{"id":20315,"date":"2022-12-01T20:06:56","date_gmt":"2022-12-01T20:06:56","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2022\/12\/01\/hyped-twitter-alternative-hive-shutters-servers-to-fix-security-issues\/"},"modified":"2022-12-01T20:06:56","modified_gmt":"2022-12-01T20:06:56","slug":"hyped-twitter-alternative-hive-shutters-servers-to-fix-security-issues","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2022\/12\/01\/hyped-twitter-alternative-hive-shutters-servers-to-fix-security-issues\/","title":{"rendered":"Hyped Twitter alternative Hive shutters servers to fix security issues"},"content":{"rendered":"

<\/a>\n
<\/p>\n

\n

Following Elon Musk\u2019s Twitter takeover, there was a rush of Twitter users seeking possible replacement apps. Suddenly there was a ton of buzz around apps like Mastodon, Hive, Post, and more<\/a>. Naturally, it was only a matter of time before problems started with some of these up-and-coming Twitter killers.<\/p>\n

In a post on Twitter<\/a>, Hive Social announced it would temporarily turn off its servers to fix several security issues. German cyber group Zerforschung warned Hive and its users in a blog post<\/a> detailing the security issues. Zerforschung says it \u201cfound a number of critical vulnerabilities\u201d that it confidentially reported to Hive. The groups says the issues it found could allow an attack to access all of a user\u2019s data, including private posts, private messages, shared media and even deleted messages. That included private email addresses and phone numbers entered during login.<\/p>\n

\n

Hi everyone!?
The Hive team has become aware of security issues that affect the stability of our application and the safety of our users. Fixing these issues will require temporarily turning off our servers for a couple of days while we fix this for a better and safer experience pic.twitter.com\/wOgW7ga9xN<\/a><\/p>\n

\u2014 Hive (@TheHIVE_Social) December 1, 2022<\/a><\/p>\n<\/blockquote>\n

Worse, Zerforschung says attackers could overwrite data such as posts owned by other users. In a video shared in Zerforschung\u2019s blog post, the group demonstrates editing another account\u2019s post to say something different.<\/p>\n

According to a timeline released by Zerforschung, it began investigating Hive on November 23rd and completed its report on November 26th. The attempted to contact Hive several times but didn\u2019t receive an acknowledgement from Hive until November 28th. Hive shared the tweet about shutting down its servers on November 30th \u2014 Zerforschung notes that its testing suggests one vulnerability may be fixed as of November 30th.<\/p>\n

Source: Hive<\/a>, Zerforschung\u00a0<\/a><\/p>\n<\/p><\/div>\n