Skip to main content

Identity Theft Vulnerability Affects All iPhones, Not Just Jailbroken Ones

iPhone Facebook appsA report surfaced recently about a vulnerability in Facebook that allowed people to access someone else's account. The report initially stated that this vulnerability only affected people on a jailbroken iPhone, however, that doesn't seem to be the case anymore as two new reports are stating that it isn't only jailbroken phones that are at risk.

Gareth Wright, an app developer from the U.K., along with The Next Web have each confirmed, separately, that this new vulnerability affects any and all iPhones, not just jailbroken ones. In addition to that, it has been discovered that the vulnerability originated in Facebook's iPhone app.

Wright released his report earlier in the week and claimed that the iPhone Facebook app includes a vulnerability that fails to encrypt log-on credentials whenever you get on Facebook on your iPhone via the app. Wright also said that he also discovered a Facebook access token in the Draw Something game. Wright copied the token, used the Facebook Query Language and extracted the information.

According to Wright's report, "Sure enough, I could pull back pretty much any information from my Facebook account." Wright also mentioned that the property list of the app contained any and all information needed to allow someone other than you to access your Facebook account, send private messages and do anything else imaginable.

However, Facebook is sticking by their claim that the vulnerability only affects jailbroken phones. In a statement from the social media giant, the company said, "Facebook's iOS and Android applications are only intended for use with the manufacture provided operating system, and access tokens are only vulnerable if they have modified their mobile OS (i.e. jailbroken iOS or modded Android) or have granted a malicious actor access to the physical device."

That may have been believable had The Next Web not released their very own report separate from Wright's. The Next Web confirmed themselves that the vulnerability also affects non-jailbroken phones. However, The Next Web also found that Dropbox also suffers from the same vulnerability, leaving the application open to a property list hack.

According to The Next Web, "We copied the .plist from one device, with the app installed and logged in, over to another which had a fresh installation of Dropbox on it. The profile copied and it worked seamlessly, as if we had logged on ourselves, which we had not." The Next Web also added that the Dropbox vulnerability works on phones that are passcode protected.

Facebook keeps saying that the vulnerability is only on jailbroken phones, though with the reports from Wright and The Next Web, I don't know how much longer the social media company can keep that story going.

Source: CNET - facebook ID theft impacts all iPhones, Dropbox
Power Point Projectors
Most business class projectors will do a good job displaying your PowerPoint presentation. If you have a small presentation group, a 2000 lumen LCD projector will be able to produce a nice and clear picture. For larger audiences you should consider a 5000 lumen LCD projector.

Comments

Popular posts from this blog

Precious Things My Kid Says and My Usually Unspoken Retorts

I never get to do anything I want except face painting and carnivals Kids say the darnedest things!  Good thing they sleep for 12 hours a day or the cuteness would overwhelm me and I would have to shoot myself. Here are some tender words my preschooler serenades me with in her melodious little voice. 1- I'm not yours.  I'm Daddy's! Answer: Then go ask him to wipe you. 2- Why are you wearing that? Answer: Because I lost my fashion sense when I pushed you out of my uterus. 3- Why did you do that with your face? Answer: Because I am exerting all my willpower not to throw you out of this moving car. 4- The other mothers tell the teachers what they did on the weekend.  Why don't you? Answer: Preschool pickup sucks enough without trying to add meaningless small talk to the mix. 5- I am the only one who doesn't go to Disney. Answer: And I am the only mother with a brain. 6- Why can't we have a playdate with Madison? Answer: I hate Madison's mommy because she is too...

Annapolis Smokehouse, a Restaurant That Won't Kick Out My Kids and The Food is Great Too!

I am starting a new blog section called Restaurant Reviews: Places That Won't Kick Out My Kids. I do not get paid or get free food for my review, although there is always a first time.  If you would like to be featured in this space, think long and hard first because this is who is coming: Keep in mind you can't hear the noise in this picture Anyway,  Annapolis Smokehouse  is located at 107 Hillsmere Drive in Annapolis which doesn't matter until I tell you it is across the street from Quiet Waters Park, aka the park with the awesome playground.  Any restaurant located near a park is a good bet for families with small kids, because then you can threaten them with not going to the playground if they don't behave.   Ambience: Annapolis Smokehouse gave my kids crayons and activity placemats and allowed us to sit outside as we requested, so as not to disturb any people who went to dinner thinking they would be able to converse like human beings.  Remember those...

Life Before and After Kids, or Something Not to Read if You Were Having a Good Day

Oh those salad days (literally in that you had time to order and eat a salad) when you were married without children!  As nobody says aloud, childlessness is wasted on the childless.  Here are a few distinctions between those with kids and without, in various domains of daily life. Special Occasions:  Before Kids:  Prior to children, a three day surprise trip to a beach was a good anniversary present. Possibly add some thoughtful little gift into the mix like a treasured book, CD, or even a piece of jewelry.  As you slowly ate a delicious dinner at an amazing restaurant you found through meticulous online research, you gazed into each other's eyes.  Passionate love making followed. After Kids:   You would like your husband, for once, to be the one to text the sitter so that you can go out for two hours, including the drive, to a restaurant you don't even like but is near to the house.  Of course he doesn't have the sitter's number (despite your n...