Joseph Cox on Nostr: New: very popular pregnancy tracking app 'What to Expect' is refusing to fix a series ...

New: very popular pregnancy tracking app 'What to Expect' is refusing to fix a series of vulnerabilities, including one that allows for a full account takeover, exposing peoples' health data. Password reset flow is easy to access and brute force https://www.404media.co/pregnancy-tracking-app-what-to-expect-refuses-to-fix-issue-that-allows-full-account-takeover-2/