miHoYo, the developer of Genshin Impact, has leaked private data of some users on the official website of the game, including personal phone numbers linked to Genshin accounts.
According to several users on Reddit, it has been several weeks since the company has been informed that it is possible to discover phone numbers by searching for the username on the official website using the password recovery function. “
One user described that “I tried two random usernames from the Genshin Impact subreddit, and I was able to see their phone numbers.”
Another added that “when I tried it I could see my full phone number without any protection.”
“If you go to the miHoYo account page, to the option to recover forgotten password and enter your username, the email address appears partially hidden. However, if you linked your phone number, nothing is hidden.”
MiHoYo has yet to comment on this security hole, and it is also unclear how many users have been affected. However, some Reddit users point out that the problem has now been fixed.
Meanwhile, Genshin Impact received update 1.1 a few days ago, the largest to date. Titled A New Star Approaches, the update adds new stories, characters, a reputation system, and a seasonal event.
The Chinese company has also confirmed that Genshin Impact will be playable on PlayStation thanks to the backward compatibility option, with “graphical improvements” and shorter loading times.
Pablo Grueso, CEO of the technology consulting firm TecnoFor, published a thread on Twitter yesterday that began like this: “I just witnessed the most sophisticated online scam I have seen so far”. Next, Grueso recounted his recent experience on Vinted, detailing step by step how this user fell into the scammers’ trap.
It all started when the user in question, practically new to the platform, put a garment for sale on Vinted. A simple step that quickly became complicated when she received an email supposedly from the “Vinted Team.”
This is, received an email from the address “[email protected]” (Remember that it is possible to spoof legitimate email addresses, although that does not mean that it comes from that address). The e-mail simulated collecting an internal message from an interested buyer…
…message that includes a screenshot of the mobile phone of said ‘buyer’ in which you can see how the Vinted app asks for the seller’s mobile phone (that is, the aforementioned novice user).
And this is where we get to the key part of the scam, because in addition to the text message and the screenshot, the email (remember, supposedly official) includes a link that, when clicked, took the user directly within the Vinted application… or, rather, an almost perfectly duplicated website.
“A screen where you don’t notice the difference, where you can’t click on ‘info’ but you can navigate to the Inbox, for example”
The seller, confident that he is operating within Vinted’s own platform, ‘completes’ his data by entering his phone number… in such a way that the information goes directly to the cyber fraudster who sent you the email in the first place. And now this one, having the number of his victim, sends you an SMS (again, supposedly coming from Vinted).
In said SMS, the user/victim is informed that, to verify their credit card, “they will make the typical virtual charge that they later cancel…”…a practice commonly used to confirm the authenticity of a card, with the particularity that this time “the charge is €500“.
Another user, also affected by the scam, expands the information about said SMS:
“One of my daughters put some things up for sale, it was the first time and it was as if they suddenly wanted to buy everything. The following was what you describe, a message within the app to enter the mobile phone and an SMS to enter the data of the card”.
That is, a textbook phishing strategy in two rounds, impersonating Vinted, to provide the scammers with our personal data, first, and our financial data, later. And, furthermore, when we receive the authorization notice of the supposed voidable charge to Vinted, The victim of the scam will authorize it because he believes it is legitimate and that it will be returned to him. Oh, innocent.
Result and data to take into account to avoid falling yourself
Result of all this story? 500 euros less, and the item for which the victim registered on Vinted will remain unsold because there was never an interested buyer. Always remember to take these data into account:
Make sure that any data you enter in an app you are actually doing it on the official domain of the appnot just on a “look-alike” website.
To facilitate the above, never access the platforms through third-party links (even if they seem to be your real interlocutor): access the website/app yourself and look for the section in question.
Remember that, if entering data is necessary to operate on a trading platform, it will have warned you about it during registration. You will not receive a message afterwards.
Ask yourself some obvious questions: “Why would they spend money on sending SMS when you can send a notification to the mobile app?” or “Why would Vinted ask the seller’s number… from the buyer?”
Privacy in public spaces is fading by leaps and boundsbut we didn’t expect it to be a TikTok account of a Taylor Swift fan (she always includes her music in the videos she posts) who was going to remind us of it in the worst possible way.
