Friday, 15 April 2011

Skype for Android vulnerable to hack that compromises personal info

By Sean Hollister posted Apr 14th 2011 10:02PM Hands-On If you didn't already have enough potential app privacy leaks to worry about, here's one more -- Android Police discovered that that Skype's Android client leaves your personal data wide open to assault. The publication reports that the app has SQLite3 databases where all your info and chat logs are stored, and that Skype forgot to encrypt the files or enforce permissions, which seems to be a decision akin to leaving keys hanging out of the door.

Basically, that means a rogue app could grab all your data and phone home -- an app much like Skypwned. That's a test program Android Police built to prove the vulnerability exists, and boy, oh boy does it work -- despite only asking for basic Android storage and phone permissions, it instantly displayed our full name, phone number, email addresses and a list of all our contacts without requiring so much as a username to figure it out. Android Police says Skype is investigating the issue now, but if you want to give the VoIP company an extra little push we're sure it couldn't hurt. sourceAndroid Police Leave A CommentTweet web coverageDoes Skype use encryption? (Skype Help) android, app, apps, hack, hacked, hacks, hands-on, hole, Justin Case, JustinCase, personal information, PersonalInformation, privacy, security, security hole, SecurityHole, skype, Skype for Android, SkypeForAndroid, unencrypted, VoIP, vulnerabilities, vulnerability

From Our PartnersPandora Provides Detailed Data, Including GPS Coordinates, to Advertisers6 days ago

Clorox ditches BlackBerry, 92 percent of employees replace it with iPhone6 days ago

PlayStation emulator for Android goes free and open source6 days ago

Please enable JavaScript to view the comments powered by Disqus.blog comments powered by Disqus Ask Engadget: best Android smartphone with a physical keyboard? 5 hours ago 5 hours ago Editorial: Dear RIM, I'm your customer and I don't wear a suit 11 hours ago TiVo survey hints at multiroom companion box, four tuner DVR in the future 13 hours ago Netflix for Xbox 360 updated with Kinect support, everybody wave! 16 hours ago SEE ALL Google announces Q1 earnings: $8.58 billion gross revenue, $2.3 billion net income 10 hours ago Apple announces Final Cut Pro X, rebuilt from ground up with 64-bit support (update: $299 in June) 2 days ago Microsoft pushes out preview build of Internet Explorer 10 (update: Windows on ARM!) 2 days ago HTC Sensation first video hands-on! 2 days ago Cisco killing Flip line of camcorders, axing 550 employees in restructuring effort 2 days ago SEE ALL -->

Trending posts from Engadget on Twitter, updated hourly.Neonode's zForce optical touchscreens hitting ASUS tablets later this year -- Engadget634T-Mobile G2x now available online for $200, hitting stores April 20th -- Engadget419 -- Engadget367RIM: PlayBook email client 'very very soon,' 3G model this summer -- Engadget286Dear RIM, I'm your customer and I don't wear a suit [My first editorial on269Joystiq Fractured Soul finds an American publisher DC Unlimited releases Killzone 3 action figure line Space Invaders Infinity Gene soundtrack evolves into digital release Download Squad Farewell, Internet Angry Birds Rio for Symbian lands in Nokia's Ovi Store Kindlebility sends Web pages from your computer to your Kindle TUAW Prompt from Panic does SSH on iPad and iPhone iOS Home Sharing bug found while using multiple Macs Apple employees appear in 'It Gets Better' video Switched Farewell, Internet Interview with Digital Camera Inventor, Making Game Boy Music Dinos and Trenches in '1916 - The War You Never Knew'  Tech gdgtSlashdotMAKETechnology ReviewArs TechnicaTechMemePhone ScoopDesign FFFFOUND!Core77Popcorn ShowerMoCo LocoDesign*SpongeThe SartorialistNews Politics DailyThe Daily BeastAOL NewsGNNTaxesStock QuotesDJIALifestyle LifehackerLemondropStyleListLuxistPersonal financeGadlingEnvironmental InhabitatGoodAutoblog GreenGreen DailyTreeHuggerEntertainment WoWMassivelyThe Onioni09PopEaterSpinnerCinematicalBig Download  Engadget Classic Mobile HD ALT FOLLOW SUBSCRIBE ENGADGET U.S. ESPAGÑOL 繁體中文 简体中文 日本版 ?한국어판 POLSKA DEUTCHLAND ABOUT US FAQ TIP US ON NEWS What our ratings mean10 - A perfect product9 - Nearly perfect, but...8 - Great product with few flaws7 - Solid product with some minor issues6 - Decent, but not as good as it could be5 - Fair; not great, but not horrible4 - Okay, but we can't recommend it3 - Very few redeeming qualities2 - Almost no redeeming qualities1 - Pure crap AOL Tech LATEST NEWS HUBS GALLERIES VIDEO PODCASTS TOPICS REVIEWS © 2011 AOL Inc. All rights Reserved. Privacy Policy | Terms of Use | Trademarks | AOL A-Z HELP | Advertise With Us Boss of the Year Entry Form

Now that we've thrown 'em off the trail, use the form below to get in touch with the people at Engadget. Please fill in all of the required fields because they're required.

YOUR NAME (REQUIRED) YOUR EMAIL (REQUIRED) YOUR SITE'S URL (OPTIONAL, BUT WE REALLY LIKE CHECKING OUT NEW SITES) SUBJECT (OPTIONAL) RELATED URL (OPTIONAL) GIVE US THE GOODS (SORT OF THE POINT) Submit Cancel the end

No comments:

Post a Comment