[tahanteada]

Jäi silma üks nädalavanune uudis, ehk kasutab keegi Viberit ning on sellest infost ka kasu.
Viber Security Vulnerabilities: Do not use Viber until these issues are resolved
Vulnerability/Bug: Images, Doodles, Location and Videos sent over Viber is unencrypted

Introduction

We recently discovered a serious security flaw in the way Viber receives Images, Doodles, Video files as well as the way it sends or receives location data. We also see potential issues in the way Viber stores data in an unencrypted format on their servers with no authentication mechanism for them to be retrieved from a client.

The main issue is that the above-mentioned data is unencrypted, leaving it open for interception through either a Rogue AP, or any man-in-the middle attacks. In the spirit of keeping the world a safer place, we felt that it is best to send this bug/vulnerability to the Viber team first, and then publishing our work. We notified Viber, but we have failed to receive a response from them. It is important to let the people know of these vulnerabilities, therefore, we chose to publish these results and the video in this post.

Finally, we would like to add that our team really values Viber as an application and we think it’s a great communication tool, and we hope that these vulnerabilities will be fixed in Viber's next release.

Edasi jutt lingil:
http://www.unhcfreg.com/#!Viber-Security-Vulnerabilities-Do-not-use-Viber-until-these-issues-are-resolved/c5rt/BB4208CF-7F0A-4DE1-92A4-529425549683