And, with its 90,000 followers, this profile has caused alarm by exploiting the deep-rooted belief that Anything we do with content available on the Internet is valid.
The ‘modus operandi’ of this particular account is very simple: He selects his victims from people who have appeared in other viral videos and/or according to the suggestions of their followers and, once their objective is selected, their own videos document the ‘research’ process, consisting of…
Capture images of the person.
Subject them to searches within facial recognition platforms available online for any user (like Pimeyes or FaceCheck.ID).
Use what is called ‘open source intelligence’ or OSINT to ‘dig’ through data linked to your identity.
Publicly reveal your private information (full name, social media profile and even your employer).
Does not violate any TikTok content policy
Despite the concern generated by this account, and the requests made for TikTok to remove it, the platform has decided not to take any action in this regard, claiming that It does not violate any of their policies, since it only uses publicly available information.
That is the reason why neither 404 Media (the media that has dedicated a report to this story) nor we have wanted to disclose the address of this account until it is deactivated by TikTok.
One of his victims claims that this shows how vulnerable a person can be “merely by existing in a public space.”
Let us remember that these actions are carried out without the consent of the people involvedwhich raises serious ethical and legal questions… and opens the possibility that the content of said videos, or the recognition technology used in them, will be used, in the words of Eli Lloyd, one of their victims,
“For something worse than a simple thirst for online attention, such as extreme cases of harassmentFor example”.
The case of ‘Matthew’, another of his victims, is paradigmatic:was identified by the aforementioned TikTok profile after having appeared interviewed in a video from another viral content generator, one in which Matthew did not provide his full name or any other personal information..
“I felt a little violated”says this victim, who saw how the publication of his identity generated a wave of unwanted attention on the social networks of his company, whose website (which included a photo of him) was key to identifying him.
The worst thing is that the person responsible for the TikTok account shows no interest in ethically justifying his actions —of course, they have not revealed that their victims are behind any illicit activity or anything of that nature—, but rather, they feed on the mere curiosity of their followers.
In Matthew’s case, without going any further, everything was triggered because another TikTok user, one named Kenny, wrote “I need your @” (that is, your username) citing the original video in which the victim appeared. Kenny did not respond to 404 Media when asked why he wanted to unmask him.
The Samsung Galaxy S23 series was recently announced, but some users are experiencing connection issues with Android Auto. This makes using the smart car radio a lot more inconvenient.
No automatic connection with Samsung Galaxy S23
Android Auto is special software for infotainment systems in modern cars. Your phone connects to your car screen using a USB cable or Bluetooth, but this does not work for users of a Samsung Galaxy S23, S23 Plus or S23 Ultra. The smartphones do not connect automatically or at all with Android Auto. This makes listening to music or navigating suddenly a lot more difficult behind the wheel.
Dozens of users are reporting the connection issues on the Google Support page and users are also sharing this problem. It is not known what the root cause is. Most likely the solution lies in a software update. In any case, Google collects the technical data from those who experience the problem.
It is not the first time that Samsung smartphones have had problems with Android Auto. Last year’s Galaxy S22 phones also had trouble with this after launch. Users were then shown a black screen instead of the Android Auto interface. Only after about seven months were most problems resolved with an update.
Hopefully we won’t have to wait so long for Samsung this time, but a solution will come soon. Some users report that this problem is reason enough for them to switch to another smartphone.
More about Android Auto
With Android Auto you connect your phone to your car. The screen in the middle of your car turns into an interface with apps that work with it. This way you can easily listen to your favorite music via Spotify, navigate through the city with Google Maps and be served by the Google Assistant.
More and more modern vehicles have Android Auto built in as standard, but you can also install a modern car radio yourself. Check our list of five built-in radios that bring Android Auto to your car. Do you already have Android Auto and do you want to get the most out of it? Then read our five useful Android Auto tips.
When you get your PlayStation 5 (PS5) starts, you will undoubtedly want to log in to your existing PlayStation Network account to have your games and PlayStation Plus subscription back.
You can also create new PS5 account, add guest accounts and switch between PS5 accounts anytime you want. This way your family can also use the console without ruining your savegames.
Finally, this page also explains how to Deleted PS5 user accounts and how to use PlayStation 5 Quick Play.
