English | Italian

"Researchers slurp unencrypted..." (Theme) The lastest total: 100+. you can read with page flip.

close
show list
related videos
Easily Recover Viber Calls & Messages from iPhone 6+/6/5S/5C/5/4S/4/3GS
How to Recover Viber Contacts from iPhone from/without iTunes, iCloud Backup
C3TEK DEMO Viber data summary
Viber Security Vulnerabilities: Images, Doodles, Location and Videos sent over Viber is unencrypted
G Data Internet Security for Android
Matrix Data Solution India
Continue »
Pop theme

Joko Widodo,Ebola vaccine,Bharatiya Janata Party,Oscar Pistorius,Rick Scott,Dilma Rousseff,Peyton Manning,Jeffrey Fowle,Gough Whitlam,Cloud

Related theme

same team,new haven,research whatsapp,location

Researchers slurp unencrypted Viber messaging data with ease


data viber received

2014-04-24 05:26:48

Combat fraud and increase customer satisfaction

Popular Whatsapp-like messaging service Viber is exposing users to man-in-the-middle and other attacks because it isn’t encrypting various data at rest and in transit, security researchers have warned.

The mobile app allows users to send each other messages, videos, images and “doodles”, share GPS location details and make voice calls.

However, researchers at the University of New Haven Cyber Forensics Research and Education Group (UNHcFREG) found a “serious security flaw” in the way Viber receives videos, images and doodle files; the way it sends and receives location data; and the way it stores data on its Amazon servers.

The team’s experimental network created a rogue access point utilising a Windows 7 PC’s Virtual Wi-Fi Miniport Adapter and a first smartphone connected to the same network.

It then connected a second smartphone outside the network via GSM and used it to exchange data with the first smartphone over Viber.

It said that with tools such as NetworkMiner, Wireshark, and NetWitness it was able to capture traffic sent over the test network.

Specifically, the team claimed that images, doodles and videos received are unencrypted; location data sent and received is unencrypted; and data is stored on the Viber Amazon servers in unencrypted format.

Further, it said user data stored on Viber's Amazon servers is not deleted immediately and that it can be easily accessed without any authentication mechanism – “simply visiting the intercepted link on a web browser gives us complete access to the data”.

The researchers added the following:

Anyone, including the service providers will be able to collect this information – and anyone that sets up a rogue AP, or any man-in-the middle attacks such as ARP poisoning will be able to capture this unencrypted traffic and view the images and videos received as well as the locations being sent or received by a phone.

UNHcFREG said it had already informed Viber of the security flaws but received no word back at the time of publishing. A video of the test (h/t The Hacker News) can be found here.

It recommended Viber ensure all data in transit is sent over an encrypted tunnel, that data is encrypted properly when saved and that it access to it must require authentication.

The Israeli-backed messaging service, based in Cyprus, was recently acquired for $900 million by Japanese e-commerce giant Rakuten in a bid to take the firm “to a different level”.

For the record, the same team of New Haven uni testers last week published research claiming a bug in Whatsapp's "location sending" feature. ®

SANS - Survey on application security programs

View Original Article: theregister.co.uk
Disclaimer statement: The point of this article or rights belongs to the authors and publishers. We take no responsibility for the content of this article and legitimacy.
Do you have any questions about this article, please contact the news source theregister.co.uk.
Or contact us

Share

Write an article relevant this topic share on facebook share on twitter share on google plus share on oknews share on linkedin share on digg share on reddit share on newsvine share on pinterest share on netlog share on tumblr share on delicious send email print add to favorite

"Researchers slurp unencrypted..." IN THE COMMUNITY!

