ICEBlock App Developer Ignores Critical Security Vulnerabilities
2025-09-08

The ICEBlock app, downloaded over a million times, allows anonymous reporting of ICE sightings. However, its developer, Joshua Aaron, has ignored critical security vulnerabilities in his Apache server. Security researcher Micah Lee repeatedly warned Aaron and provided solutions, but Aaron ignored them and even blocked Lee's accounts. This raises serious concerns about user data security and highlights the app's irresponsible approach to security.