Skip to main content

UBER IOS APP CAN VIRTUALLY ‘SEE’ YOUR PHONE SCREEN, AND APPLE APPROVED IT


WHY IT MATTERS TO YOUPermissions inside the Uber app sound like a privacy nightmare, but have never been abused, and will soon be removed.
To better prepare its Apple Watch app, Uber used technology enabling it to view and record what was happening on an iPhone's screen, even when the Uber app was only running in the background. The permission to do this was granted by Apple, and although Uber claims not to use the system anymore, it remains part of the app. The news comes from Sudo Security Group, which unearthed the capability — called an Entitlement — in the Uber app.
While this sounds like a security and privacy nightmare, the entitlement doesn't work like a screen-recording app, according to an app researcher speaking to Gizmodo, and will be removed from the app soon. What it does is visualize colors and pixels on the screen, not precise details. However, the concern is this data could be decoded and interpreted to reveal sensitive personal information, user habits, or, should Uber's app be hacked by criminals, passwords and other login information.
What makes this unusual is that Uber is the only third-party app developer using it. Other entitlements are commonly used by app developers, as they provide access to key phone features, such as the camera and Apple Pay. They operate in a similar way to permissions on Android. The entitlement used by Uber here is considered reserved for Apple's use only, due to its privacy and security concerns. Using entitlements without Apple's approval would normally result in the developer being banned from the App Store.
The entitlement was used by Uber to assist the Apple Watch Series One render maps correctly. Apple partnered with Uber to show how the app would operate on the Apple Watch during its March 2015 event. Apparently, developers had four months to prepare Apple Watch apps before the launch, which may explain why Apple granted Uber use of the entitlement at the time, to ensure it was stage-ready on the day.
Uber says the entitlement has not been used since then, and it has never tracked any unauthorized access or use of it. However, Uber's reputation regarding privacy has been tarnished before, and although it says it will remove the entitlement, it's unclear why it hasn't done so before now, given the potential for abuse.

Source:here

via Blogger http://ift.tt/2xX6okH

Comments

Post a Comment

Popular posts from this blog

AlpineQuest GPS Hiking 2.0.4

AlpineQuest GPS Hiking Android   AlpineQuest is the complete solution for all outdoor activities and sports, including hiking, running, trailing, hunting, sailing, geocaching, off-road navigation and much more. You can access and store locally a large range of on-line topographic maps, which will remain available even while being out of cell coverage. AlpineQuest also supports on-board file based maps, like MemoryMap(c) maps. By using the GPS and the magnetic sensor of your device (with compass display), getting lost is part of the past: you are localized in real-time on the map, which can also be oriented to match where you are looking at. Save and retrieve landmarks, share them with your friends. Track your path, get advanced statistics and interactive graphics. You won't have anymore questions about what you can accomplish. By staying fully operational out of cell coverage (as often in mountain or abroad), AlpineQuest assists you in all your desires of deep wild...
Post a Comment
Read more

Official Xposed Framework for Android Nougat is Here

As the Android ecosystem has matured over the years, fewer and fewer users find reasons why they should root their device. There's a growing trend of users choosing to stay on the stock firmware, either because they find the experience satisfactory or don't want to play a  cat-and-mouse game with Google's SafetyNet API . But if you asked a user back in early 2016 why they rooted their phones, perhaps the number one reason that was given was so they could  install the Xposed Framework . It's been  over a year since Android 7.0 Nougat  was first released, but the long wait is finally over:  official Xposed Framework for Android Nougat is finally available. Throughout the past year, XDA Senior Recognized Developer  rovo89 , the lead developer of the Xposed Framework, has provided  several   updates  on the progress of Xposed Framework for Android Nougat. For some, the  wait has been tolerable  mostly due to the sheer number of additional functionality that the Xpos...
Post a Comment
Read more

How well does the LG G6 perform in a durability torture test? [VIDEO]

The LG G6 is the first LG flagship in years to feature a nearly all-glass build (remember the LG Optimus G?). There's only a very thin sheet of glass covering the back of the LG G6 and because of this, you may be wondering about the phone's durability. Since you would never want to test something like this on your own device, Zack from JerryRigEverything is back again without another one of his famous torture tests. He basically puts the LG G6 through hell, scratching and abusing the phone with a variety of tools before he gets to the real reason we're all here: the bend test. Surprisingly enough, the LG G6 passes with flying colors, providing no catastrophic failures or even much bending at all using with Zack using the full force of his hands. It's a testament to how far LG has come, showing that they're perfectly capable of manufacturing phones with solid build quality. For more on the LG G6, don't forget to check out our unboxing and ...
Post a Comment
Read more