Houseparty, a video calling app for Android and iPhone (iOS) phones, is being accused by Twitter users of collecting passwords from other services. The privacy controversy emerged on Monday (30) on the microblog, with tutes in English, Spanish and Portuguese reporting that streaming accounts, such as Spotify and Netflix, had been hacked after registering with Houseparty. There are even complaints that bank accounts have been hacked.
- Google causes controversy when banning app for Android; Look
- #FiqueEmCasa: check out other apps to make video calls with several people
The Houseparty app published a statement on its official Twitter account, still on Monday, stating that the profiles of the video conference service are secure and that it does not collect credentials from other platforms. There is no evidence that the app has suffered data leakage, nor that it is linked to the invasion of other accounts. Houseparty has experienced rapid growth in the past month due to the period of social isolation resulting from the new coronavirus pandemic, faced worldwide. In Brazil, the application reached the fifth position of most downloaded apps on the App Store on Sunday (29).
Houseparty accused on Twitter of stealing credentials from other user apps Photo: Beatriz Cardoso / dnetc
Want to buy cell phones, TV and other discounted products? Meet Compare dnetc
What and how does Houseparty work?
The Houseparty app has stood out during quarantine for accepting video calls from groups with up to eight people simultaneously higher than the limit for Instagram and WhatsApp, for example. The app is available for free for Android and iPhone phones, in addition to iPad and macOS.
The Houseparty proposal exclusively for videos and, therefore, does not allow files, photos or documents to be shared. When accessing the app, you are indicated as online and can be called for a video conference at any time. That way, other users can join your chat room. However, there is an alternative to configuring the approval of participants in videoconferences, providing more privacy.
Houseparty allows users to enter "chat rooms" by video Photo: Reproduo / HouseParty
Houseparty's privacy policy
Twitter users have reported, since Monday, hackers' attempts to access their Spotify and Netflix accounts. Some complaints denounce that even bank accounts, logged from bank applications on cell phones, have been stolen in recent days.
The victims suspect that the invasion wave has some connection with Houseparty, since that was the last service they signed up for before they were hacked. The application company, however, ensures that the platform is secure and does not collect user data on other platforms.
All Houseparty accounts are safe – the service is secure, has never been compromised, and doesnt collect passwords for other sites.
– March 30, 2020
All Houseparty accounts are safe and secure, the service has never been hacked and does not collect passwords from other sites.
At the Business Insider technology website, a Houseparty representative claimed not to have found evidence of account hacking in the app. The company suggests as the main theory for hacking the use of the same passwords and emails in more than one service (including Houseparty).
"We suggest that you use strong passwords when registering with any online service. Use a different password for each account and, instead of creating a short and simple code, use a password generator and administrator to find out what the credentials are. each registration ", recommended the Houseparty representative in an interview with Business Insider.
Guys be careful with the House Party app, it was hacked a few days ago and these hackears have been stealing many Instagram / Youtube / Twitter accounts … and even bank accounts! Yesterday they tried to steal me from Instagram and a Paypal account! .PASS THE MESSAGE, RT PFV.
– March 30, 2020
The repetition of passwords in different logins makes the user vulnerable to the scam credential stuffing. The practice consists of, after finding a bank of credentials exposed on the Internet, testing the password and e-mail combinations on other sites to steal the accounts to which they have access.
A similar case happened with Disney + after the launch of streaming in November. The accounts of more than 10 million users have been discovered for sale in underground cyber crime forums. Disney officials at the time stated that the video platform had not been hacked, so the main suspicion that affected users have repeated passwords for other services.
They have the same password for everything, bank, email, Facebook, Twitter, basically a word for your entire online entity. And trust this pass to random apps. Your problem with HouseParty is just you. pic.twitter/Mc0nBQALNz
– March 31, 2020
Forbes investigated the app last week with the help of a cybersecurity expert, and stated that the permits that Houseparty requires of users (such as access to the camera during use) are consistent, so the supposedly secure app. The only observation of the vehicle refers to privacy policies: it is possible that unknown persons will invade the games rooms of other users if they do not lock them, which option is available in the application.
Houseparty updated the official Twitter of the application, this Tuesday (31), announcing that it suspects the target of a paid campaign to damage the service's reputation. In addition, the company offers a $ 1 million reward to anyone who provides proof that this campaign does exist.
We are investigating indications that the recent hacking rumors were spread by a paid commercial smear campaign to harm Houseparty. We are offering a $ 1,000,000 bounty for the first individual to provide proof of such a campaign to [email protected]
– March 31, 2020
We are investigating indications that the recent rumors of hacking accounts were sparked by a paid commercial campaign to damage Houseparty's reputation. We offer a $ 1 million reward to the first person who provides proof of this campaign by emailing [email protected]
How to permanently delete your Houseparty account?
The way to delete your Houseparty account is different depending on the cell phone system. Android users must send an email to the service support, while those with an iPhone can simply select the "delete account" option directly in the application.
- Android: I need to send a central support email to "[email protected]" (without quotes). Send an e-mail with the subject "REQUEST DO DELETE MY ACCOUNT" and inform, in the body of the message, your full name, e-mail used in Houseparty and mobile number. He be answered by Houseparty.
- iPhone (iOS): in the app, go to the smile figure in the top corner of the screen> gear icon> Privacy> Delete account> enter your password and tap OK> Yes> Delete.
Videoconferencing app alternatives
Although the supposed leak of information on Houseparty has not been confirmed, there are other video call apps available for Android and iPhone (iOS). ZOOM Cloud Meetings, for example, is more focused on business meetings and accepts conversations between two or up to 25 people. Hangouts Meet is another business application, but it is freely available to everyone during the new coronavirus pandemic. The basic version supports up to 100 participants and, as the service belongs to Google, you only need a Gmail account to use it.
J WhatsApp has the advantage of its almost omnipresence in cell phones in Brazil. However, the video call accepts only four people. Those who suffer from slow Internet can use the Google Duo, which promises video conferences with up to 12 people with image quality even in 2G.
How to make video call on WhatsApp for iPhone (iOS)? Find out in the dnetc forum.
WhatsApp allows you to switch between voice and video calls without hanging up