Flaw in Skype for Android let criminals get private information from smartphonesApril 18, 2011 - 17:22 AMT PanARMENIAN.Net - A flaw in Skype for Android could let criminals harvest private information from smartphones, including the user's name and email address, contacts and chat logs, the Internet calling software maker confirmed. One security researcher called it "sloppy coding" and a "disrespect for your privacy." Last week, Justin Case, a regular contributor to the Android Police blog, disclosed that Skype on Android does not block access to a number of sensitive data files stored on the handset. The files contain a wealth of information about the Skype account and the smartphone's owner, ranging from full name and date of birth to alternate phone numbers and account balance. Also accessible, said Case, are instant chat logs and all Skype contacts. "Skype mistakenly left these files with improper permissions, allowing anyone or any app to read them," said Case. "A rogue developer could modify an existing application with code from our proof of concept, distribute that application on the [Android] Market, and just watch as all that private user information pours in," he said. Case's concern is well-founded. Last month Google yanked more than 50 malware-infected apps from its Android Market, while three weeks ago Czech security company AVAST said a different rogue designed to shame software pirates sent personal information to the maker of the "Walk and Text" app. Skype acknowledged what it called a "privacy vulnerability" in its Android client. Although it promised to address the problem, it did not spell out a timetable. "We are working quickly to protect you from this vulnerability, including securing the file permissions on the Skype for Android application," said Adrian Asher, Skype's chief information security officer, in an entry on a company blog . As of late Sunday, April 17, the Skype app for Android had not been updated, ComputerWorld reported. Top stories Yerevan will host the 2024 edition of the World Congress On Information Technology (WCIT). Rustam Badasyan said due to the lack of such regulation, the state budget is deprived of VAT revenues. Krisp’s smart noise suppression tech silences ambient sounds and isolates your voice for calls. Gurgen Khachatryan claimed that the "illegalities have been taking place in 2020." Partner news Most popular in the section | Titus, Bilirakis lead legislation to sanction Azerbaijani war criminals Representatives Dina Titus (D-NV) and Gus Bilirakis (R-FL) have introduced the bipartisan legislation. Azerbaijan must respect human rights, Scholz tells Aliyev German Chancellor Olaf Scholz has called for greater respect for human rights in Azerbaijan. Armenia: Defense Ministry warns against involving army in political processes The Ministry’s statement came after a video surfaced online, showing soldiers joining the protests in Tavush. Scholz hopes Armenia-Azerbaijan peace treaty will be signed this year German Chancellor Olaf Scholz hopes that a peace treaty between Armenia and Azerbaijan will be signed this year. |