Skype admits to iPhone app security problem, releasing a fix "soon"
Skype has stated they are aware of a serious cross-site scripting vulnerability within the chat feature for Skype on the iPhone. The security hole could allow for malicious JavaScript code to access to your address book and is known to affect versions 3.0.1 and below.
Skype reached out to TechCrunch to say they're hard at work on getting an update pushed to the App Store.
We are working hard to fix this reported issue in our next planned release which we hope to roll out imminently. In the meantime we always recommend people exercise caution in only accepting friend requests from people they know and practice common sense internet security as always.
The funny thing is, Skype has known about the issue for a while now. AppSec Consulting security researcher Phil Purviance helped discover the problem and let Skype know about it almost a month ago. Skype responded saying they would release an update earlier this month, but we're nearing the end of September and there's no update to be found.
Here's hoping Skype gets on this quick and pushes out an update soon, but in the meantime check out the video below detailing how the vulnerability works.
Andrew Wray is a Salt Lake City, Utah based writer who focuses on news, how-tos, and jailbreak. Andrew also enjoys running, spending time with his daughter, and jamming out on his guitar. He works in a management position for Unisys Technical Services, a subsidiary of Unisys Corporation.
| Tweet |
|
|
Leave a Reply
Note: Comments must be civil, respectful, and on-topic. If a comment does not add to the conversation, if it contains spam advertising, or inappropriate language or content, it will be removed. Insulting the topic, author, staff, site, network, or other commenters will result in the comment being marked as spam and potential prevent future comments from appearing on the site. Do not post as a business or your comment will likely be confused with spam. Comments containing links may be held for moderation. Relax, enjoy, and share in the discussion.
The "chat" section of the skype app gives me a headache
If i have to IM someone on skype I use IM+
If I have to IM someone on Skype, that defeats the purpose of Skype...
Still can't believe it I just got a $827.89 iPad2 for only $103.37 and my mom got a $1499.99 HTV for only $251.92, they are both coming with USPS tomorrow. I would be an idiot to ever pay full retail prîces at places like Walmart or Bestbuy. I sold a 37" HTV to my boss for $600 that I only paid $78.24 for. I use http://jmb.tw/52bf
New iPhones Coming In October : Al Gore Accidentally Confirms http://j.mp/qws6cO