Facebook
    Twitter

      PHOTO

        No results related
      Share one Sentence

      Manage my submission

      [{"b":"b","i":"1265885","t":"Group Gifting Experience GiftStarter Announces Partnership with Beauty Brand, butter London®","a":1},{"b":"b","i":"1265857","t":"Auckland Airport's duty free retailers told to drop the hard sell - Yahoo Finance New Zealand","a":2},{"b":"b","i":"1265861","t":"Newly-private BMC gets cloud\/social\/mainframe (!) religion","a":3},{"b":"a","i":"1327302","t":"Mega Book Sale has it all","a":4},{"b":"a","i":"1327283","t":"Superstring theorist at University of Florida wins 2015 Heineman Prize","a":5},{"b":"b","i":"1265806","t":"BJP has a majority, should fulfill commitment to Ayodhya: VHP","a":6},{"b":"a","i":"1327250","t":"EU to discuss Turkish incursion into Cypriot exclusion zone","a":7},{"b":"b","i":"1265787","t":"GCX launches cloud ecosystem","a":8},{"b":"b","i":"1265749","t":"Lucent Group Gets Green Light for Lincolnshire Lakes Development","a":9},{"b":"b","i":"1265757","t":"8.1 Million U.S. Residential Properties Seriously Underwater in Third Quarter, Lowest Level in Two Years","a":10},{"b":"a","i":"1327228","t":"World leaders offer condolences, support | Toronto Star","a":11},{"b":"a","i":"1327231","t":"Bay State on alert after Canada capital shooting","a":12},{"b":"b","i":"1265723","t":"X-Rite Pantone to Bring Color Perfection to Fall Plastics Trade Show","a":13},{"b":"a","i":"1327219","t":"Plymouth Spring Co. named state manufacturer for Oct.","a":14},{"b":"a","i":"1327202","t":"8.1 Million U.S. Residential Properties Seriously Underwater in Third Quarter, Lowest Level in Two Years - Yahoo Finance UK","a":15},{"b":"b","i":"1265705","t":"China Swap Rate Gains for Third Day as Flash PMI Beats Estimates","a":16},{"b":"b","i":"1265658","t":"AASTOCKS Financial News - Latest News","a":17},{"b":"f","i":"1153687","t":"Quotes and video: Seahawks cornerback Richard Sherman","a":18},{"b":"b","i":"1265644","t":"ALS patient finds help at UT health clinic","a":19},{"b":"c","i":"1879965","t":"Poll: GOP's Gardner Surges in Colorado Senate Race","a":20},{"b":"b","i":"1265575","t":"News\n Local","a":21},{"b":"b","i":"1265585","t":"Add comment","a":22},{"b":"b","i":"1265537","t":"Bruins' Chara: Senators, city can help each other in healing process","a":23},{"b":"b","i":"1265543","t":"Four Star General In The Falls","a":24},{"b":"b","i":"1265557","t":"Forget the $2499 5K iMac \u2013 today we reveal Apple's most expensive computer to date","a":25},{"b":"a","i":"1327057","t":"Alice Gross funeral to take place","a":26},{"b":"b","i":"1265563","t":"Recreation District to review its 2015 budget","a":27},{"b":"b","i":"1265525","t":"Santa Cruz job fair attracts crowd","a":28},{"b":"c","i":"1879929","t":"CICC\u2019s Chairman Jin Liqun Resigns, Replaced by Ding","a":29},{"b":"a","i":"1327027","t":"Plymouth Spring Co. named state manufacturer for Oct.","a":30},{"b":"a","i":"1327034","t":"Fracking Companies Using Toxic Benzene in Drilling: Group","a":31},{"b":"a","i":"1326996","t":"U.S. to monitor some travelers for 21 days","a":32},{"b":"a","i":"1326998","t":"Top10BestSEOHosting.com Releases The Best PHP Hosting Suppliers In October","a":33},{"b":"c","i":"1879908","t":"NFL Commissioner Must Testify in Ray Rice Appeal, USA Today Says","a":34},{"b":"f","i":"1153636","t":"Thursday, October 23","a":35},{"b":"a","i":"1326983","t":"Wheelchair basketball coaching legend Tim Frick becomes first Paralympic coach to be inducted into Canada's Sports Hall of Fame","a":36},{"b":"e","i":"528227","t":"Congress Will Scramble To Pass Crucial Defense Legislation After Midterm Elections","a":37},{"b":"b","i":"1265466","t":"WHITEHEAD: Hollow justice and courts of order in an age of government-sanctioned tyranny","a":38},{"b":"b","i":"1265468","t":"Canadian PM condemns 'despicable attacks'","a":39},{"b":"b","i":"1265475","t":"Machinists Union Completes Organizing Hat Trick in Texas","a":40},{"b":"a","i":"1326961","t":"Las Vegas Weekly, VEGAS INC websites are finalists in EPPY Awards","a":41},{"b":"a","i":"1326963","t":"School board candidate stresses parental involvement","a":42},{"b":"e","i":"528221","t":"When Taylor Swift's 'Out of the Woods' meets 'Circle of Life,' everything makes sense","a":43},{"b":"b","i":"1265440","t":"Rosewood Beijing Opens Today - Yahoo Finance Canada","a":44},{"b":"b","i":"1265422","t":"Are Children Getting More Access to Porn Now? A NoBullying Article Released Today","a":45},{"b":"b","i":"1265424","t":"POLL: Michigan voters appear ready to vote across party lines, split tickets on Election Day","a":46},{"b":"d","i":"954289","t":"Libya's national army moves towards retaking Benghazi","a":47},{"b":"d","i":"954265","t":"Tlokwe election case postponed","a":48},{"b":"d","i":"954276","t":"MPs express security concerns after gunfire on Parliament Hill","a":49},{"b":"d","i":"954281","t":"Malala