Eek! Android WhatsApp database can be stolen and shared by other apps
The Android version of WhatsApp, the cross-platform messaging tool recently snapped up for $19 billion by Facebook, contains a security flaw that means its chat database could be accessed by any app and uploaded to a web server without user knowledge or intervention. It's not clear whether this vulnerability has yet been exploited, but a proof-of-concept attack by Bas Bosschert (consultant, sysadmin and entrepreneur) shows that it is not only possible, but also incredibly simple. To cut to the chase, the answer to the question posed by Bas' brother, "is it possible to upload and read the WhatsApp chats from another Android application?", is "yes, that is possible".
In order for an "attack" to be successful, a user must have granted the app access to the SD card. As Bas points out, "since [a] majority of the people allow everything on their Android device, this is not much of a problem" for an attacker to overcome. Assuming this setting has been enabled, there really is very little work to be done. With a webserver at hand, it is very easy to create an app that seeks out WhatsApp's database and uploads it ready for perusal.
Mozilla and Epic show-off Unreal Engine 4 running in Firefox
As the world trends toward Google's Chrome, it is easy to forget about trusty old Firefox. After all, Google's browser has more features and is arguably faster. However, while Google Chrome is based on the open-source Chromium project, it is not fully open-source. Conversely, Firefox remains open and well maintained. It is reliable and trustworthy.
However, Firefox shouldn't just be relegated to the role of stagnation -- quite the contrary. Mozilla is still pushing along and improving the speed and experience. To drive that message home, today it is revealed that the Unreal Engine 4 is running in Firefox without plugins. Wow.
Most Commented Stories
Today in Tech History
Opera Developer 21 updated, promises improved start-up times
Opera has updated the alpha version of its web browser with the release of Opera Developer 21.0.1432.5 for Windows and Mac. The new build fixes a few regressions, plus implements new tab-related tweaks to improve start-up times.
Version 21.0 opens with a number of important fixes, restoring Adblock to full working order and promising an end to the "Harlem Shake" when hovering over tabs on the Mac platform. It also fixes a number of unspecified crashes.
Corero's SmartWall Threat Defense System helps defeat DDoS attacks [Q&A]
Any Internet related provider, whether it be a Telecom Carrier, Internet, Multi-Service or Cloud Provider (ISP/MSP/CSP) or Hosting/Co-Lo Provider are unwilling accomplices to DDoS attacks and other cyber threats that transit, terminate or originate on their networks. Service providers and their customers are inseparably linked by the challenges DDoS attacks present.
As attacks have grown in size, frequency and sophistication in recent years the demands to ensure service availability and service security from customers have risen in unison. Corero has responded to this challenge with the launch of the SmartWall Threat Defense System (TDS). I spoke to Ashley Stephenson, CEO, Corero Network Security, about the new product.
If Amazon releases a Kindle set-top box I am all in
I've certainly made no secret of my love for the Kindle product line -- I called the Kindle Fire HDX 7 the best product of 2013 after it replaced my 2012 HD model. I am also on record as being an Amazon Prime subscriber, primarily for the video service, and an Android user to boot. It all adds up nicely, but I am rehashing things you likely already know.
Recent rumors have been popping up around the internet, as these things tend to do, that Amazon will release its own set-top box. While that is unconfirmed -- though The Verge is already reporting a March release -- it is also logical. The company has a thriving streaming service that competes with Netflix, but there is more to it than just that.
Point.io takes enterprise applications mobile
We looked a few weeks ago at how Point.io is simplifying accessing corporate data from cloud platforms.
Now the company has launched APIflow, a product that allows businesses to externalize core processes and make them available remotely from anywhere and on any device. APIflow means that cloud providers, application developers and IT departments can easily integrate with existing applications, simplify software design and significantly reduce their development and maintenance costs.
Forced to use Windows XP past April? 10 ways to make the best of a bad situation
I've been pressing my day to day clients, as well as informed readers here on BetaNews, on the case for ditching Windows XP altogether. I'm guessing by now that chances are, if you're still running XP at this point, you're probably going to stick it out on the platform for the indefinite short term. I've already written about the best ways to safely migrate off XP without losing functionality in the workplace, but if you absolutely have no choice but to keep riding the sinking ship for now, here's hoping at least you are going to be smart about how you do so.
