Friday, September 23, 2011

Blog title...Use Skype on the iPhone? Your info could be stolen

msnbc.com - 9/20/2011
Rosa Golijan

Are you using the Skype for iOS app on your iPhone or iPod Touch? Then you need to be aware of how easily your information -- particularly your entire address book -- could be stolen without your knowledge. All it takes is a single chat message.

According to TechCrunch, the issue was first discovered by AppSec Consulting security researcher Phil Purviance -- who claims that he pointed out the vulnerability to Skype about a month ago. You can see a rather technical demonstration of how information is stolen in the video below, but here's the simplified version:

*An evildoer places malicious code into the "Full Name" field in his or her Skype profile

*That individual sends a chat message to his or her victim -- someone who is using Skype on his or her iPhone or iPod Touch

*As soon as the victim views the message, the malicious code begins to run on his or her mobile device

*Information -- such as the victim's address book -- is uploaded to the evildoer's computer

*The evildoer is able to sift through the stolen information at his or her leisure

The reason this series of events can occur is because the "Full Name" field isn't checked for malicious code.

Scary, right? But there are a few things you should know before you panic.

For starters, thanks to the way Apple has designed iOS -- its mobile operating system -- only certain files, including your address book, are vulnerable.

But most importantly, you should know that Skype is working on a fix for the security issue:


We are working hard to fix this reported issue in our next planned release which we hope to roll out imminently. In the meantime we always recommend people exercise caution in only accepting friend requests from people they know and practice common sense internet security as always.


stay safe- even on the go- visit geeksoncall.com



Keywords: geeksoncall, geeks on call, geeksoncall.com, 800-905-geek, computer repair, computer service, home computer repair, home computer service, information technology, business network service, virus removal, network, wireless network, facebook, safety, analyze computer, internet explorer, malware, gmail, productivity...

No comments:

Post a Comment