Learning Database Database Suspecting Information Discovery Company: The report has been reported to be accused of vulnerability

Radar Finance | Editor Wu Yanrui | Deep Sea

Recently, the topic of#近 近 近 近 近 近 近 近 近 近 近 近 近 近 近 近 近 近 近 近 近 近 近 近 近 近 近 近 近 近 近 近 近 近 近 近 近 近.

Earlier, some media reports said that some users are suspected of selling relevant data information "Learning data unit price is 10 yuan per person, and the entire database requires 3,000 yuan." Another netizen broke the news that the database leakers were leaked, and the user information was sold publicly. The data in it included 170 million students' information such as names, gender, mobile phone number, school, school number, etc., containing 10.76 million passwords, and a price of 12,000 yuan. Access with USDT.

In this regard, the official Weibo of Learning Study issued a statement that the company received feedback from the "Suspected Learning APP user data leakage" and immediately organized technical investigation. At present, the investigation has been conducted for more than ten hours. Clear evidence of user information leakage. In view of the major things, the company has reported to the public security organs, and the public security organs have been involved in the investigation.

The statement states that the learning password is not stored in learning, and one -way encryption storage is adopted. Theoretically, the user password will not leak. Under such technical means, even if the company's internal employees (including programmers) cannot obtain the password clearly. The company confirmed that the leakage of the password on the Internet is not true.

User information security is a major issue. The company attaches great importance to it. It will assist the public security organs to continue to investigate and make every effort to ensure user information and data security.

Regarding the above reply, the Chinese Youth Daily commented that "a‘ theoretically wo n’t the theory ”. For any product, users' trust is precious. If information security and fog cannot be fully responded and effectively resolved, this trust will gradually become vulnerable. It is believed that with the joint efforts of relevant departments and APPs involved, the problem can be sorted out and clear, and related vulnerabilities can be blocked in time.

Many users of the comment area left a message saying that the number of uses of their accounts was obviously abnormal, and recently received harassment calls from various places.

According to the information of Tianyan Checai, the study of the main body of Beijing Century Super Star Information Technology Development Co., Ltd. was established in January 2000. The real -time capital is 30 million yuan. The scope of business is technical development, technical promotion, technical consulting, and technical services. Software and auxiliary equipment; cargo import and export, technology import and export, proxy import and export; computer technology training; conference services; design, production, agency, publishing advertisements; retail books; retail electronic publications.

In the company's inspection of risk information, on January 22 and July 19, 2021, Super Star Learning Two times were notified by the Ministry of Industry and Information Technology for "illegal use of personal information" and demanded rectification.

On the national information security vulnerability sharing platform, the "Super Star Learning" APP has been accused of the existence of information leakage vulnerabilities, and attackers can use this vulnerability to obtain sensitive information.

The main target users of the learning pass are college students, and many users can see that many users respond to learning through excessive permissions in the review of the app store.

Similar to learning, another smart tree also reports the news of suspected information leakage.

The official website of Smart Tree said that Smart Tree.com belongs to Shanghai Excellence New Digital Technology Co., Ltd. (hereinafter referred to as "Zhuoyue Rui Xin"), which is a large global large -scale credit course operation service platform. There are nearly 3,000 membership schools, and more than 20 million college students have across schools and obtain credits through Smart Tree Network. Smart Shu.com helps members of colleges and universities, realize cross -school curriculum sharing and credit recognition, and complete cross -school selection and reading.

In July 2021, Zhuo Yuerui was fined 50,000 yuan by the Shanghai Xuhui District Market Supervision and Administration Bureau due to illegal release of education and training advertisements and ordered to stop the release.

- END -