Latest in Android

Image credit:

Skype for Android vulnerable to hack that compromises personal info

Sean Hollister
April 14, 2011
Share
Tweet
Share

Sponsored Links

If you didn't already have enough potential app privacy leaks to worry about, here's one more -- Android Police discovered that Skype's Android client leaves your personal data wide open to assault. The publication reports that the app has SQLite3 databases where all your info and chat logs are stored, and that Skype forgot to encrypt the files or enforce permissions, which seems to be a decision akin to leaving keys hanging out of the door.

Basically, that means a rogue app could grab all your data and phone home -- an app much like Skypwned. That's a test program Android Police built to prove the vulnerability exists, and boy, oh boy does it work -- despite only asking for basic Android storage and phone permissions, it instantly displayed our full name, phone number, email addresses and a list of all our contacts without requiring so much as a username to figure it out. Android Police says Skype is investigating the issue now, but if you want to give the VoIP company an extra little push we're sure it couldn't hurt.



All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.
Share
Tweet
Share

Popular on Engadget

How to watch Biden’s inaugural 'Parade Across America'

How to watch Biden’s inaugural 'Parade Across America'

View
EU fines Valve and major game publishers for geo-blocking titles

EU fines Valve and major game publishers for geo-blocking titles

View
Donald Trump pardons ex-Waymo, Uber engineer Anthony Levandowski

Donald Trump pardons ex-Waymo, Uber engineer Anthony Levandowski

View
Mercedes-Benz' EQA crossover is its first sub-$50,000 EV

Mercedes-Benz' EQA crossover is its first sub-$50,000 EV

View
YouTube extends Trump's suspension ahead of inauguration day

YouTube extends Trump's suspension ahead of inauguration day

View

From around the web

Page 1Page 1ear iconeye iconFill 23text filevr