It all started innocently enough. I was thinking of implementing a Path Mac OS X app as part of our regularly scheduled hackathon. Using the awesome
mitmproxy
tool, I started to observe the various API calls made to Path’s servers from the iPhone app. It all seemed harmless enough until I observed aPOST
request tohttps://api.path.com/3/contacts/add
.
Path uploads your entire iPhone address book to its servers →