A young developer, poking around the code of Kylie Jenner‘s new website, was able to access the full names and email addresses of over 600,000 users.
In addition to personal info, Alaxic Smith, 19, was able to create, alter and destroy user photos, videos and more.
Smith, who exposed the website’s vulnerabilities for the fun of it, says he’s not seeking to release any of the info, rather he’s just giving Kylie a “heads up.”
I’ll admit I downloaded Kylie’s app just to check it out. I also checked out the website, and just like most developers, I decided to take a look around to see what was powering the site. After I started digging a little bit deeper, I found a JavaScript file namedkylie.min.75c4ceae105ad8689f88270895e77cb0_gz.js. Just for fun, I decided to un-minify this file to see what kind of data they were collecting from users and other metrics they may be tracking. I saw several calls to an API, which of course made sense. I popped one of those endpoints into my browser, and got an error just liked I expected. h/t techcrunch
If I were Kylie, I’d be expecting a nice refund from the developers! And if I was a Kylie subscriber, I’d be expecting a nice refund from her!
SEVIER COUNTY, UT. (THECOUNT) -- Christopher V. Andersen, 64, of Stateline, Nevada, a U.S. Army…
WILLIAMS TOWNSHIP, PA. (THECOUNT) -- Nathan D. Giamoni, 48, of Phillipsburg, New Jersey, was killed…
LEHI, UT. (THECOUNT) -- Chandler Hendry, 27, also fondly known as "Chuck," a social media…
OJAI, CA. (THECOUNT) -- Jackie, the beloved bald eagle presumed to be one half of…
COLORADO, CO. (THECOUNT) -- Tyler Boebert, 21, the adult son of U.S. Rep. Lauren Boebert,…
MADISON, TN. (THECOUNT) -- Stephen Slater, 74, and his stepson, John D. Norman, 49, died…