A French security researcher has accused Koo, the Indian version of Twitter, of exposing users’ personal data.
Robert Baptiste, who goes by the pseudonym Elliot Alderson (@fs0c131y on Twitter), said that he spent around half-an-hour on Koo on the request of a few Twitter users. He found that the microblogging site was exposing sensitive information of its users, such as email address, names, gender, date of birth, marital status, etc.
Baptiste also posted a few tweets to inform users of these findings. Using screenshots, Baptiste told his followers that it was fairly easy for him to access personal information of users on Koo.
Also read:
How Koo app stacks up against Twitter
He tweeted with a screenshot of his findings: "You asked so I did it. I spent 30 min on this new Koo app. The app is leaking of the personal data of his users: email, dob, name, marital status, gender, ... (sic)"
You asked so I did it. I spent 30 min on this new Koo app. The app is leaking of the personal data of his users: email, dob, name, marital status, gender, ... https://t.co/87Et18MrOg pic.twitter.com/qzrXeFBW0L
— Elliot Alderson (@fs0c131y) February 10, 2021
In another tweet, he posted another screenshot, which suggested that Koo had a domain registered in the US.