exploits

Snapchat issues a response to recent security concerns

Snapchat has released a statement regarding the recent findings that their service can be used to attach phone numbers to names, leading to identification of users. While Snapchat had been aware of the issue since August, the group who found the exploit wasn’t pleased with their lack of focus on the security issue. On December 31st, 2013, they released redacted numbers attached to usernames to the web, as well as their methodology for acquiring them, forcing the hand of Snapchat.

Snapchat code exploit published after being ignored

Snapchat, which prides itself for its privacy and security features, might have just become completely insecure. Researchers have now published undocumented API and code to two exploits that not only opens up the service to spam but also gives malicious individuals access to users' profiles and phone numbers.

Skype takes action, removes vulnerabilities

If you're following the scoreboard, last week we reported that Skype for Android had a vulnerability which allowed a third party to harvest a user's data without their consent. Skype replied that they were taking action, but didn't tell us what it was. Now we know. Skype has solved the issue for now by removing the ability of a hacker to do so. And there's more ...

Flash Exploit can nail early versions of Android

Adobe has announced a critical vulnerability in Flash Player 10.2.153.1 and earlier versions which may, and we do underscore MAY, affect early versions of the Android OS. The vulnerability causes a crash and could also allow a savvy attacker to take control of affected systems. It is usually triggered by an infect .swf file embedded into a Microsoft Word document delivered as an email attachment. Now, granted, this is going to be rare for the Android platform but Adobe felt it important enough to mention that early versions of the Bot OS may be affected.

Google Nabs more Exploits from the MarketPlace

The latest battle in the war against malicious apps is joined as Google has reported via it's mobile blog that a number of new Android Apps repackaged with malware have been removed. In addition to wiping the apps from the Marketplace, Google is in the process of removing the malicious applications via remote from affected handsets. They've also banned the suspect publishers and are calling in the long arm of the law. According to Google, the malicious applications are taking advantage of a known vulnerability in Android versions 2.1 and below, so users with handsets running Android 2.2 (Froyo) and above aren't affected.

Root Your HTC Desire

Yesterday Modaco promised to release the instructions to root your HTC Desire. Well, today is the big day. If you’re ready to root your Desire and unleash its full potential, follow the instructions after the break.