No, your PC is not going to explode, implode, or just stop working come the April cutoff date Microsoft has set. In fact, your system is probably going to continue humming away as usual. But it's what you can't see that will hurt you the most, and that's what XP holdouts are forgetting: the bad guys are arming themselves to the teeth with exploits, just waiting for April 8 to come and go.
Antivirus -- myths and evolution
Antivirus products have steadily evolved over the years but a number of obsolete myths still persist.
For example, many people still believe that AV software can detect only what it knows, uses only static signatures and offers little or no protection. A new report from NSS Labs looks at the history of antivirus software and how it has, and continues to, evolve to meet new threats. It concludes that whilst endpoint protection is still essential it has evolved beyond simple antivirus programs.
The democratization of app building has created a new paradigm
It wasn’t that long ago that web-savvy marketers were touting the advances in technology that allowed anyone to build a website, publish a blog, or embark on a social media campaign. The advent of mobile platforms has rendered all of those tools passé. We are now a mobile society and the proliferation of smartphones and tablets has given rise to a new paradigm in digital marketing: the mobile app.
With the rapid global penetration of smartphones and tablets and the increased data speed of 4G networks, mobile applications are riding a wave of explosive growth. Leading companies are focusing on the development and distribution of dynamic mobile apps, reaching consumers and potential consumers on the one device that is never far from reach. What about small businesses?
A digital bill of rights is essential to the future of democracy
If there was ever anyone more qualified to talk about the web than Tim Berners-Lee, I would like to meet them. The man responsible for inventing the World Wide Web (a heavy burden for anyone to carry, I'm sure) joins us today in celebrating the 25th anniversary of the web.
But the big news isn't that Berners-Lee has been able to watch his baby grow up, go through a difficult teenage stage and flourish into adulthood, bringing us up to the quarter century the web has been with us. The real news is the inventor of the web calling for a "digital bill of rights".
PBS wants you to get off the couch and take your kids outside
Perhaps many of us spend more time in front of screens than we should, between TV and computer monitors, even smaller ones like smartphones and tablets. While these things have become a major force in today's society, they simply are not all of what life is about. And now PBSKids, ironically a TV network, is telling you enough is enough.
The Public Broadcasting Service (PBS) has teamed up with the National Recreation and Park Association (NRPA) in an effort to get you and your kids outside, at least for the month of April. This is the "Explore the Outdoors" campaign, and it's not the first year the two have come together for this.
View, edit and batch process your photos with Photoimp
If you’ve tried a few free photo managers then you’ll know that the vast majority are, well, disappointing. Most have absolutely no original ideas. And some don’t even match up to the basic functionality you get with Explorer, all on its own.
We didn’t expect very much from the image viewer Photoimp, then -- but it turned out to be a real surprise.
Fiverr launches new Android app
If you have a talent -- be it singing, computer programming, or crafting -- you can make a little extra cash from it by advertising your service on Fiverr. As the name of the site suggests, most offers are priced at $5, although top-rated sellers can offer single orders upwards of $8,000. Examples of available services include recording voiceovers, providing SEO reports on websites, offering business and legal advice, and creating illustrations. I’ve used the service in the past with great results.
Fiverr already has an iOS app available, and now the marketplace is rolling out a free Android app too.
Simpler and more powerful web UI testing from Ravello
Web user interface testing needs a lot of time and resources if it's to produce worthwhile results.
Manual testing eats into developer time and even using established testing frameworks like Selenium requires significant computing resource. Cloud specialist Ravello Systems has introduced blueprints for Selenium Grid to its SaaS test offering to bring cloud capacity to bear on automated testing. It allows developers to run their applications on a public cloud and offers a scalable, customizable and cost-effective testing environment.
Google adds new monetization options for Chrome apps, extensions, and themes
Google has announced new monetization options for Chrome Web Store apps, extensions, and themes, giving developers a better chance of generating decent revenue from their offerings. The search giant has also introduced new tools and services that are meant to make it easier to automate the publishing process.
The new available monetization options depend on the type of Chrome software. In the case of themes, developers can only list them as paid. Meanwhile, extensions can also get a free trial, subscription and in-app payments. On top of upfront payments and subscriptions, packaged apps now offer a free trial and in-app payments, in the latest change to the Chrome Web Store.