Printed from http://www.electronista.com

Skype for Android exploit allows grabbing of personal info

updated 06:20 am EDT, Fri April 15, 2011

Skype for Android contains serious vulnerability

Users of Skype for Android have been left vulnerable to a code exploit that allows a hacker to access a user's personal information. The proof of concept exploit uncovered by Android Police would allow a hacker to deploy a rogue app in the Android Market that, once downloaded, would allow access to a Skype user's full name, date of birth, city/state/country, home phone, office phone, cell phone, email addresses, bio and other details. The vulnerability appears to be the result of left over files that contain improper permissions, which allows anyone or any app to read them.

According to Android Police blogger Justin Case, Skype is currently investigating the issue after he brought it to their attention. In his view, Skype can address the issue by using proper file permissions, implement an encryption scheme, and put their apps through a more robust security review prior to release.

Users of Skype for Android can download the proof of concept app to test their Skype application to see what data the vulnerability yields.




By Electronista Staff
Post tools:

TAGS :

toggle

Comments

Login Here

Not a member of the MacNN forums? Register now for free.

toggle

Network Headlines

toggle

Most Popular

Sponsor

Recent Reviews

Life n Soul BM211 Bluetooth speaker

Bluetooth speakers aren't only for listening to some music at the park or on a long bus ride, but can also be built with tablets in mi ...

Epson PowerLite Home Cinema 2030 projector

With high-definition televisions now the standard, 4K televisions becoming the next big thing, and plasma TVs going the way of the din ...

Life n Soul 8 Driver Bluetooth headphones

When it comes to music on the go, consumers generally have some options to consider when looking for the best experience. While Blueto ...

Sponsor

toggle

Most Commented

 
toggle

Popular News