Color ‘hack’ allows users to spy on anyone from anywhere

By Andrew Couts March 29, 2011

color-photo-sharing-app — Image used with permission by copyright holder

The problems with the highly publicized new iOS and Android photo-sharing app Color continue to mount. According to Forbes, the app has an easily exploitable feature that makes it simple for tech-savvy users to view all the photos of anyone who uses the app.

That’s not to say Color is known for its tight privacy settings — in fact, the exact opposite is true. When a user takes a photo with Color, the photo is automatically uploaded to the Color servers. Then — and this is what makes the app so notable — anyone within a set perimeter of where that photo was taken can see that picture, along with the pictures of any other Color user who happens to be snapping off shots in that particular location.

Right now, that perimeter is set to 150 feet. But because of complaints by early adopters that the app is worthless unless used within the vicinity of other Color users, the company says it plans to implement a sliding scale to determine the range in which photo streams can be shared, based on population density.

The Color hack, first noted in a Twitter post by security researcher an Veracode chief technology officer Chris Wysopal last Thursday, can be carried out with “trivial geolocation spoofing.” In other words, you trick the app to think you’re actually somewhere else, and it will display the photos of users in that area.

Wysopal reportedly tried out his location spoof this past weekend using a jailbroken iPad and the (unauthorized) app FakeLocation. Sure enough, it worked exactly as he expected.

“This only took about five minutes to download the FakeLocation app and try a few locations where I figured there would be early adopters who like trying out the latest apps,” Wysopal told Forbes in a email. “No hacking involved.”

Color maintains that all pictures taken using the app are public, anyway, and so the vulnerability in its app is negligible. Still, the whole thing makes us feel a little bit out in the open.

Check out our hands-on review of Color here.

Editors' Recommendations

Topics

Former Digital Trends Contributor

Features Editor for Digital Trends, Andrew Couts covers a wide swath of consumer technology topics, with particular focus on…

Mobile

This flash sale gets you a refurbished iPhone from just $126

iPhone 13 Pro in blue.

If you've always wanted to buy an iPhone and you don't mind getting a refurbished one to save on costs, then you should check out the offers in the iPhone Extravaganza of Amazon's Woot. You can get a refurbished iPhone for as low as $126 in this ongoing sale, but even if it's meant to last for a few more weeks, it's highly recommended that you make your purchase as soon as possible because stocks are in danger of running out. You don't have to worry about these refurbished iPhone deals -- they may show show physical wear-and-tear, but they'll be in full working condition. They're also unlocked, so you can choose the carrier that you'll sign up with for these iPhones.

What to buy in Woot's iPhone Extravaganza

Mobile

How to get new emojis on your iPhone or Android device

Emoji reactions on Google Messages running on OnePlus 11.

Text messaging has quickly become the default form of communication on smartphones. Sure, you can give your buddy a call to update them on your plans for the weekend, but it's not quite as quick and streamlined as a simple text. And combined with the ever-growing library of emojis available on iPhone and Android, it's easier than ever to ensure your tone and true meaning are received loud and clear by your recipient.

Mobile

The 10 best apps for a second phone number in 2024

OnePlus 5 soft gold with the phone app open.

Having a second phone number can be handy for a variety of reasons. Perhaps you want to separate your business and personal calls, or you want a junk second number that you can use to sign up for services so you can avoid giving out your personal number to so many places. That's particularly importance with the frequency of annoying spam calls and messages that can pile up when your phone number is made public. You might also want a second number to use in situations where you want to be able to contact people occasionally but you don't necessarily want them to be able to reach your personal device directly, like when internet dating or using an app like AirBnB. Whatever the reason, there are many situations where having a number that you can give out which you can make use of but isn't directly tied to your personal life like your main phone number is can be important for safety and security.

While you could get a second SIM card (or even an eSIM), an easier option for casual use is to use an app that lets you set up a second phone line. Whether you're after an Android app or an iPhone app, you'll find plenty of options to get a second phone line, including some which are free to use. We've hunted down some of the best options for apps that will give you a second phone number for whatever reason you need it, and we're sharing them with you below.
Vyke