News for hackers. Stuff that matters.

A comment on The UDID leak is a privacy catastrophe. Parent comment

Re:The UDID leak is a privacy catastrophe by cortesi on Tuesday September 04, 2012 @07:10AM (#4474039)
I found vulnerabilities in two social gaming networks that let you take control of people's Facebook and Twitter accounts using _just_ the UDID. I never published the details of these vulnerabilities, but you can find an official acknowledgement from at least one of these companies (Chillingo of Angry Birds fame) in this WSJ piece:

http://blogs.wsj.com/digits/2011/09/19/privacy-risk-found-on...

[ Parent | on HN ]
Re:The UDID leak is a privacy catastrophe by samfoo on Tuesday September 04, 2012 @08:38AM (#4474255)
By "Take control of..." you mean "act with the permissions of the app", I assume? I can't see how Angry Birds the app would ever have full control over my Facebook account unless there's a catastrophic vuln. in the Facebook API.
[ Parent | on HN ]
Re:The UDID leak is a privacy catastrophe by TylerE on Tuesday September 04, 2012 @09:16AM (#4474391)
Angry Birds was made by Rovio, not Chillingo.

Chillingo is a publisher of 3rd rate knockoffs.

[ Parent | on HN ]
Re:The UDID leak is a privacy catastrophe by cortesi on Tuesday September 04, 2012 @09:29AM (#4474434)
Chillingo is the publisher of the original Angry Birds, and it's their social network (which is integrated with Angry Birds and therefore on millions of devices) that had the vulnerability.
[ Parent | on HN ]