The CEO Of Secret Told Us How You Can Hack Yo And Get Anyone's Phone Number In Just 3 Minutes
The super-simple messaging app Yo is on fire right now: It's No.4 in the App Store at the time of writing. We told you earlier that someone already hacked it, and the company has admitted …
Context & Ripple Effects
Yo is having a strange 72 hours: the one-word notification app sits at No.4 in the App Store, and two days ago it reportedly pulled in $1 million in funding, with Moshe Hogeg named as the backer. The viral surge is exactly what put it on attackers' radar.
The same-day TechCrunch report that college students had broken the app is now being amplified by Secret's CEO, who walked Business Insider through how the flaw exposes any user's phone number in roughly three minutes — a detail Yo's own team has acknowledged. The story has traveled unusually far for an app this young, landing at the Wall Street Journal, Washington Post, Quartz and Valleywag within a day.
First-order effects
- Every Yo user's phone number is exposed to anyone willing to spend three minutes on the exploit the Secret CEO demonstrated, forcing the startup to patch while riding its App Store peak.
- The company's security admission lands alongside its confirmed $1 million raise, so investors' money is now tied to fixing infrastructure that was clearly built for speed rather than safety.
Second-order effects
- Competing lightweight messaging apps get an easy differentiation pitch — 'we take security seriously' — aimed directly at Yo's buzz-driven user base, and press scrutiny of minimal-app startups hardens.
- The funding story becomes inseparable from the vulnerability story: future backers of hyper-minimal apps will demand a security review as a condition, because the Yo cycle shows virality and public break-ins arriving in the same news window.
Third-order effects
- If one-word apps keep scaling before hardening, expect app-store-era consumer startups to treat an early public hack as a rite of passage rather than an exception — and for security diligence to move earlier into seed-stage checks.
The trend: Viral consumer apps are reaching mass adoption faster than their security can mature, making high-profile break-ins part of the launch narrative itself.