Incident: Android Apps Leak Unencrypted Data, Privacy Breach Concerns.

Published Date: 2014-09-08

Postmortem Analysis
Timeline 1. The software failure incident where University of New Haven researchers found Android apps leaking unencrypted data over the network happened in September 2014 as per the article published on September 8, 2014 [30320].
System 1. Android apps including Instagram, Vine, Nimbuzz, OoVoo, Voxer, Tango, MessageMe, TextMe, OKCupid, Kik, MeetMe, Grindr, HeyWire, Hike, MyChat, WeChat, GroupMe, Whisper, Line, Words with Friends, and others [30320].
Responsible Organization 1. Android apps such as Instagram, Vine, Nimbuzz, OoVoo, Voxer, Tango, MessageMe, TextMe, OKCupid, Kik, MeetMe, Grindr, HeyWire, Hike, MyChat, WeChat, GroupMe, Whisper, Line, Words with Friends, and others were responsible for leaking unencrypted data over the network and storing sensitive information insecurely [30320].
Impacted Organization 1. Users of Android apps such as Instagram, Vine, Nimbuzz, OoVoo, Voxer, Tango, MessageMe, TextMe, OKCupid, Kik, MeetMe, Grindr, HeyWire, Hike, MyChat, WeChat, GroupMe, Whisper, Line, Words with Friends, and others [30320].
Software Causes 1. Lack of encryption in various Android apps leading to data leakage over the network, including storing images and chat messages in unencrypted form [30320]. 2. Storing passwords in plaintext on the device by apps like TextMe and Nimbuzz [30320]. 3. Sending passwords in plaintext by some apps [30320]. 4. Storing screenshots of app usage that the user didn't take by TextPlus [30320]. 5. Storing unencrypted chat logs on the device by multiple apps like Vine, TextPlus, Nimbuzz, etc. [30320]. 6. Storing unencrypted image and video files on publicly accessible servers by apps like Instagram, OoVoo, Grindr, HeyWire, and TextPlus [30320]. 7. Leaving videos on a server unencrypted by Tango and MessageMe [30320]. 8. Sending various forms of data unencrypted over the network by multiple apps like Instagram, OKCupid, OoVoo, Tango, etc. [30320].
Non-software Causes 1. Lack of encryption in data transmission and storage on publicly accessible servers [30320]
Impacts 1. The software failure incident led to the leakage of unencrypted data over the network, including images, chat messages, and files stored on publicly accessible servers by various Android apps like Instagram, Vine, Nimbuzz, OoVoo, and others [30320]. 2. The incident exposed the lack of security measures in place, with passwords being sent in plaintext, images and videos stored unencrypted on websites, and chat logs stored in plaintext on devices [30320]. 3. The failure resulted in a breach of user privacy, as private messages, pictures, and location maps sent through these apps were not adequately protected, potentially exposing sensitive information to unauthorized access [30320]. 4. The incident highlighted the risk of financial and personal harm due to the exposure of unencrypted data in the current climate of government snooping and identity theft [30320]. 5. Following the incident, some companies like Instagram announced plans to enhance security measures by moving to encrypted communications for images through HTTPS, indicating a response to the identified vulnerabilities [30320].
Preventions 1. Implementing encryption for data transmission and storage within the apps could have prevented the leakage of unencrypted data over the network [30320]. 2. Conducting regular security audits and testing to identify and address vulnerabilities in the apps could have helped prevent the data leakage issues [30320]. 3. Ensuring that sensitive information such as passwords and chat logs are stored in an encrypted format on the device could have mitigated the risks of data exposure [30320]. 4. Providing user education on privacy and security best practices within the apps to raise awareness among users about potential risks and how to protect their data [30320].
Fixes 1. Implementing encrypted communications for images by moving to HTTPS, as Instagram is doing [30320]. 2. Moving to encrypted transfer for sensitive data, such as sketches, as Kik has done [30320]. 3. Regularly monitoring and reviewing security issues, making ongoing changes as necessary to protect users, as Grindr mentioned [30320].
References 1. University of New Haven researchers [30320]

