Venmo transaction scraped in privacy warning to consumers
Tuesday, June 18, 2019
Ilia Kolochenko, founder and CEO of ImmuniWeb, said that this sort of transparency may often be used against the legitimate interests of end-users.
“Probably, very few of us wish to share all their payment transactions with the rest of the world even if we have nothing to hide,” Kolochenko said. “Venmo should explicitly and conspicuously notify all its users that their transactions are accessible by everyone unless they update their settings.”
Kolochenko added that developer’s API should be provided only to vetoed, properly verified third-parties within a scope of a binding legal agreement capable of protecting users’ privacy regardless of technical flaws one may discover now or in the future.
In addition he a that anti-scraping functionality should be implemented and frequently tested. Read Full Article
Infosecurity Magazine: Seven Million Venmo Transactions Published on GitHub
Infosecurity Magazine: Canadian City Fell Prey to a $375K Phish