On this page you will find:
If you want to know everything about the PS5, check our guides about your PS5 online status, PS5 accounts, the PS5 standard and PS5 Control Center.
Add new PS5 accounts
If you want to create a new account on your PlayStation 5, select the option ‘Add User’. You can find this option in several ways:
Via the ‘User’ selection screen when you start the console
The ‘Switch User’ option in the basic screen
Via the Control Center that you can see by pressing the PS button
The ‘Users and Accounts’ submenu the settings
However you get to this option, you will always end up with the same screen with three options:
Get Started – create a new permanent PS5 account
Sign In and Play – you can temporarily log into your PlayStation Network account on this console
Quick Play – anonymous temporary account
If you want to create a new, permanent account on your PlayStation 5, choose the option ‘Get Started.’
You will then be given the choice to log in to an existing PlayStation Network account, create a new one, or use the PSApp to log in to your account via a QR code or create an offline account.
If you want to use your previous account, log in to the PS5. Now you still have to arrange a few things, including Data Collection.
If you create a new account, you can also create a new username.
Via an offline account you can choose an icon and username, so that you can enjoy your PS5 even without an internet connection.
These instructions allow you to create an account for your child, with the only difference that you will need to visit the ‘Family and Parental Controls’ submenu in the settings to activate settings.
Switch PS5 users
There are two ways to switch accounts while playing on your PlayStation 5.
First and foremost, you can go to the home screen and go to the ‘Users’ option in the top right corner. Normally you will now see your username.
Click on it and a submenu will open with a few options including ‘Switch User.’
Selecting ‘Switch User’ will open a new menu with all users who currently have an account on this PS5.
You can choose which user you want to play as and thus gain access to all files (including save files) that the account in question has on this console. Certain parts of the account may require you to enter a password.
The second way to switch users is to press the PS button to activate the Control Center and select the User option.
Then you follow the same steps as above
Adding PS5 guests and Quick Play on PS5 explained
There are two ways to add a guest account to your PS5. Either you let someone log in temporarily via their own PlayStation Network account on your console, or a temporary guest account is created on your PS5 via Quick Play.
These options instantly delete any data created on your console during their playing time, so you don’t have to worry about impact on your storage capacity.
You can find both options by selecting the ‘Add User’ option, which can be found in several ways:
Via the selection screen that appears when you activate the console
Via the ‘Switch User’ option on the basic screen
Via the Control Center that you activate via the PS button
The ‘Users and Accounts’ submenu in the console settings
However you get there, after selecting ‘Add User’ you can choose from either ‘Sign In and Play’ or ‘Quick Play.’
If you choose ‘Sign In and Play’, you can log in to your PlayStation Network account and use the console as if it were yours. All your data is also stored.
If you select ‘Quick Play’, the console will automatically create a guest account that has access to all games and features downloaded to this console. If you have the physical version of the PS5, you can also play any physical disc.
The guest account will automatically disappear when you select a new user or switch off the PS5.
Remove PS5 users
To delete a user from your PS5, you must first go to the console settings. You can find it by going to the top right corner of the basic screen.
Then scroll to ‘Users and Accounts’ and select the option ‘Users.’
This will show you a list of all the accounts present on or linked to your PS5.
Now go to the account you want to delete and an icon with a trash can will appear. Select this.
Before removing it, the console will ask if you want to remove this user from the PS5.
If you confirm, the account will be deleted along with any saved data that may have been on the console.
If you want to know everything about the PS5, check our guides about your PS5 online status, PS5 accounts, the PS5 standard and PS5 Control Center.
The football simulation EA SPORTS FC 24 recorded over 14.5 million active users in the first four weeks.
This year, for the first time in almost 30 years, Electronic Arts’ annual football simulation will no longer be released under the name FIFA. But even the end of the partnership with the world football association could not detract from the great success of the series, which is now published under the name EA SPORTS FC.
In the first week after its release, EA SPORTS FC 24 recorded more than 11.3 million players worldwide. Four weeks after launch, the number even rose to 14.5 million active users, as revealed by EA’s recently published earnings report for the second quarter.
EA CEO Andrew Wilson described the results as a major achievement and a successful transformation of one of the world’s largest brands into a powerful, interactive platform for the future of football fans.
