[ NNSquad ] Skype for iPhone makes stealing address books a snap

[Lauren Weinstein <lauren@vortex.com>]

Skype for iPhone makes stealing address books a snap

http://j.mp/mSd6xU  (Register)

    "If you use Skype on an iPhone or iPod touch, Phil Purviance can steal
     your device's address book simply by sending you a chat message.  In a
     video posted over the weekend, the security researcher makes the
     attack look like child's play. Type some JavaScript commands into the
     user name of a Skype account, use it to send a chat message to someone
     using the latest version of Skype on an iPhone or iPod touch, and load
     a small program onto a webserver. Within minutes, you'll have a
     fully-searchable copy of the victim's address book."

 - - -

--Lauren--
Lauren Weinstein (lauren@vortex.com): http://www.vortex.com/lauren 
Co-Founder: People For Internet Responsibility: http://www.pfir.org 
Founder:
 - Network Neutrality Squad: http://www.nnsquad.org 
 - Global Coalition for Transparent Internet Performance: http://www.gctip.org
 - PRIVACY Forum: http://www.vortex.com 
Member: ACM Committee on Computers and Public Policy
Blog: http://lauren.vortex.com 
Google+: http://vortex.com/g+lauren 
Twitter: https://twitter.com/laurenweinstein 
Tel: +1 (818) 225-2800 / Skype: vortex.com