Cybernews also say "there was no way to effectively compare the data between different datasets" which also reeks of bs. If it's all packaged in the url + username + password format they say it is, that's an easy parse, load into database, and query exercise.

A lot here doesn't pass sniff tests.

Probably needless to say, but we strongly advise not using the app, at least until the issues are fixed.

If you have an account and have not done so already, change your password ASAP! If you're worried about your location, go away from home/work, update your location, then don't open the app again

If video is more your style, check @mctoon.bsky.social's video where he covers the findings listed in our repo.

At the time we started investigating the app, it was leaking user passwords (as featured recently in @haveibeenpwned.com)
www.youtube.com/watch?v=71FR...

We're here now! 😄 Our research (so far 👀) is on our Github
github.com/globesec/fla...