Skype for Android Vulnerability: Take Care When Installing Apps
What the problem was
The vulnerability showed that Android is not immune to attacks. Skype for Android kept profile details and chat history without encryption, which left that data open to a third-party app.
What Skype said
Skype confirmed it was working on a fix. It also took the chance to remind people to use due diligence when choosing apps. Its advice covered installing apps from any source, not only the official store, and it came down to a few habits:
- Be careful about which apps you pick.
- Read the comments left by other users.
- Check what an app has access to, then decide whether the risk is acceptable.
The fix
An update was added to the post later stating that a Skype for Android security upgrade was now available in the Android Market. Anyone running the affected version was expected to update.
Status today
This issue dates from the Android Market era. The store is now called Google Play, and the app permission advice still applies.
Frequently asked questions
What data was exposed?
Profile information and chat history were stored without encryption.
Was the problem fixed?
Yes. A security upgrade was released through the Android Market.
What was the general advice?
Check comments and requested permissions before installing any app, whatever its source.