Skype Plugs Android App Privacy Hole 45
alphadogg writes "Less than a week after confirming that a flaw in Skype for Android could leak sensitive user information, the Internet calling company issued an urgent update to fix the problem. Skype informed customers that 'After a period of developing and testing we have released a new version of the Skype for Android application onto the Android Market, containing a fix to the vulnerability reported to us. Please update to this version [1.0.0.983] as soon as possible in order to help protect your information.' Skype says it has had no reported examples of third-party apps misusing information from the Skype directory on Android devices, though is keeping an eye on things."
Re: (Score:1)
A, B, B. did you write the Skype code?
Re: (Score:3)
doesn't sound like the standard version to me
on my android, skype didn't come preinstalled, so i can install/remove it as i wish, and i can certainly make voip calls over my wifi.
sounds like you're talking about some cut down version your provider gave you, go complain with them, not skype.
Re: (Score:1)
I suspect your parent post has not even done the most basic of research. After all. , while most telcos are happy to preload apps that eat up your bandwidth, preloading an app that diverts revenue away from regular timed phone calls would just be silly.
But I too have no problem using Skype over my WiFi connection, and I have never had a problem with upgrading it (which requires an uninstall of the previous version).
Re: (Score:2)
I can remove it any time I want.
Makes calls over both 3g and wifi
Security issues fixed.
So Wrong on all three counts, plus you haven't learned your alphabet.
If you want some real criticisms, you might have noted that Skype for Android is a memory hog, and a bit of
a battery hog as well.
Video support (Score:2)
Would it kill them to release video support for Android phones, like they did for iphone/itouch devices a while back?
Re: (Score:1)
Would it kill them to allow the app to be shut down without restarting the phone? It SUCKS battery life so it's nice to be able to jump in and out as needed.
Re:Video support (Score:4, Informative)
Re: (Score:1)
Thanks for the tip.
Re: (Score:1)
One of the dozens of task manager applications that allow processes to be abruptly killed, offering them no opportunity to gracefully shut-down and write any cached changes to persistent storage, thereby potentially risking the integrity/completeness of your data?
Thanks for the tip.
Re: (Score:1)
Yes, I have a set. They're just great.
Thanks for the tip.
Re: (Score:2)
Or, here's an idea and I know this is crazy but, you could download one of the dozens of task manager applications and terminate the program manually. Calm down! Calm down! Yes, it's a radical idea that almost no one would ever think of, but it just might work, you fucking idiot.
Those task managers terminate the process but often they're started right up again. Android permits applications to contain services which are long-running background processes. Services can be sticky so they survive the activity dying. They can also be restarted by broadcast receivers which are woken by system events and if you kill the process the service is running in, Android may start it right up again.
Some task managers have auto kill lists but then this interferes with the times when you DO want to
Re: (Score:2)
While true for some essential apps, your comment is not germane to Skype. Once killed, it stays killed.
Other than that, I agree with you, get rid of offending apps.
But be sure they are REALLY offending.
Skype goes dormant when you log out of skype (not the easiest option to find in the Android version).
It will drop all data connections when you do this.
But it still leaves about 29meg in memory.
That too will be paged out as memory need demands. So it really does not need to be killed, you just need to log o
Re: (Score:2)
Re: (Score:2)
Sign out, then you can 'back' out of the app without it running in the background.
If you log out, the process is like every other android process, it goes to sleep and will be paged out as memory demand requires.
It no longer hold any connections open. But there should still be an option to completely quit.
Logging out is not obvious, (see status setting tab).
The app is a huge memory hog. I couldn't even install it till the version that allowed installation to the MicroSD card (app2SD).
I only use it for international calls to a small group of people, because it is just too resource inten
Re: (Score:2)
Would it kill them to release video support for Android phones, like they did for iphone/itouch devices a while back?
I think they have already released video support for android on the HTC thunderbolt - but only if you are using the verizon network.
Bastards must have signed some sort of exclusivity agreement.
Of course that leaves those of us who live anywhere else in the world pretty much screwed.
Re: (Score:2)
Ironic, as Skype refuse to refund fraud (Score:5, Interesting)
My Skype account was recently emptied. Only five euros, thankfully.
I emailed Skype and said there had been fraudulent calls and if they'd refund me.
Skype replied, to the effect that they do not refund losses and fraud is due to customer error (I kid you not).
I pointed out *I* had told *them* it was fraud. You don't, especially when customers money has gone missing, assume what the customer has told you is exactly and completely the problem, and inform him you don't do refunds!
The calls made were kinda strange, there were many calls, a lot of which were zero length in duration. That didn't quite look like plain fraud. Maybe there's a bug in their billing system, or even their calling system.
Basically Skype said it was fraud, because I told them it was, and they told me it was my fault, because they said it was.
I looked on the web, found similar stories - including ones where people had auto-recharge on, and their bank accounts had taken losses too - it wasn't just their Skype account was emptied.
The problem is that Skype is pre-paid. They benefit financially from fraud.
So here we see Skype jumping through hoops to close a customer data loss bug - but steadfastly refusing to refund customer losses from mysterious calls, without a care about the cause, and so without a care about the responsibility.
Re: (Score:1)
Re: (Score:1)
Mmm. I'm reminded of the Paypal fiasco [somethingawful.com] where somethingawful used paypal for a Katrina fundraiser and Paypal was severe fuckwards by both shutting down the paypal account (LOTS OF MONEY POURING IN, MUST BE A SCAM. NOPE NOT LISTENING TO YOUR CALLS) then when he attempts to just refund everyone, foreign currency had to take "conversion fees" despite, you know, only existing as data.
Fuck the corporations.
Re: (Score:1)
Unfortunately, no. I before this incident had looked for an alternative - I already had some issues with Skype. I found nothing - no other company seems to offer PC to landline calls, with the exception of Google Talk, which is mainland USA only. If they come to Europe, I'll try them instantly.
Android app still has many problems (Score:1)
They should also fix the weird bugs that make your device unusable when calling, screen keeps popping black because of accelerometers. Also audio disappears from subsequent calls when a call was dropped to due network issues.
Re: (Score:3)
"Proprietary", "enslaves", "guise of" - yeah right. How about taking a your medicine first?
First of all, FOSS is not a guarantee of absolute security. It can be better provided there are enough eyeballs on the problem, and people capable of coding their way around it, but it is NOT a guarantee.
Secondly, you're welcome to Ekiga. I also need to call landlines which it doesn't support, but I have Skype on Windows (which I may use once a month), on OSX (which I use all the time), on Linux, in handsets, on an
Not that version (Score:1)
The Android Market is offering 1.6.0.13 this morning.
SMS (Score:1)
How about releasing the SMS sending feature onto their android version as well.
I mean I can use it from the Skype PC application, why isn't it on the mobile as well?
Or is this because phone companies don't want Skype to touch their SMS profits?
What about "Skype mobile on Verizon" ? (Score:1)