Nov 16, 2018

Report: Database of login text messages left exposed online

Photo: Westend61 via Getty Images

A database containing millions of text messages used to authenticate users signing into websites was left exposed to the internet without a password, TechCrunch's Zack Whittaker reports.

Why it matters: What was at risk here were those text messages a bank might send customers after they entered a passwords, password reset links and other automated text messages sent by businesses. While there's no evidence that a malicious actor was monitoring the database, it was dangerous information to have exposed.

Details: The database belonged to the automated text message service Voxox. Per the report:

  • The database was discovered by security researcher Sébastien Kaul and remained online until Whittaker contacted Voxox.
  • The text messages included security codes sent by Fidelity Investments, Booking.com and Google.
  • Voxox had sent more than 26 million text messages to date this year.

But, but, but: Remember, these codes typically only remain active for a few minutes. So while the danger would be very real, only text messages that were being monitored as they were added to the database would put anyone's account at risk.

Go deeper

Biden says he'll follow CDC mask guidance: "Listen to the Faucis of the world"

Joe Biden said on ABC's "This Week" Sunday that he will follow the Centers for Disease Control and Prevention's new recommendation that people wear face coverings when they leave home to prevent the spread of the coronavirus.

Why it matters: After the White House announced the guideline last week, President Trump said he will likely not wear a mask and emphasized that the guidance was "voluntary."

Louisiana governor says state will run out of ventilators on April 9

Louisiana Gov. John Bel Edwards said on CNN's "State of the Union" Sunday that modeling projects his state will run out of ventilators for coronavirus patients on April 9 and hospital beds on April 11.

Why it matters: New York is the only state in the country with a worse per-capita death rate than Louisiana, where around 12,500 people have been infected and 409 have been killed.

Go deeperArrow46 mins ago - Health

Coronavirus dashboard

Illustration: Sarah Grillo/Axios

  1. Global: Total confirmed cases as of 9 a.m. ET: 1,216,422 — Total deaths: 65,711 — Total recoveries: 252,478Map.
  2. U.S.: Total confirmed cases as of 9 a.m. ET: 312,245 — Total deaths: 8,503 — Total recoveries: 15,021Map.
  3. Public health latest: CDC launches national trackers and recommends face coverings in public. Federal government will cover costs of COVID-19 treatment for uninsured. The virus is hitting poor, minority communities harder and upending childbirth.
  4. 2020 latest: "We have no contingency plan," Trump said on the 2020 Republican National Convention. "We're having the convention at the end of August."
  5. Business updates: Restaurants step up for health care workers. Employees are pressuring companies to provide protections during coronavirus.
  6. Oil latest: Monday meeting among oil-producing countries to discuss supply curbs is reportedly being delayed amid tensions between Saudi Arabia and Russia.
  7. Education update: Many college-age students won't get coronavirus relief checks.
  8. What should I do? Pets, moving and personal health. Answers about the virus from Axios expertsWhat to know about social distancingQ&A: Minimizing your coronavirus risk.
  9. Other resources: CDC on how to avoid the virus, what to do if you get it.

Subscribe to Mike Allen's Axios AM to follow our coronavirus coverage each morning from your inbox.