TLDR InfoSec · ATTACKS & VULNERABILITIES
SECURITY FLAWS IN FREEDOM CHAT APP EXPOSED USERS' PHONE NUMBERS AND PINS
Summary from the TLDR InfoSec newsletter
Two major flaws in Freedom Chat have been discovered: one allowed attackers to enumerate nearly 2,000 users' phone numbers by mass-guessing them against the app's servers, and another leaked users' PIN codes to everyone in the default public channel via backend responses. Freedom Chat reset all PINs, tightened rate limiting, removed exposed numbers, and shipped an updated version. This is founder Tanner Haas' second messaging app to face serious security issues.