps have place, but they are certainly no substitution for the large investment of parental time it takes to mold a child into an adult.
14 months ago
What kind of parents spies on their children text messages? That’s just wrong on so many levels ... boundaries people. if you don’t trust them enough to use their own phone privately. Maybe look yourself in the mirror and question what you did wrong rasing them.
14 months ago
Its already concerning enough when you have login credentials that have been explicitly exposed, but especially with the sensitivity of when it involves children’s information.
14 months ago
Jesus H, this product is abominable. True helicopter parent dystopian BS. Just let kids be kids!
What you mean take their phones away totally and let them grow up, as children have done for the past couple of million years as well rounded, normal human beings, without worrying, and staying up and night due to what someone may say about them, or needing to broadcast their every action to social media for their friends to see?
Yes. Let's take the dam phones away and let them grow up as well adjusted people before the curse of the mobile phone it thrust into their lives.
[ Read All Comments ]
In iOS 13, Apple has extended the system's built-in screenshot feature to include the ability to save a full web page as a multi-page PDF.
Don't expect this option to appear when...
For this week's giveaway, we've teamed up with Twelve South to offer MacRumors readers a chance to win a prize pack that includes a BookBook vol. 2 for iPad Pro, an AirFly, and a set of...
O2 has became the latest network carrier in the United Kingdom to offer the cellular version of the Apple Watch Series 4. iPhone users can now order the LTE-enabled smartwatch through the O2 website,...
Unsolicited phone calls can become a regular annoyance and even a cause of stress for many smartphone users these days. Thankfully, Apple provides a feature in iOS 13 that can automatically silence...
The Iconfactory today announced it has released a significant update to its popular third-party Twitter client Twitterrific for iPhone and iPad. The latest version of the app contains over 50 new...
Apple yesterday released a new update for Safari Technology Preview, the experimental browser Apple first introduced three years ago in March 2016. Apple designed the Safari Technology Preview to...
Amazon and B&H Photo are discounting the latest versions of Apple's iPad Air this week, with each configuration of the tablet receiving a new all-time-low price tag. Amazon offers the largest...
Spotify today announced a new version of the "Your Library" tab in its mobile apps for iOS and Android, which is "designed to get you to the content you want faster." This update is...