Software Taxonomy of Faults

Category Option Rationale
Recurring multiple_organization (a) The software failure incident related to unencrypted data leakage has happened again at multiple organizations. The University of New Haven researchers found similar privacy problems in various Android apps such as Instagram, Vine, Nimbuzz, OoVoo, Voxer, Tango, MessageMe, TextMe, Grindr, HeyWire, Hike, MyChat, WeChat, GroupMe, Whisper, Line, and Zynga's Words with Friends [30320]. These apps were found to store sensitive data in unencrypted form on publicly accessible servers, send passwords in plaintext, and store chat logs in plaintext on the device, compromising user privacy and security.
Phase (Design/Operation) design, operation (a) The software failure incident related to the design phase can be seen in the article where University of New Haven researchers found a host of Android apps leaking unencrypted data over the network and storing files on publicly accessible servers. The issues identified included storing images and videos in unencrypted form on websites, storing chat logs in plaintext on the device, sending passwords in plaintext, and storing screenshots of app usage that the user didn't take [30320]. (b) The software failure incident related to the operation phase can be observed in the same article where the researchers found that several apps were sending text, images, location maps, music, and video unencrypted over the network. Additionally, chat logs were stored unencrypted on the device for various apps. This indicates a failure in the operation or misuse of the system leading to data leakage and privacy concerns [30320].
Boundary (Internal/External) within_system, outside_system The software failure incident reported in the articles can be categorized as both within_system and outside_system: (a) within_system: The failure is within the system as the Android apps themselves were found to have various data-leakage problems such as storing images and videos in unencrypted form on websites, storing chat logs in plaintext on the device, sending passwords in plaintext, and storing screenshots of app usage that the user didn't take [30320]. (b) outside_system: The failure is also influenced by factors outside the system, such as the lack of encryption and security measures in the network communications and servers where the data was being stored. This external factor contributed to the leakage of sensitive information from the apps to publicly accessible servers [30320].
Nature (Human/Non-human) non-human_actions, human_actions (a) The software failure incident occurring due to non-human actions: The software failure incident in this case was primarily due to non-human actions such as the lack of encryption in various Android apps like Instagram, Vine, Nimbuzz, OoVoo, and others. The apps were found to leak unencrypted data over the network, store files on publicly accessible servers, and have various privacy issues like storing images and videos in unencrypted form, sending passwords in plaintext, and storing chat logs in plaintext on the device [30320]. (b) The software failure incident occurring due to human actions: The failure can also be attributed to human actions, particularly the lack of proper security measures and encryption implementation by the developers of the Android apps. The researchers highlighted that security was an afterthought in these apps, indicating a lack of proactive measures taken by the developers to ensure user data privacy and security [30320].
Dimension (Hardware/Software) software (a) The software failure incident occurring due to hardware: - The article does not mention any specific software failure incident occurring due to contributing factors originating in hardware. Therefore, there is no information available regarding a hardware-related software failure incident in the provided article. (b) The software failure incident occurring due to software: - The software failure incident mentioned in the article is primarily due to contributing factors originating in software. The University of New Haven researchers discovered data-leakage problems in various Android apps like Instagram, Vine, Nimbuzz, OoVoo, Voxer, and others. These problems included storing data in unencrypted form, sending passwords in plaintext, storing chat logs in plaintext on the device, and other privacy issues related to the software design and implementation [30320].
Objective (Malicious/Non-malicious) non-malicious (a) The software failure incident reported in Article 30320 is non-malicious. The failure was due to contributing factors introduced without the intent to harm the system. The University of New Haven researchers discovered a host of data-leakage problems in various Android apps, including storing data in unencrypted form on public servers, sending passwords in plaintext, and storing chat logs in plaintext on the device. The incident was a result of poor security practices and lack of encryption in the apps, rather than a deliberate attempt to harm the system [30320].
