To reduce the risk to the customers of SinVR, we have obfuscated the details of the attack where possible.
It is not outside the realm of possibility that some users could be blackmailed with this information. As this is quite a lot of PII, not only could an attacker use this to perform social engineering attacks, but due to the nature of the application it is potentially quite embarrassing to have details like this leaked.
#Sinvr login pornbb download
The issue presented in this post will allow an attacker to download details (including names, email addresses and device (PC) names) for everyone with an account as well as download details (again including names, email addresses and device names) for those users that have paid for content using PayPal. Other vulnerabilities that do not directly impact users will be released soon but we’d like to give the developers of SinVR time to fix them should they wish. We tried emailing the addresses we could find, sending private messages to their (active) reddit account and reaching out via Twitter.ĭue to the nature of the issues found, we made the tough decision of bringing one of the issues to the attention of the public in order to warn users their data was not being protected adequately. Initially we planned on releasing this post after the vulnerabilities were fixed, however after several attempts we were not able to contact the company behind SinVR. Jumping on the bandwagon of hacking sex toys and teledildonics, Digital Interruption thought it was worth taking a look at the VR angle).ĭuring this research, we found a high risk vulnerability in the SinVR application that leaked customer information and several deviations from security best practice. Who knew that decompiling an application would be more interesting than virtual women? Honestly, it was a little underwhelming so instead my night was spent pulling it apart. When looking for other interesting VR applications, one kept coming up as recommended on sites such as reddit SinVR. Lack of Authentication Leaks Customer Details in SinVR - An Adult VR Applicationĭespite initial thoughts, pulling robots apart and killing zombies does eventually get boring so I decided to see what else could be done in Virtual Reality.
0 kommentar(er)
