PDA

View Full Version : Skype For Android Can Leak Data To Malicious Apps



wraggster
April 15th, 2011, 22:07
"It appears that Skype account information on an Android phone remains readable by all in a standard installation (http://www.androidpolice.com/2011/04/14/exclusive-vulnerability-in-skype-for-android-is-exposing-your-name-phone-number-chat-logs-and-a-lot-more/), at least for certain versions of Skype out in the wild. That allows another potentially malicious app to know everything about you that Skype knows (contacts, history of whatever you've chatted about or who you called, phone numbers, personal information). Skype is said to be working to fix (http://blogs.skype.com/security/2011/04/privacy_vulnerability_in_skype.html) for what appears to be a simple file permissions issue. This sheds some more light on how much private information everybody gives away for free by just owning a phone with half a wrong chmod."http://tech.slashdot.org/story/11/04/15/1651256/Skype-For-Android-Can-Leak-Data-To-Malicious-Apps