Anonymous bulletin app Yik Yak isn't so anonymous after all

Yik Yak app
(Image credit: Yik Yak)

If you were a university student a few years ago, chances are you've heard about – and maybe used – Yik Yak, an anonymous bulletin board app that showed a feed of posts from a specific location. 

The app, launched in 2013, was subsequently shut down in 2017 after users pointed out that it could be used to anonymously bully and harass people, among other bad things. Yik Yak made something of a comeback but the core issues remained. 

But it turns out that Yik Yak wasn't so anonymous after all, according to a researcher speaking to Motherboard.

Yik Yak privacy flaw

Computer science student David Teather constructed a pretty ingenuous way to test out Yik Yak's privacy smarts and found the app was extremely wanting. 

Using the open-source mitmproxy tool, Teather intercepted data from and to Yik Yak by pretending to be the app itself. Each post on the service contains an exact GPS coordinate and a unique ID (such as nrCi213RA3SncY6mVLZzuGUIJ2T2), both of which can be used to de-anonymise Yik Yak users. 

In his own blog post, Teather goes into a lot more detail on exactly how and why Yik Yak was doing this, which leaves around two million remaining users at risk. 

A silent update 

"I disclosed what I found to the YikYak team on April 11, 2022," Teather said. "Almost a month later on May 8, 2022 (1 day before public disclosure date), they responded by removing the user id being returned for posts and comments however this is not enough to protect privacy as it’s trivial to regain this information."

But not a lot happened until Yik Yak released version 1.4.3 around May 11, which made some slight adjustments, mostly meaning that the GPS location data was less accurate. 

While this is almost certainly a positive change, Teather found that it was still possible, albeit slightly harder, to extract precise location data. 

Yik Yak did not respond to multiple requests for comment from Motherboard

Max Slater-Robins has been writing about technology for nearly a decade at various outlets, covering the rise of the technology giants, trends in enterprise and SaaS companies, and much more besides. Originally from Suffolk, he currently lives in London and likes a good night out and walks in the countryside.

Read more
Data breach
Privacy of millions worldwide compromised as huge data location broker got hacked
Outdoor photograph of a pair of hands holding a smartphone with navigator location points in the background
Millions of phone location records feared leaked as one of the biggest data leaks ever may be a whole lot worse
A man holds a smartphone iPhone screen showing various social media apps including YouTube, TikTok, Facebook, Threads, Instagram and X
Which apps were most hungry for your data in 2024?
Collage of hand with a key and a smartphone
Is it possible to send a truly anonymous message?
Location Data
Cloudflare CDN flaw could expose user location simply by sending an image
Map shown on smartphone
Thousands of GPS tracking customers have info leaked following data breach
Latest in Security
Data leak
Hacked Tata Technologies data leaked by ransomware gang
China
Chinese hackers targeting Juniper Networks routers, so patch now
Google Chrome dark mode
Google updates Chrome extension rules to ban affiliate link injection without user action or benefit
Abstract image of robots working in an office environment including creating blueprint of robot arm, making a phone call, and typing on a keyboard
This worrying botnet targets unsecure TP-Link routers - thousands of devices already hacked
Avast cybersecurity
UK cybersecurity sector could be worth £13bn, research shows
An option to add Ambient Music buttons to the iOS 18.4 Control Center.
Apple fixes dangerous zero-day used in attacks against iPhones and iPads
Latest in News
Apple iPhone 16 Pro Max REVIEW
The latest iPhone 17 Pro Max leak may have given us another look at its upcoming redesign
Half-Life running on a smartwatch
This Redditor installed a game engine on their smartwatch, and now it runs Doom, Quake, and Half-Life
Samsung Galaxy Z Fold 6
The Samsung Galaxy Z Fold 7 could be in line for a Galaxy S25 Ultra-level camera upgrade
Data leak
Hacked Tata Technologies data leaked by ransomware gang
Three iPhones on a green and blue background showing trails on Apple Maps
iOS 18.4 will give your iPhone a much-needed maps upgrade – but only if you're in the EU
A close up of Billy Bob Thornton's Tommy Norris in Paramount Plus' Landman TV series
The Taylor Sheridan supremacy lives on at Paramount+ as Landman gets renewed for season 2