A repository (repository - repo) called Source-Snapchat has been uploaded to GitHub by a user named i5xx in Tando Bago village, Sindh province in southeastern Pakistan. Currently, we cannot view the content of this repo because GitHub deleted it according to DMCA copyright protection requirement from Snap Inc .
This repo can be part or all of the Snapchat app source code for iOS, can also be a small part of the service or a Snap's own project because it is described in Apple's Objective-C language. and "Source code for Snapchat". Unfortunately there is currently no way to confirm this.
The i5xx account, who downloaded Snapchat's source code to GitHub, said his name is Khaled Alshehri (Alshehri family is not popular in Pakistan). But it cannot be confirmed that this is his real name.
According to the profile on GitHub, the i5xx account is linked to an online business in Saudi Arabia, offering a range of technology services including software development, security scanning, iCloud deletion and selling iTunes discount cards.
An article on the Twitter account that is supposed to belong to i5xx shows that he tried to contact Snap but failed, so he decided to upload it to GitHub. Therefore, this is not an attack on Snapchat, it is possible that this i5xx guy accidentally saw Snapchat's source code somewhere. The account also threatens to re-upload the source code if Snap does not respond.
In fact, Snap has award-winning bug hunting programs in cooperation with HackerOne so any security researcher can easily contact the company. HackerOne often responds to initial reports within 12 hours. According to official statistics, HackerOne paid over $ 220,000 in bonuses to hackers. Depending on the severity of the detected error, Snap will have different prizes for researchers. And leaking the source code of the application is quite a serious security issue.
The new DMCA request of Snap was publicized by GitHub 4 days ago.
According to i5xx's interactive history, in the period from 23 to 24/5, 18 GitHub users had access to this repo. Currently Snap Inc. There has been no feedback on this incident yet.
See more:
ncG1vNJzZmismaXArq3KnmWcp51kwK%2Btz5yfmqxdqLy2vsKeZJynlJp6qr%2BMq5yvnZGhsqV5zqdkoKGkncKj