Downed Clueful app reveals encryption woes

Powered by SC Magazine
 

Clueful app finds 41 per cent of apps able to access user location.

Bitdefender's Clueful security app pulled last month from the Apple App Store has found 41 per cent of iOS applications are able to access a user's location and a third store unencrypted data.

A study of more than 65,000 applications on the Apple App Store revealed tens of thousands tap contact information and access data without explicit user permission. The research also found that 18 per cent of the apps can access a user's address book.

The research was derived from analysis of the company's Clueful app, which was taken down by Apple from its App Store on 30 June. The app determined what information applications had sought and compiled its database from user-submitted apps.

Bitdefender chief security researcher Catalin Cosoi said while many apps use these privileges to function, others have no obvious use for the data they may be collecting.

"It is worrying that stored data encryption on iOS apps is low and location tracking is so prevalent," he said.

"Without notification of what an app accesses, it is difficult to control what information users give up. We see a worrying landscape of poor user data encryption, prevalent location tracking and silent unjustified address book access."

Apple did not say why the app was taken down and gagged Bitdefender under a non-disclosure agreement from doing the same, Security Week reported.

BitDefender's Clueful analysis service was still active for users and the security vendor was working on getting the application back online.

SC has found duplicates of the app mirrored online which can be installed on jailbroken Apple devices, however the security of those files cannot be verified and users are warned they could be laced with malicious code.

- With Darren Pauli

Copyright © SC Magazine, Australia


Downed Clueful app reveals encryption woes
 
 
 
Top Stories
Meet FABACUS, Westpac's first computer
GE225 operators celebrate gold anniversary.
 
NSW Govt gets ready to throw out the floppy disks
[Opinion] Dominic Perrottet says its time for government to catch up.
 
iiNet facing new copyright battle with Hollywood
Fighting to protect customer details.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest articles on BIT Latest Articles from BIT
Do you direct debit customers? Read this
Oct 10, 2014
Authorities have been targeting direct debit practices with iiNet and Dodo receiving formal ...
Optus expands 4G coverage
Oct 10, 2014
If you rely on an Optus phone for work you might be interested to know that there are now 200 ...
Microsoft Office is now free for some charities
Oct 10, 2014
Microsoft has announced that eligible Australian non-profit organisations and charities can now ...
Vodafone lights up 4G in Adelaide
Oct 9, 2014
Live and work in Adelaide? Vodafone has switched on its 4G network in the city and suburbs.
Next year tradies will be able to take payments using ingogo
Oct 3, 2014
Ingogo is going to provide a card payment service for Xero users.
Latest Comments
Polls
In which area is your IT shop hiring the most staff?




   |   View results
IT security and risk
  26%
 
Sourcing and strategy
  12%
 
IT infrastructure (servers, storage, networking)
  22%
 
End user computing (desktops, mobiles, apps)
  15%
 
Software development
  25%
TOTAL VOTES: 346

Vote
Would your InfoSec team be prepared to share threat data with the Australian Government?

   |   View results
Yes
  58%
 
No
  42%
TOTAL VOTES: 144

Vote