Clubhouse, an audio-centric social networking app that has touted its anti-recording features, was breached last week despite assurances from the app’s developers to tackle potential hacks.
An unidentified user was able to stream Clubhouse audio feeds from “multiple rooms” onto the user’s own website, a Clubhouse spokesperson told the Washington Examiner.
“Recording or streaming without the explicit permission of the speakers is against the Clubhouse terms of service,” the spokesperson said. “This individual’s account has been permanently banned from the service and we have added additional safeguards to prevent people from doing this in the future.”
Clubhouse said it installed further safeguards to prevent breaches, but some cybersecurity experts warn that the platform could be targeted for future hacks. It is unclear how many users or conversations were affected in the hack.
The Stanford Internet Observatory released a report on Feb. 12, saying it observed metadata from a Clubhouse chatroom “being relayed to servers we believe to be hosted” in China.
Alex Stamos, director of SIO and Facebook’s former security chief, tweeted on Tuesday, “We found Chinese servers being used even for conversations that only involved Americans. At this time, I can’t recommend that individuals who might find themselves adverse to the security services of the PRC to use Clubhouse for sensitive conversations.”
We found Chinese servers being used even for conversations that only involved Americans.
At this time, I can’t recommend that individuals who might find themselves adverse to the security services of the PRC to use Clubhouse for sensitive conversations. pic.twitter.com/a7Q1EGUOY9
— Alex Stamos (@alexstamos) February 16, 2021
Stamos and his team of researchers were the first to confirm that Clubhouse is dependent on a Shanghai startup called Agora, which handles most of its back-end operations.
Clubhouse’s responsibilities encompass mostly user experience operations, such as adding friends and finding rooms, while the Agora component helps to process data traffic and audio production, Stamos said.
Agora’s obligation to abide by China’s cybersecurity laws means it may be legally required to assist in locating audio or sharing private information should the government claim that something jeopardizes national security.
CLUBHOUSE ATTEMPTS TO WORK ITS WAY INTO THE SOCIAL MEDIA SPACE DOMINATED BY BIG TECH
In early February, Clubhouse users in China reported that they were unable to access the app after some conversations by nationals referenced taboo topics, such as Taiwan’s autonomy and Xinjiang, the province where there have been multiple reports of camps with enslaved Uighur Muslims.
Clubhouse, an invitation-only social media app based on audio communications, is centered on a dedication to promoting open and free conversations on its platform while preventing users from recording talks. The company reportedly announced further security buffs for its app last week, though experts with SIO have said that Clubhouse could be at risk of further hacking attempts.
The social media company recently boosted $100 million at a reported $1 billion valuation. Agora has risen more than 150% since mid-January. It is currently worth nearly $10 billion.
CLICK HERE TO READ MORE FROM THE WASHINGTON EXAMINER
The Washington Examiner reached out to Agora but did not immediately receive a response.
