Clubhouse: the audio application only for invitations, best known for making lovers of everyone Elon Musk a Mark Zuckerberg—He has promised to implement new guarantees after suffering his second major profile security problem this month.
Sunday, a Clubhouse spokesman confirmed to Bloomberg that an unnamed user of the app had managed to siphon audio streams from “multiple rooms” and stream them to a third-party site owned by that user. This news came to light after security researcher Robert Porter he tweeted screenshots of the site in question. He noted that while the room scraper in this case did not appear to have any malice here, the exploitation was certainly available to “more nefarious actors.”
The Clubhouse team told Bloomberg that the user behind the audio scratch was “permanently banned” from the platform and was installing certain “safeguards” to prevent such room recordings from returning. to fall into the wrong hands. That said, the company declined to tell Bloomberg what those specific guarantees were.
This is not necessarily a good omen for people who might be concerned about the privacy of their Clubhouse chats. Of course, the account behind the project could be prohibited and this particular feat used to siphon audio may no longer work. The company still has to struggle with the 300 other open source projects is currently trying to take advantage of the platform. And that number is growing every day.
G / O Media may receive a commission
Not to mention that this story is happening just a week after the Stanford Internet Observatory dropped a report bombs which implies that some user data, including raw audio feeds, was processed with the help of the Shanghai-based boot agora, which had the ability to intercept and store audio. for their own purposes. Like the Trump administration thrown against TikTok taught to all, data stored on mainland Chinese soil are subject to certain national cybersecurity laws that rule that Chinese authorities can freely access such data if it is determined to be a threat to national security.
Considering how Clubhouse became a very successful thing in China, because the citizens had the impression that the app was out of reach of state surveillance, you can imagine why last week’s revelation could have had a creepy effect. And while Clubhouse, at the time, promised that it was “deeply committed to data protection and user privacy,” the latter security issue raises questions about how far that commitment goes.
We have contacted Clubhouse to inform us of the security incident this weekend and we will update here when we hear about it.