Exploits & Vulnerabilities
Heard of "Path"? Your Contacts in the Cloud
Some smartphone apps could be covertly taking your business contacts to the cloud. We recently wrote about oblivious data loss and what seems to be the wild west of application development in this cloud security article.
Some smartphone apps could be covertly taking your business contacts to the cloud? We recently wrote about oblivious data loss and what seems to be the wild west of application development in this cloud security article.
"There are several security and privacy risks here, of course, not least the implications of BYOD smartphones in the enterprise with data hungry apps downloaded on them inadvertently exposing the confidential details of colleagues, clients and business partners.
At the moment apps don’t distinguish between groups when asking user permission to access the iOS address book, but even if they did, users may accidentally save a new business contact in their personal instead of corporate contacts group, and then allow an app access to the former, again resulting in oblivious data loss."
Apple says that it will work to better protect iOS users from this kind of unknown data loss. However it is a reminder that data security cannot be assumed or trusted from any single point.
Tags