Just tried it by entering random numbers (4 &5 digits) no surprise that most of the names that appear are Kenyans with Asian origin :)

It is easily possible to whip out a script and harvest out all the phone numbers + the names from the results.

I hope someone from Zuku is listening.

On 26 February 2015 at 01:26, Brian Ngure via skunkworks <skunkworks@lists.my.co.ke> wrote:

So no reprieve for those on R50 :)

By the way, anyone used their free wifi spots? I checked out the sign up page and smiled. They ask you to enter your account number (someone can guess any account number, I tried) and then display some information with the phone number hashed out 07xxxxx000. They then display a form clearly showing the full phone number. Can you spell pointless??? Clearly whoever designed this site/page for Zuku has no clue about security.

Regards,
@njukey