GlobeSec
globesec.net
GlobeSec
@globesec.net
We're a collective of software developers and infosec professionals investigating privacy and security risks in web and mobile apps developed by flat earthers.
The first flat earth app we dug into is the "Flat Earth Sun, Moon & Zodiac Clock" app by "Flat Earth Dave" aka DIRTH.

We've published what we've found (and are able to publicly disclose) so far at github.com/globesec/fla...

Most things, least of all the broken auth, have still yet to be fixed.
GitHub - globesec/flatearthsun_public: Publicly disclosed notes and tools regarding the Flat Earth Sun & Moon Clock app and related API
Publicly disclosed notes and tools regarding the Flat Earth Sun & Moon Clock app and related API - globesec/flatearthsun_public
github.com
March 18, 2025 at 8:57 AM
Reposted by GlobeSec
New breach: The flat earth sun, moon & zodiac app by "Flat Earth Dave" had 33k unique email addresses breached in Oct. Data included plain text passwords and users' lat and long (their position on the globe). 73% were already in @haveibeenpwned.com. More: www.youtube.com/watch?v=71FR...
Flat Earth Dave's App Massive Security Breach
YouTube video by Conspiracy Toonz
www.youtube.com
March 2, 2025 at 5:40 AM
I finally got around to creating this account 😅

We're GlobeSec, a collective of developers and #infosec people investigating privacy and security risks in apps made by flat earthers (yes, those people do exist).

We publish our research over on our github github.com/globesec

#introduction
GlobeSec
A collective of software development and infosec professionals dedicated to investigating apps published by flat earthers. - GlobeSec
github.com
March 17, 2025 at 11:10 AM