Security flaw on iSkoot: discovered and solved over the weekend

Posted on 28 April 2008

If you're new here, you may want to subscribe to my RSS feed. Thanks for visiting!

The blogsphere jumps in again when it comes to help companies to do a better job with their products. Here is today’s story. Dameon aka “hacker” Phoneboy discovered that iSkoot, the popular mobile client for Skype, was using port 80 and http to send, without any encryption, users’ private Skype data, including userid and password.

After a couple of emails back and forth with us bloggers and with iSkoot’s CEO, who immediately took care of the issue, the problem seems to be solved now. Praises to Dameon for pointing this issue out, to the blogosphere to quickly react and to iSkoot to promptly look into it and solve it immediately.

More perspectives to the story herehere, here and here.

In conclusion, another win of the blogosphere which prevented millions of Skype’s credentials to be potentially stolen, sooner or later (even if, to be honest, wouldn’t have been so easy anyway).

 

Technorati Tags: , , , ,

This post was written by:

Luca Filigheddu - who has written 1879 posts on LucaFiligheddu.com.


Contact the author

0 Comments For This Post

1 Trackbacks For This Post

  1. The PhoneBoy Blog says:

    links from TechnoratiRecent CommentsSecurity flaw on iSkoot: discovered and solved over the weekend | LucaFiligheddu.comon iSkoot Transmits Your Data In The CleariSkoot and passwords in the clear — Alec Saunders SquawkBox on Proof of iSkoot Passing Credentials In The CleariSkoot and passwords in the clear — Alec Saunders SquawkBox

Leave a Reply