Gibson Security has had its numerous security disclosures about potential Snapchat exploits go ignored for months. Now, after publishing Snapchat’s API and two major exploits, the company finally has people’s attention. The two exploits allow hackers to match phone numbers to Snapchat accounts and create massive numbers of bogus accounts.
Hackers have made sure that popular photo sharing app Snapchat got a hearty lump of coal for Christmas. After having its security disclosure go ignored since August, Gibson Security has published Snapchat’s previously undocumented developer hooks (API) and code for two exploits that allow mass matching of phone numbers with names and mass creation of bogus accounts.