Intent (Poor/Accidental Decisions) poor_decisions (a) The software failure incident reported in the articles is primarily related to poor decisions made by the developers and companies behind the Android apps. The researchers from the University of New Haven uncovered a host of data-leakage problems in various popular apps like Instagram, Vine, Nimbuzz, OoVoo, Voxer, and others. These problems included storing images and videos in unencrypted form on public servers, storing chat logs in plaintext on devices, sending passwords in plaintext, and other privacy issues. The researchers highlighted that security was treated as an afterthought by these companies, indicating poor decision-making in prioritizing user data protection and privacy. The apps were found to be sending sensitive information unencrypted over the network, storing passwords in plaintext, and leaving videos and chat logs exposed on servers. These poor decisions regarding data security and encryption led to a significant software failure incident that compromised the privacy and security of millions of users [30320].
Capability (Incompetence/Accidental) development_incompetence (a) The software failure incident related to development incompetence is evident in the findings of the University of New Haven researchers regarding various Android apps leaking unencrypted data over the network. The researchers highlighted issues such as storing images and videos in unencrypted form on public servers, storing chat logs in plaintext on devices, sending passwords in plaintext, and storing screenshots of app usage without user consent [30320]. (b) The software failure incident related to accidental factors is demonstrated by the lack of encryption and secure data handling practices in popular Android apps like Instagram, Vine, Nimbuzz, OoVoo, and others. The researchers discovered that sensitive data like text, images, location maps, music, and video were being sent unencrypted over the network, leading to potential privacy breaches for the estimated 968 million users of these apps [30320].
Duration temporary The software failure incident reported in Article 30320 can be categorized as a temporary failure. The incident involved various Android apps leaking unencrypted data over the network, storing files on publicly accessible servers, and having privacy issues with plaintext storage of sensitive information. The researchers from the University of New Haven identified these vulnerabilities and highlighted them in their findings. The companies, such as Instagram and Kik, mentioned in the article, responded by taking steps to address the security concerns raised. This indicates that the failure was temporary and could potentially be mitigated by implementing encryption and other security measures [30320].
Behaviour omission, value, other (a) crash: The articles do not mention any specific software crashes where the system loses state and fails to perform its intended functions. (b) omission: The software failure incident related to omission is evident in the behavior of the Android apps mentioned in the article. For example, storing images and videos in unencrypted form on websites, storing chat logs in plaintext on the device, sending passwords in plaintext, and storing screenshots of app usage that the user didn't take are instances of the system omitting to perform its intended functions correctly [30320]. (c) timing: There is no indication in the articles that the software failure incident was related to timing issues where the system performed its intended functions but at incorrect times. (d) value: The software failure incident related to value is observed in the system performing its intended functions incorrectly. This is evident in the apps sending text, images, location maps, music, and video unencrypted over the network, as well as storing chat logs unencrypted on the device [30320]. (e) byzantine: The articles do not mention any behavior of the software failure incident that aligns with a byzantine failure, where the system behaves erroneously with inconsistent responses and interactions. (f) other: The other behavior observed in the software failure incident is the lack of proper security measures and encryption in the apps, leading to significant privacy and data leakage issues. This behavior can be categorized as a failure due to inadequate security measures and data protection protocols [30320].

IoT System Layer

Layer Option Rationale
Perception None None
Communication None None
Application None None

Other Details

Category Option Rationale
Consequence property, theoretical_consequence (d) property: People's material goods, money, or data was impacted due to the software failure The software failure incident mentioned in the articles led to significant property-related consequences. Specifically, the incident involved the leakage of unencrypted data, including images, chat messages, and files, from various Android apps like Instagram, Vine, Nimbuzz, OoVoo, and others. This data leakage exposed sensitive information to potential unauthorized access and misuse, potentially putting users' personal data and privacy at risk [30320].
Domain information (a) The software failure incident reported in the articles is related to the industry of information. The University of New Haven researchers discovered data-leakage problems in various Android apps, including Instagram, Vine, Nimbuzz, OoVoo, Voxer, and others, which involved leaking unencrypted data over the network, storing files on publicly accessible servers, and sending passwords in plaintext [Article 30320]. This incident highlights the importance of data security and privacy in the information industry.

Sources

Back to List