Skype for Android has a major security flaw

By Adam Rosenberg April 15, 2011

It was only a week ago that an Internet security firm peeked into Pandora‘s mobile app and determined that the company is sharing “mass quantities” of user info with ad agencies. Now Skype is being held under a microscope, particularly the company’s Android mobile app, and it seems that your stored personal data isn’t as safe as you’d probably like it to be.

After discovering that a leaked beta version of the VoIP app was vulnerable to an exploit that offers access to all user data, Android Police tried the same tactic with the widely used Skype for Android, available since October 2010, and saw the same results. The site notes that the Skype Mobile for Verizon app appears to be unaffected, only Skype for Android.

The technical details get a little complicated, but essentially, Skype stores all user data in a folder bearing that user’s name. The database files contained within that folder have incorrect permissions (simply, who/what can access them, and how), and furthermore, they aren’t encrypted. What all of this means is that these files, which contains everything from contacts and profile information to message logs, can be both accessed and read by anyone with minimal trouble.

The issue extends a bit deeper than that as well. If the issue were confined to just what is detailed above, potential intruders would have to have the user’s Skype name. Still not terribly secure, but certainly more manageable. Unfortunately, there is also a way to tease out this information as well. Android Police notes that the big danger here is of a rogue developer releasing a tweaked version of the app — think back to the recent malware debacle on Android Market — that pulls out and transmits private user information.

The post concludes with some suggestions to Skype as to how this could be fixed. A later update reveals that the company “is investigating this issue.”

Editors' Recommendations

Topics

Former Digital Trends Contributor

Previously, Adam worked in the games press as a freelance writer and critic for a range of outlets, including Digital Trends…

Mobile

iPhone phone calls sound muffled? Here’s how to quickly fix them

Although the iPhone has always done a reasonably good job of filtering out basic background noise when you're on a call, Apple has unlocked a new feature in iOS 16.4 that takes this to a whole new level through the power of machine learning.

Traditional noise cancellation is handy for cutting out routine background noise, such as the hum of traffic on city streets or your air conditioner, but it doesn't do so well when it comes to less predictable noises — like dogs barking, children playing, or infants crying. Filtering those types of sounds out is much more important these days now that more folks are working from home, and — thankfully — that's exactly what Apple's Voice Isolation feature is for.

Mobile

We have the Vivo X90 Pro, one of 2023’s most interesting Android phones

The Vivo X90 Pro held in a person's hand.

The Vivo X90 Pro has arrived, in preparation for our review. If you're not familiar with Vivo, it's part of the same tech empire as OnePlus, Realme, and Oppo — but it's not as closely related as those three are in terms of software, design, and partnerships. It's Vivo's partnership with Zeiss, in addition to a wider global launch for the X90 Pro, that has us intrigued.

Vivo and Zeiss have worked together on smartphone cameras since 2020, with the Vivo X60 Pro and X60 Pro Plus the first devices to come from the partnership. According to Zeiss, the pair work together not on just one component or software feature, but across the entire imaging experience, with the intention of assuring quality throughout. Zeiss doesn’t make cameras, but rather optics for cameras, so it’s different from partnerships like OnePlus and Hasselblad’s, where the focus is software.

Mobile

5 things the iPhone has to change in 2023 before I ditch Android

iPhone 14 Pro with a black always-on screen.

The iPhone’s operating system is many things, but perfect is not one of them. It’s been two years since I shifted to using an iPhone as my primary device, but I still use an Android as my secondary smartphone. And if I weren’t invested in the Apple ecosystem, I would have ditched my iPhone a long time ago.

I have been hoping desperately for iOS to get better at some things Android has been doing for years. For instance, I love scrolling through Twitter while watching a music video on YouTube. I can do this simultaneously on an Android thanks to multiwindow support, but iOS only offers picture-in-picture at best.