Security Specialist Says He Was Able to De-Anonymize Device IDs of OpenFeint Users

A New Zealand-based security specialist says he was able to de-anonymize device ID numbers of OpenFeint users and connect them to their real names on Facebook. OpenFeint is a mobile-social gaming network that says it serves 75 million users and is used in 5,000 apps. It was recently acquired by Japan’s GREE for $104 million.

Aldo Cortesi, who works at a security consultancy called nullcube, made calls to OpenFeint’s API here, replacing “XXX” with his own device ID number:

https://api.openfeint.com/users/for_device.xml?udid=XXX
AW+

WORK SMARTER - LEARN, GROW AND BE INSPIRED.

Spring Special

Save 30% Off an ADWEEK Subscription Today!

View Your Options

Already a member? Sign in