Skip to main content

UBER IOS APP CAN VIRTUALLY ‘SEE’ YOUR PHONE SCREEN, AND APPLE APPROVED IT


WHY IT MATTERS TO YOUPermissions inside the Uber app sound like a privacy nightmare, but have never been abused, and will soon be removed.
To better prepare its Apple Watch app, Uber used technology enabling it to view and record what was happening on an iPhone's screen, even when the Uber app was only running in the background. The permission to do this was granted by Apple, and although Uber claims not to use the system anymore, it remains part of the app. The news comes from Sudo Security Group, which unearthed the capability — called an Entitlement — in the Uber app.
While this sounds like a security and privacy nightmare, the entitlement doesn't work like a screen-recording app, according to an app researcher speaking to Gizmodo, and will be removed from the app soon. What it does is visualize colors and pixels on the screen, not precise details. However, the concern is this data could be decoded and interpreted to reveal sensitive personal information, user habits, or, should Uber's app be hacked by criminals, passwords and other login information.
What makes this unusual is that Uber is the only third-party app developer using it. Other entitlements are commonly used by app developers, as they provide access to key phone features, such as the camera and Apple Pay. They operate in a similar way to permissions on Android. The entitlement used by Uber here is considered reserved for Apple's use only, due to its privacy and security concerns. Using entitlements without Apple's approval would normally result in the developer being banned from the App Store.
The entitlement was used by Uber to assist the Apple Watch Series One render maps correctly. Apple partnered with Uber to show how the app would operate on the Apple Watch during its March 2015 event. Apparently, developers had four months to prepare Apple Watch apps before the launch, which may explain why Apple granted Uber use of the entitlement at the time, to ensure it was stage-ready on the day.
Uber says the entitlement has not been used since then, and it has never tracked any unauthorized access or use of it. However, Uber's reputation regarding privacy has been tarnished before, and although it says it will remove the entitlement, it's unclear why it hasn't done so before now, given the potential for abuse.

Source:here

via Blogger http://ift.tt/2xX6okH

Comments

Popular posts from this blog

AlpineQuest GPS Hiking 2.0.4

AlpineQuest GPS Hiking Android   AlpineQuest is the complete solution for all outdoor activities and sports, including hiking, running, trailing, hunting, sailing, geocaching, off-road navigation and much more. You can access and store locally a large range of on-line topographic maps, which will remain available even while being out of cell coverage. AlpineQuest also supports on-board file based maps, like MemoryMap(c) maps. By using the GPS and the magnetic sensor of your device (with compass display), getting lost is part of the past: you are localized in real-time on the map, which can also be oriented to match where you are looking at. Save and retrieve landmarks, share them with your friends. Track your path, get advanced statistics and interactive graphics. You won't have anymore questions about what you can accomplish. By staying fully operational out of cell coverage (as often in mountain or abroad), AlpineQuest assists you in all your desires of deep wild...

Trends 2023 Smartphone

  It's difficult to predict exactly what new trends will emerge in the smartphone industry in 2023, but some potential developments include: Foldable smartphones: These devices feature flexible screens that can be folded in half, allowing for a larger display in a more compact form factor. 5G capabilities: As the 5G network becomes more widely available, we can expect to see more smartphones with built-in support for the faster speeds and lower latency of this new network. Increased emphasis on AI: Artificial intelligence is becoming an increasingly important feature in smartphones, from virtual assistants like Siri and Alexa to improved camera capabilities and more. Improved battery life: As smartphones become more powerful, battery life is an important consideration. Expect to see more smartphones that can last all day on a single charge. Advanced camera features: Smartphone cameras are already quite good, but we can expect to see even more advanced features in the future, such a...

OnePlus teases “the future of Dash Charge” to be unveiled tomorrow

Yes, we know that April Fools Day is nearing, but we don't think this is one of those tricks. OnePlus took to Twitter earlier today to tell everyone to "Meet the future of Dash Charge tomorrow". Meet the future of Dash Charge tomorrow. http://pic.twitter.com/Jqwm3arQe9 — OnePlus (@oneplus) March 30, 2017 For the unaware, Dash Charge was created by Oppo (OnePlus' parent company) and allows owners of OnePlus devices to charge at ridiculous speeds. For example, the OnePlus 3T can be recharged from 0 to 56% in just 30 minutes and can be fully charged in 1.5 hours. Considering that the OnePlus Dash Car Charger has been out of stock until recently, we are led to believe that the company has something new up its sleeves. Hopefully, they won't have to release another version of the OnePlus 3T in order for it to work. Maybe, just maybe, we'll be seeing an all-new portable charger or something cool like that. I'll be keeping my fingers crossed....