Identity Theft Vulnerability Affects All iPhones, Not Just Jailbroken Ones

A report surfaced recently about a vulnerability in Facebook that allowed people to access someone else's account. The report initially stated that this vulnerability only affected people on a jailbroken iPhone, however, that doesn't seem to be the case anymore as two new reports are stating that it isn't only jailbroken phones that are at risk.

Gareth Wright, an app developer from the U.K., along with The Next Web have each confirmed, separately, that this new vulnerability affects any and all iPhones, not just jailbroken ones. In addition to that, it has been discovered that the vulnerability originated in Facebook's iPhone app.

Wright released his report earlier in the week and claimed that the iPhone Facebook app includes a vulnerability that fails to encrypt log-on credentials whenever you get on Facebook on your iPhone via the app. Wright also said that he also discovered a Facebook access token in the Draw Something game. Wright copied the token, used the Facebook Query Language and extracted the information.

According to Wright's report, "Sure enough, I could pull back pretty much any information from my Facebook account." Wright also mentioned that the property list of the app contained any and all information needed to allow someone other than you to access your Facebook account, send private messages and do anything else imaginable.

However, Facebook is sticking by their claim that the vulnerability only affects jailbroken phones. In a statement from the social media giant, the company said, "Facebook's iOS and Android applications are only intended for use with the manufacture provided operating system, and access tokens are only vulnerable if they have modified their mobile OS (i.e. jailbroken iOS or modded Android) or have granted a malicious actor access to the physical device."

That may have been believable had The Next Web not released their very own report separate from Wright's. The Next Web confirmed themselves that the vulnerability also affects non-jailbroken phones. However, The Next Web also found that Dropbox also suffers from the same vulnerability, leaving the application open to a property list hack.

According to The Next Web, "We copied the .plist from one device, with the app installed and logged in, over to another which had a fresh installation of Dropbox on it. The profile copied and it worked seamlessly, as if we had logged on ourselves, which we had not." The Next Web also added that the Dropbox vulnerability works on phones that are passcode protected.

Facebook keeps saying that the vulnerability is only on jailbroken phones, though with the reports from Wright and The Next Web, I don't know how much longer the social media company can keep that story going.

Source: CNET - facebook ID theft impacts all iPhones, Dropbox

Power Point Projectors
Most business class projectors will do a good job displaying your PowerPoint presentation. If you have a small presentation group, a 2000 lumen LCD projector will be able to produce a nice and clear picture. For larger audiences you should consider a 5000 lumen LCD projector.

READ MORE » Identity Theft Vulnerability Affects All iPhones, Not Just Jailbroken Ones

Just what is Dropbox?

For those of you who don't know, Dropbox is a simple online virtual storage utility that allows you to make your files accessible from almost anywhere. Designed for those who are tired of e-mailing files to themselves and carrying around flash drives, Dropbox looks to revolutionize the way you store and share files.

Here's how it works. After installation and connecting to the server, the Dropbox interface is just like any folder on your computer. You simply drag and drop to move files around and any files or folders that are uploaded to Dropbox will immediately be synchronized within your account. In addition Dropbox also keeps track of every single change made to the contents of your storage and any changes are instantly updated to all computers linked to the account.

What happens if I'm not on any of my computers? Absolutely no need to worry. Just get on the Dropbox web interface and you will be able to access your files from anywhere in the world. The Dropbox web interface also remembers all the changes you make to your files and allows you to restore to any previous versions of the file. You can even un-delete files that you may have accidentally erased.

Where Dropbox really shines is the way it allows you to share whatever you want with other people. Every individual folder can be shared with other people and every member of a shared folder will be able to add, edit, and delete the contents inside but will not be able to access anything outside of that specific folder. This file sharing system is perfect for team projects involving music or video editing, computer and system repairs, or for anything which needs collaboration among its members. There is also a public folder that allows you to share files with non-Dropbox users through the use of a hyperlink.

If you are looking for an easy and reliable way to share files amongst friends, family, and coworkers then take a look at what Dropbox has to offer. Dropbox is free for Windows, Mac, and Linux and you can have share 2 GB of your files for free or upgrade to Dropbox Pro for 50GB of storage.

READ MORE » Just what is Dropbox?