• Latest
  • Trending
  • All
  • News
  • Business
  • Politics
  • Science
  • World
  • Lifestyle
  • Tech
Daycare monitoring apps are ‘dangerously insecure,’ report finds

Daycare monitoring apps are ‘dangerously insecure,’ report finds

June 21, 2022
Pfizer says tweaked COVID-19 shots boost omicron protection

Pfizer says tweaked COVID-19 shots boost omicron protection

June 25, 2022
Biden’s mission in Europe: Shore up alliance against Russia

Biden’s mission in Europe: Shore up alliance against Russia

June 25, 2022
Biden signs bipartisan gun control bill into law, takes swipe at Supreme Court

Biden signs bipartisan gun control bill into law, takes swipe at Supreme Court

June 25, 2022
‘Mean Girls’ star Daniel Franzese met Danny DeVito after famous movie line

‘Mean Girls’ star Daniel Franzese met Danny DeVito after famous movie line

June 25, 2022
‘Gossip Girl’ Season 2: Release Date, Cast, Trailer, News

‘Gossip Girl’ Season 2: Release Date, Cast, Trailer, News

June 25, 2022
Biden signs gun safety bill, calls SCOTUS abortion ruling ‘shocking’

Biden signs gun safety bill, calls SCOTUS abortion ruling ‘shocking’

June 25, 2022
Ex-Minneapolis officer who killed 911 caller will be released

Ex-Minneapolis officer who killed 911 caller will be released

June 25, 2022
16 great movies leaving Netflix, Hulu, and HBO Max at the end of June 2022

16 great movies leaving Netflix, Hulu, and HBO Max at the end of June 2022

June 25, 2022
What’s next for a Supreme Court ever-more divided

What’s next for a Supreme Court ever-more divided

June 25, 2022
‘Wild Swimming’ in Restricted Beijing Offers Refreshing Break From Rules

‘Wild Swimming’ in Restricted Beijing Offers Refreshing Break From Rules

June 25, 2022
‘God willing, it’s going to save a lot of lives’

‘God willing, it’s going to save a lot of lives’

June 25, 2022
At Least Two Dead in Pride Month Attack on Gay Bar in Oslo, Norway

At Least Two Dead in Pride Month Attack on Gay Bar in Oslo, Norway

June 25, 2022
DNYUZ
  • Home
  • News
    • U.S.
    • World
    • Politics
    • Opinion
    • Business
    • Crime
    • Education
    • Environment
    • Science
  • Entertainment
    • Culture
    • Music
    • Movie
    • Television
    • Theater
    • Gaming
    • Sports
  • Tech
    • Apps
    • Autos
    • Gear
    • Mobile
    • Startup
  • Lifestyle
    • Arts
    • Fashion
    • Food
    • Health
    • Travel
No Result
View All Result
DNYUZ
No Result
View All Result
Home Tech Apps

Daycare monitoring apps are ‘dangerously insecure,’ report finds

June 21, 2022
in Apps, News, Tech
Daycare monitoring apps are ‘dangerously insecure,’ report finds
502
SHARES
1.4k
VIEWS
Share on FacebookShare on Twitter

Popular daycare and childcare communications apps are “dangerously insecure,” according to newly published research, exposing children and parents to the risk of data breaches with lax security settings and permissive or outright misleading privacy policies.

The details come from a new report from the Electronic Frontier Foundation (EFF), which published the results of a months-long research project on Tuesday.

The research, conducted Alexis Hancock, EFF’s director of engineering for the Certbot project, found that popular apps like Brightwheel, HiMama, and Tadpoles lacked two-factor authentication (2FA), meaning that any malicious actor who was able to obtain a user’s password could log in remotely. Further analysis of application code revealed a number of other privacy-compromising features, including data sharing with Facebook and other third parties, that were not disclosed in privacy policies.

After being contacted by the EFF, Brightwheel implemented 2FA and claims to be ”the first in the early education industry to add this extra layer of security.” HiMama reportedly said that it would pass on the feature request to its design team but has not yet implemented the additional security feature. It is not known whether Tadpoles has an intention to implement 2FA.

Hancock started researching the privacy and security settings of various daycare apps after being asked to download Brightwheel when enrolling her two-year-old daughter in daycare for the first time. Hancock told The Verge that she initially enjoyed using the app to receive updates about her daughter but became concerned about a lack of security given the potentially sensitive nature of the information.

“At first there was a lot of comfort in seeing [my daughter] during the day, with the images they were sending me” Hancock said. “Then I was looking at the app like, huh, I don’t really see security controls I would normally see in most services like this.”

With a background in software development, Hancock was able to use a range of tools like Apktool and mitmproxy to analyze the application code and investigate network calls being made by each of the childcare apps, and she was surprised to find a number of easily fixable errors.

“I found trackers in a few apps. I found weak security policy, weak password policies,” Hancock said. “I found vulnerabilities that were very easy to fix as I went through some of the applications. Really just low hanging fruit.”

The EFF’s new report is not the first to draw attention to serious flaws in applications trusted to keep children safe. For years, researchers have raised concerns over security weaknesses in baby monitor apps and associated hardware, with some of these weaknesses exploited by hackers to send messages to children. More broadly, a survey of 1,000 apps likely to be used by children found that more than two-thirds were sending personal information to the advertising industry

Hancock hopes that reporting on these privacy and security flaws could lead to better regulation of child-focused apps — but nonetheless, the findings have left her concerned.

“It made me feel, as a parent, even more afraid for my child,” she said. “I don’t want her to have a data breach before she’s five. I’m doing all I can to make sure that doesn’t happen.”

The post Daycare monitoring apps are ‘dangerously insecure,’ report finds appeared first on The Verge.

Tags: CybersecurityPolicyTech
Share201Tweet126Share

Trending Posts

Two months of waiting, and finally a Supreme Court ruling

Two months of waiting, and finally a Supreme Court ruling

June 25, 2022
Abortion ruling thrusts companies into divisive arena

Abortion ruling thrusts companies into divisive arena

June 25, 2022
Here’s what abortion rights in other nations look like.

Here’s what abortion rights in other nations look like.

June 25, 2022
Mayor of Embattled Southern Ukrainian City Urges All Residents to Leave

Mayor of Embattled Southern Ukrainian City Urges All Residents to Leave

June 25, 2022
The brewing fight to keep abortion info online

The brewing fight to keep abortion info online

June 25, 2022

Copyright © 2022.

Site Navigation

  • About
  • Advertise
  • Privacy & Policy
  • Contact

Follow Us

No Result
View All Result
  • Home
  • News
    • U.S.
    • World
    • Politics
    • Opinion
    • Business
    • Crime
    • Education
    • Environment
    • Science
  • Entertainment
    • Culture
    • Gaming
    • Music
    • Movie
    • Sports
    • Television
    • Theater
  • Tech
    • Apps
    • Autos
    • Gear
    • Mobile
    • Startup
  • Lifestyle
    • Arts
    • Fashion
    • Food
    • Health
    • Travel

Copyright © 2022.