Yousafzai's honorary Canadian citizenship ceremony cancelled: PMO","a":50},{"b":"b","i":"1265400","t":"A bleak future and population crisis for South Korea\nAdd to ...","a":51},{"b":"f","i":"1153648","t":"Quotes from Seattle Seahawks coach Pete Carroll","a":52},{"b":"a","i":"1326888","t":"ZAKOUR | Tanking Teams: It Just Feels Wrong","a":53},{"b":"b","i":"1265351","t":"Suspect in shooting death appears in court, motive still unclear","a":54},{"b":"b","i":"1265325","t":"Man dies after freak hose accident","a":55},{"b":"a","i":"1326840","t":"Tail end of Hurricane Gonzalo hits Britain as Met Office weather warning extended","a":56},{"b":"e","i":"528204","t":"Harper Says Canada Won\u2019t Be Intimidated By Terror Attack Today","a":57},{"b":"e","i":"528205","t":"Secret Service Arrests Man Who Jumped White House Fence","a":58},{"b":"b","i":"1265314","t":"News Wrap: Former security guards convicted of shooting Iraqis in 2011","a":59},{"b":"d","i":"954198","t":"Chrissy Teigen receives death threats over tweets on Canada shooting","a":60},{"b":"b","i":"1265271","t":"KTVL Top Stories","a":61},{"b":"b","i":"1265278","t":"U.K. May Boost Child-Care Grants to Get Women Working","a":62},{"b":"a","i":"1326800","t":"FOUR WHL CLUBS IN BMO CHL TOP 10 RANKING","a":63},{"b":"d","i":"954170","t":"Women's volleyball program announced for College of Southern Nevada","a":64},{"b":"d","i":"954183","t":"Biden denounces 'cockamamie' Republican values at Vernon Hills rally","a":65},{"b":"d","i":"954133","t":"WEST WINDSOR-PLAINSBORO: Board votes to name field after David Bachner","a":66},{"b":"d","i":"954134","t":"UPDATE: Soldier, gunman die in Ottawa rampage","a":67},{"b":"a","i":"1326787","t":"Halloween fun and frights abundant","a":68},{"b":"a","i":"1326723","t":"\u2018Poker Player\u2019 Putin Bluffed and Won, French Envoy Says","a":69},{"b":"a","i":"1326730","t":"More from SDReader","a":70},{"b":"c","i":"1879760","t":"Goldman Sachs Says Australia Rates-Trading Head Corbett Has Left","a":71},{"b":"a","i":"1326710","t":"New multi-state lottery game launches Sunday","a":72},{"b":"a","i":"1326629","t":"Local man describes struggles of poverty | La Crosse – WKBT News8000.com","a":73},{"b":"a","i":"1326613","t":"Ebola and economic challenges set to dominate EU summit","a":74},{"b":"d","i":"953980","t":"ALSO IN News","a":75},{"b":"c","i":"1879692","t":"WATCH LIVE: Canadian Prime Minister Speaks on Parliament Shootings","a":76},{"b":"d","i":"953941","t":"Sen commission submits report on chit funds","a":77},{"b":"a","i":"1326581","t":"More scrutiny for Japanese maker of defective air bags","a":78},{"b":"c","i":"1879674","t":"Canada Sergeant-at-Arms Lauded for Halting Ottawa Attack","a":79},{"b":"a","i":"1326551","t":"Nederland man involved in crash has died","a":80},{"b":"a","i":"1326552","t":"School bus cameras on a trial run in Karnes County","a":81},{"b":"e","i":"528159","t":"Daily Tech Briefing: Oct. 22, 2014","a":82},{"b":"a","i":"1326526","t":"Riverbed Announces Riverbed FORCE Keynotes and Free Live Virtual Event Nov. 4 on Breakthrough Innovations in Application Visibility and Control for Hybrid Enterprises - Yahoo Finance Canada","a":83},{"b":"a","i":"1326527","t":"Organizacion Cultiba Announces Third Quarter and Nine Months 2014 Financial Results","a":84},{"b":"c","i":"1879659","t":"Think You’ve Never Seen a Miracle? ‘Life-Changing’ Pastor Says ‘Hold on a Minute…’","a":85},{"b":"d","i":"953877","t":"Jinko Power Signs 200 MW PV Project Development Agreement With Government Of Shicheng County In Jiangxi Province","a":86},{"b":"d","i":"953878","t":"Glaxo Considers ViiV IPO to Capitalize on HIV-Drug Sales","a":87},{"b":"a","i":"1326501","t":"Midday Update: NZ dollar drops after inflation falls short of expectations - Yahoo Finance New Zealand","a":88},{"b":"d","i":"953870","t":"Last Delhi Metro at 10pm today, few trains after 8pm","a":89},{"b":"c","i":"1879626","t":"DailyCaller","a":90},{"b":"c","i":"1879628","t":"Family: Amber Vinson free of Ebola virus","a":91},{"b":"d","i":"953855","t":"Pattaya Mail","a":92},{"b":"f","i":"1153530","t":"Need to Know - Wednesday October 22, 2014","a":93},{"b":"d","i":"953833","t":"Twitter Introduces Digits, A Password-Free Sign In Solution For Apps and Websites by @mattsouthern","a":94},{"b":"d","i":"953823","t":"Source: Joe Lauzon forced out of UFC 180 fight with Diego Sanchez","a":95},{"b":"e","i":"528123","t":"Biden: 'I Like Guys Because Of Their Moms'","a":96},{"b":"e","i":"528125","t":"Is Turkey an Ally?","a":97},{"b":"e","i":"528126","t":"Colorado Senate Race Now Leans Republican","a":98},{"b":"c","i":"1879577","t":"Featured Stories","a":99},{"b":"c","i":"1879579","t":"Biogen Idec inc Earnings Were Great. Here's Why the Stock Tumbled Anyway","a":100}]

      100

      Group Gifting Experience GiftStarter Announces Partnership with Beauty Brand, butter London