Skip to main content

Color ‘hack’ allows users to spy on anyone from anywhere

color-photo-sharing-app
Image used with permission by copyright holder

The problems with the highly publicized new iOS and Android photo-sharing app Color continue to mount. According to Forbes, the app has an easily exploitable feature that makes it simple for tech-savvy users to view all the photos of anyone who uses the app.

That’s not to say Color is known for its tight privacy settings — in fact, the exact opposite is true. When a user takes a photo with Color, the photo is automatically uploaded to the Color servers. Then — and this is what makes the app so notable — anyone within a set perimeter of where that photo was taken can see that picture, along with the pictures of any other Color user who happens to be snapping off shots in that particular location.

Right now, that perimeter is set to 150 feet. But because of complaints by early adopters that the app is worthless unless used within the vicinity of other Color users, the company says it plans to implement a sliding scale to determine the range in which photo streams can be shared, based on population density.

The Color hack, first noted in a Twitter post by security researcher an Veracode chief technology officer Chris Wysopal last Thursday, can be carried out with “trivial geolocation spoofing.” In other words, you trick the app to think you’re actually somewhere else, and it will display the photos of users in that area.

Wysopal reportedly tried out his location spoof this past weekend using a jailbroken iPad and the (unauthorized) app FakeLocation. Sure enough, it worked exactly as he expected.

“This only took about five minutes to download the FakeLocation app and try a few locations where I figured there would be early adopters who like trying out the latest apps,” Wysopal told Forbes in a email. “No hacking involved.”

Color maintains that all pictures taken using the app are public, anyway, and so the vulnerability in its app is negligible. Still, the whole thing makes us feel a little bit out in the open.

Check out our hands-on review of Color here.

Editors' Recommendations

Andrew Couts
Former Digital Trends Contributor
Features Editor for Digital Trends, Andrew Couts covers a wide swath of consumer technology topics, with particular focus on…
How to get new emojis on your iPhone or Android device
Emoji reactions on Google Messages running on OnePlus 11.

Text messaging has quickly become the default form of communication on smartphones. Sure, you can give your buddy a call to update them on your plans for the weekend, but it's not quite as quick and streamlined as a simple text. And combined with the ever-growing library of emojis available on iPhone and Android, it's easier than ever to ensure your tone and true meaning are received loud and clear by your recipient.

Read more
The 10 best apps for a second phone number in 2024
OnePlus 5 soft gold with the phone app open.

Having a second phone number can be handy for a variety of reasons. Perhaps you want to separate your business and personal calls, or you want a junk second number that you can use to sign up for services so you can avoid giving out your personal number to so many places. That's particularly importance with the frequency of annoying spam calls and messages that can pile up when your phone number is made public. You might also want a second number to use in situations where you want to be able to contact people occasionally but you don't necessarily want them to be able to reach your personal device directly, like when internet dating or using an app like AirBnB. Whatever the reason, there are many situations where having a number that you can give out which you can make use of but isn't directly tied to your personal life like your main phone number is can be important for safety and security.

While you could get a second SIM card (or even an eSIM), an easier option for casual use is to use an app that lets you set up a second phone line. Whether you're after an Android app or an iPhone app, you'll find plenty of options to get a second phone line, including some which are free to use. We've hunted down some of the best options for apps that will give you a second phone number for whatever reason you need it, and we're sharing them with you below.
Vyke

Read more
8 iPhone browser apps you should use instead of Safari
iPhone browser apps

By default, the Safari web browser is available on every iPhone, including the iPhone 15 series. Nevertheless, several other web-browsing options can be found on the App Store, each with at least one unique feature that distinguishes it from the others. While some web browser apps like Google Chrome, DuckDuckGo, and Microsoft Edge might already be familiar to you, others such as Aloha and Arc Search may not be.

If you're looking for a Safari alternative, here are our favorite iPhone browser apps you should consider using instead.
Google Chrome

Read more