Writing in a blog post, Pen Test Partners also said the flaw meant that users’ precise location data, as well as personal information and private chats were leaked. The firm went on to explain that “the risk of personal data leakage seems more likely to be exploited and give reward to an attacker” than locking someone in their device.
Pen Test Partners first learned of the flaw in April 2020, and, after contacting Qiui with the problem, received assurances that it would be fixed. On June 11, an updated version of the Qiui Cellmate app was uploaded to app stores, which “mostly resolved issues” by forcing any lock requests to be authenticated.
Right wing protesters have invaded the Capitol building following a Trump rally. Four people have died, while officers have been caught taking selfies with rioters