Path uploads your entire address book — but a fix is coming soon

path

If you haven’t already downloaded the newest version of social network app Path, you should wait a little longer. While attempting to port Path 2 (as it’s called) to OS X, developer Arun Thampi discovered that the app automatically uploads users’ entire address book to Path’s servers. Fortunately, the company assures users taht a fix is on the way.

“Using the awesome mitmproxy tool which was featured on the front page of the Hacker News yesterday, I started to observe the various API calls made to Path’s servers from the iPhone app,” writes Thampi in a post on his awesomely-named blog, McLov.in. “It all seemed harmless enough until I observed a POST request to https://api.path.com/3/contacts/add. Upon inspecting closer, I noticed that my entire address book (including full names, emails and phone numbers) was being sent as a plist to Path.” (Emphasis his)

Dave Morin, co-founder and CEO of Path, quickly responded to Thampi’s discovery, in a comment on the blog damning blog post. He writes: “We actually think this is an important conversation and take this very seriously. We upload the address book to our servers in order to help the user find and connect to their friends and family on Path quickly and efficiently as well as to notify them when friends and family join Path. Nothing more.

“We believe that this type of friend finding & matching is important to the industry and that it is important that users clearly understand it, so we proactively rolled out an opt-in for this on our Android client a few weeks ago and are rolling out the opt-in for this in 2.0.6 of our iOS Client, pending App Store approval.”

While the response from Morin is all well and good — better than how most companies respond to such crises — a few problems remain. First, it should be noted that many apps upload user contacts. But that data is usually not stored as a text file, as it appears to have been stored on Path’s servers, which is much more vulnerable. Second, it’s unclear why Path didn’t make it explicit to iOS users that it would be accessing all address book data, as is the case with the Android version.

Users who are not content with Path’s fix can delete their account by contacting the company at: service@path.com.

Home Theater

Plex is the latest player to contemplate the subscription streaming game

With massive reach thanks to its client app being supported virtually every media device on the planet, Plex is now looking at the future of its media curation platform. A future that may include free and subscription services.
Mobile

Text up a storm with the best messaging apps for iOS and Android

These days, most people tend to favor digital messages over phone calls. We have the best messaging apps that allow you to share photos and documents, send text messages, and more with end-to-end encryption.
Computing

Our favorite Windows apps will help you get the most out of your new PC

Not sure what apps you should be downloading for your newfangled Windows device? Here are the best Windows apps, whether you need something to speed up your machine or access your Netflix queue. Check out our categories and favorite picks.
Mobile

Keep up-to-date with the best news apps on iPhone and Android

Are the days of traditional newspapers and broadcast news dwindling? With apps this good, maybe. Catch up on the latest headlines on any platform with the best news apps on iOS and Android.
Mobile

Here’s how to download podcasts and listen to them on Android or iOS

Podcasts have become a cultural staple. Here's how to download podcasts and listen to them on your Android or iOS device, and which apps to use if you're looking to get the most out of the format.
Business

Apple banned from distributing some iPhone models in Germany

Apple is following the FTC's lead and has sued Qualcomm for a massive $1 billion in the U.S., $145 million in China, and also in the U.K., claiming the company charged onerous royalties for its patented tech.
Emerging Tech

Awesome Tech You Can’t Buy Yet: camera with A.I. director, robot arm assistant

Check out our roundup of the best new crowdfunding projects and product announcements that hit the web this week. You may not be able to buy this stuff yet, but it sure is fun to gawk!
Mobile

Windows 10 Mobile is dead: Switch to iOS or Android, Microsoft says

A Microsoft support page detailed the company's plans to end support for Windows 10 Mobile in less than a year. Users with devices powered by the platform are suggested to switch to iOS or Android devices.
Mobile

How to use iOS 12’s Passwords and Accounts tool to autofill passwords

Keeping track of all your passwords and accounts can be a real chore. If you use an iPhone with iOS 12, then you don't have to. Here's how to use iOS 12's own password manager to autofill passwords.
Computing

What is fixed wireless 5G? Here’s everything you need to know

Here's fixed wireless 5G explained! Learn what you need to know about this effective new wireless technology, when it's available, how much it costs, and more. If you're thinking about 5G, this guide can help!
Mobile

Razer’s Wireless Charger will turn your desk into gamer heaven

The Razer Wireless Charger adds colorful flair to your desk or bedside table. It works with any phone that supports Qi wireless charging -- with some quirks -- but is it worth the high price tag? We take a look.
Gaming

Xbox app lets you access your console while away from home. Here's how

Microsoft's Xbox allows you to access your profile information and launch media content directly from your mobile device. Check out our quick guide on how to connect your smartphone to an Xbox One.
Wearables

The best Apple Watch bands and straps to stylize your timepiece

If you have an Apple Watch, you know how easy it is to take off the strap it came with, so why not buy yourself another one? Here, we've gathered the best Apple Watch bands we've seen so far. There's something for everyone.
Mobile

How to choose an iPad in 2019: A practical guide to Apple’s tablets

Selecting an iPad from Apple's lineup can be intimidating, but it doesn't have to be. Our comprehensive guide should put the numbers and specs in practical, easy-to-understand terms. Find your ideal iPad with the help of our guide.