Home > News content

Northeastern University: the risk of mobile phone APP leaks, screenshots and even screenshots

via:博客园     time:2018/7/5 13:34:46     readed:171


In vivo NEX's camera call and recording permission cues have recently triggered people's response to mobile phone software.

According to the Android Authority, researchers from the University of Northeastern Massachusetts reported

The first thing to point out is that the study did not find the sensitive evidence of a mobile phone application that secretly recorded user conversations, but the experts found a more likely thing to be afraid of, and APP could not require authorization to secretly send a mobile phone screenshot or even a phone screen to a remote suit. Service.

Video recording and screenshots have been integrated in many mobile phones, even carefully optimized. Compared to recording, it seems to be more easily leaked in user accounts, passwords, communication circles, and so on.

The method of this test is to use computer to simulate human interaction to monitor the connected multi - platform mobile phone. During the period, more than 17000 applications were run, and the application was GoPuff.

GoPuff is a service in the United States

After the revelation, Appsee stressed that GoPuff violated their privacy protection treaty, including the Play store treaty. GoPuff also responded urgently, revising the privacy clause and removing the Appsee SDK in Android/iOS APP.

However, after carefully testing the Northeastern University, the media pointed out that its testing methods are simple and not rigorous. The team's judgment on recording behavior depends only on the intercepting analysis of the data flow (the test machine is placed in a quiet closet), rather than whether there are any specific results after a conversation of a conversation, so there is a lot of space for optimization.

China IT News APP

Download China IT News APP

Please rate this news

The average score will be displayed after you score.

Post comment

Do not see clearly? Click for a new code.

User comments