Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


Xeon

302 posts

Ultimate Geek
+1 received by user: 43


#224368 14-Nov-2017 22:31
Send private message

Hi,

 

The snake game at https://www.spark.co.nz/snake uses Facebook login and Firebase. With a small amount of code executed in the console you can extract the users table which includes the email, first/last name and profile picture of everyone who has played the game and signed in with Facebook. I presume the intention was that the users table would power the highscore board at the end of the game but having everyone's details public facing isn't great.

 

 


Create new topic

gzt

gzt
18684 posts

Uber Geek
+1 received by user: 7826

Lifetime subscriber

  #1901015 14-Nov-2017 22:45
Send private message

I doubt that was the intention. Probably unintentionally breaks Facebook's T&Cs as well if confirmed.



hio77
'That VDSL Cat'
13036 posts

Uber Geek
+1 received by user: 3896

ID Verified
Trusted
Lizard Networks
Subscriber

  #1901017 14-Nov-2017 22:46
Send private message

Mind DM'ing me a few examples, I'm not failure with the Firebase API in my tinkering..

 

 

 

I'll pass through to the relevant teams.





#include <std_disclaimer>

 

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have. 


Xeon

302 posts

Ultimate Geek
+1 received by user: 43


  #1901030 14-Nov-2017 23:02
Send private message

Spark called me and have disabled the game.




michaelmurfy
meow
13580 posts

Uber Geek
+1 received by user: 10912

Moderator
ID Verified
Trusted
Lifetime subscriber

  #1901032 14-Nov-2017 23:05
Send private message

Xeon:

 

Spark called me and have disabled the game.

 

That was very quick! Kudos to Spark for taking swift action.





Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.


hio77
'That VDSL Cat'
13036 posts

Uber Geek
+1 received by user: 3896

ID Verified
Trusted
Lizard Networks
Subscriber

  #1901033 14-Nov-2017 23:09
Send private message

Someone here was faster than myself, great to see the rapid action :)





#include <std_disclaimer>

 

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have. 


freitasm
BDFL - Memuneh
80654 posts

Uber Geek
+1 received by user: 41048

Administrator
ID Verified
Trusted
Geekzone
Lifetime subscriber

  #1902669 16-Nov-2017 11:39
Send private message

@Xeon you made the news (although with names being mentioned) on the NBR Spark pulls promo from Facebook following privacy breach.





Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies 

 

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

 


Create new topic








Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.