Friday, November 19, 2010

Yet Another Hot Startup Leaves A Gaping Security Hole In Its iPhone App

It's no secret that most people are remarkably lax when it comes to online security. They'll reuse the same password everywhere, and will connect to open Wi-Fi hotspots without a second thought as to who might be sniffing their traffic (Firesheep, anyone?). Which makes it all the more frustrating when startups launch their products without industry-standard security features that help keep consumers a little safer.

The most recent offender is Instagram, the hot photo sharing app that managed to get hundreds of thousands of users in a matter of weeks. Unfortunately the app sends its passwords in plaintext, and it's doubly bad because it also asks for your Tumblr and Foursquare credentials, which are also sent in the clear.

Microsoft Land Software Virgin Media Technitrol Varian Semiconductor Equipment Associates

No comments:

Post a Comment