[liberationtech] Tango.me Hacked by the SEA

[hadi]

Libtech,


My brother from Syria just asked me to chat using tango. As you know it
has been hacked by the SEA along with Viber and other apps. Can you
please make sure to spread the word about the insecurities of those
applications to everyone you know? It seems that no one is getting the
message.

All the best,
Hadi


On 23 تموز, 2013 ص 09:44, IWPR IWPR wrote:
> Tango hack comes after 2 days of the hack of Truecaller and download of
> the full data.
> http://www.sea.sy/article/id/1979/en
> 
> The Syrian Electronic Army hacked the Truecaller (The global phone
> directory) website and database
> 
> The databases content a handred of millions of  phone numbers and its owners
> 
> in addition of millions of Facebook/Twitter/Linkedin/Gmail accounts 
> 
> The databases was dumped and downloaded successfully
> 
> A list of the databases that been downloaded :
> 
> truecaller_ugc: 459GB
> 
> truecaller : 100GB
> 
> truecaller_profiles : 4GB
> 
> truecaller_api : 123KB
> 
> truecaller_PushMe: 2.2KB
> 
> tc_admin : 7MB
> 
> tc_www: 70MB
> 
> Much of the information that were stored the in the databases has
> beendelivered to the Syrian government
> 
> 
> Best
> 
> Bahaa
> 
> 
> 
> On Mon, Jul 22, 2013 at 6:46 PM, Collin Anderson
> <collin at averysmallbird.com <mailto:collin at averysmallbird.com>> wrote:
> 
>     Libtech,
> 
>     Regrettably, it seems to have slipped the attention of most media,
>     but the Syrian Electronic Army appears to have managed to compromise
>     the network of the popular communications service Tango. 
> 
>     They claim to have retrieved 10 Tb of backup data, so one might
>     imagine there is a lot of useful data, perhaps call records, account
>     information and source code, that might be used against those who
>     are not particularly friendly with the Assad regime. Case in point,
>     Tango seems to have experienced an increase in Iranian activist
>     users, since it endured the government's connection throttling
>     during the election better than most.
> 
>     Tango's only reply was that it experienced "brief, unauthorized
>     access to some data," but exfiltrating multiple terabytes of data is
>     no quick task. The question of replacing Skype on this list is
>     pretty tired, but at least we can agree on not not giving vital data
>     to a company that responds so irresponsibly to being hacked. 
> 
>     http://www.sea.sy/article/id/1981/en
> 
>     Cordially,
>     Collin
>     -- 
>     *Collin David Anderson*
>     averysmallbird.com <http://averysmallbird.com> | @cda | Washington, D.C.
> 
>     --
>     Too many emails? Unsubscribe, change to digest, or change password
>     by emailing moderator at companys at stanford.edu
>     <mailto:companys at stanford.edu> or changing your settings at
>     https://mailman.stanford.edu/mailman/listinfo/liberationtech
> 
> 
> 
> 
> --
> Too many emails? Unsubscribe, change to digest, or change password by emailing moderator at companys at stanford.edu or changing your settings at https://mailman.stanford.edu/mailman/listinfo/liberationtech
>