Confessions on Yik Yak | I tried reporting this vulnerability to Yik Yak but got no response. So I'm releasing YakTrace publicly. It can deanonymize posts within a community, revealing authorship by user. Hopefully this gets Yik Yak's attention and pushes them to patch it.

Yik Yak

Download

Join communities on Yik Yak Download

Confessions 21h

I tried reporting this vulnerability to Yik Yak but got no response. So I'm releasing YakTrace publicly. It can deanonymize posts within a community, revealing authorship by user. Hopefully this gets Yik Yak's attention and pushes them to patch it.

GitHub - i3T4AN/Yaktrace: YakTrace reveals when multiple Yik Yak posts were made by the same anonymous account and organizes them into a local PDF dossier. Built on the sidechat.js API project.

github.com

Anonymous 21h

Careful man you might get taken away by the super secret super evil anon accounts

Anonymous

#1 21h

Yeah but the Aftermath should be pretty funny tbh. Caused a shit storm at my school when I published it when I was testing 😂

Anonymous

OP 21h

As long as people don’t get harassed irl and doxed it should be fine, besides releasing their public information and invading privacy 😭

Anonymous

#1 21h

Doesn’t link to an actual person, but it groups everyone’s posts by user. One of the frat guys larped as a woman and claimed SA from another org, so a ton of stuff like that’s blowing up. Figured it would be funny to release the automation I scripted for it after not hearing back.

Anonymous

OP 21h

Damn what the fuck?? Ngl I hope he got kneed in the balls

Anonymous

#1 21h

Yeah. Whole lot of dirty laundry when people think the apps anonymous. And I imagine it’s the same at other universities. That’s why I opted for a full tool release after not hearing back when I inquired about a bug bounty program.