Mobile apps sharing usernames, passwords, credit card details with third parties: Study

Agencies
July 8, 2018

Washington, Jul 8: Some popular smartphone apps may be secretly taking screenshots of your activity and sending them to third parties, a study has found. This is particularly disturbing because these screenshots - and videos of your activity on the screen - could include usernames, passwords, credit card numbers, and other important personal information, researchers said.

"We found that thousands of popular apps have the ability to record your screen and anything you type," said David Choffnes, a professor at Northeastern University in the US.

"That includes your username and password, because it can record the characters you type before they turn into those little black dots," said Choffnes.

The study was designed to investigate a persistent urban legend that phones are secretly recording our conversations and then selling that information to companies so they can pepper you with targeted advertisements.

While the researchers found no evidence of recorded conversations, they discovered activity that could be even more dangerous.

"We knew we were looking for a needle in a haystack, and we were surprised to find several needles," said Choffnes.

What they found is that some companies were sending screenshots and videos of user phone activities to third parties. Although these privacy breaches appeared to be benign, they emphasised how easily a phone's privacy window could be exploited for profit.

"This opening will almost certainly be used for malicious purposes," said Christo Wilson, a professor at Northeastern.

"It's simple to install and collect this information. And what's most disturbing is that this occurs with no notification to or permission by users," said Wilson.

"In the case we caught, the information sent to a third party was zip codes, but it could just as easily have been credit card numbers," he said.

The researchers analysed over 17,000 of the most popular apps on the Android operating system, using an automated test programme written by the students.

Although the study was conducted on Android phones, researchers said there is no reason to believe that other phone operating systems would be less vulnerable.

In all, 9,000 of the 17,000 apps had the potential to take screenshots.

"In one case, the app took video of the screen activity and sent that information to a third party," said Wilson.

That app was GoPuff, a fast-food delivery service, which sent the screenshots to Appsee, a data analytics firm for mobile devices. All this was done without the awareness of app users.

Researchers emphasised that neither company appeared to have any nefarious intent. They said that web developers commonly use this type of information to debug their apps and improve the user experience.

However, that does not mean a malicious company could not use this privacy window to steal personal information for profit.

"That has the potential to be much worse than having the camera taking pictures of the ceiling or the microphone recording pointless conversations. There is no easy way to close this privacy opening," said Choffnes.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
June 15,2020

Sitamarhi, Jun 15: Eyewitness accounts from locals in Bihar's Sitamarhi district recount the brutality and intimidation by Nepal's security personnel who on June 12 had resorted to unprovoked firing on a group of people at the international border, which left one Indian dead and two others injured.

"18-20 shots were fired for over one hour and everyone is in shock even now," said Nitish Kumar, a resident of Jankinagar recalling the incident that took place early on Friday morning.

Nepal's Armed Police Force (APF) opened fire at the Lalbandi-Jankinagar border in which three men - Vikesh Yadav, Umesh Ram and Uday Thakur - suffered gunshot injuries. Vikash Yadav succumbed to his injuries on Friday itself.

Another person Lagan Kishore, who was at the border with his family to meet his daughter-in-law, a Nepali national and her family, said he was detained by the APF personnel who dragged him to the other side of the border.

Lagan Kishore said that the Nepali personnel abused and hit him with rifle butts and even abused his son and later resorted to firing.

Several residents of Jankinagar, who spoke to media, termed the incident as "unfortunate and shocking".

Nitish Kumar recalled: "A family was here to meet their in-laws (Nepali nationals). The daughter-in-law was talking to her family while her husband and her father-in-law sat a little distance away. Suddenly I saw Nepali personnel abusing her husband who complained about it to his father. All of a sudden the Nepali forces started thrashing them and then opened fire. They also took the father into custody."

"We were all shocked. I could hear about 18-20 gunshots fired over a period of one hour," Kumar said.

Another local, Ajit Kumar, said he was perplexed with the behaviour of the Nepali Police.

"There used to be no problems earlier. We don't understand what happened to the Nepal Police that day. The firing is unfortunate. If this continues, how will people in the border area live?" he questioned.

Ajit Kumar stated that such an incident has taken place for the first time. "People from here go to work in fields in Nepal and their people come to work in our fields. Such a thing has happened for the first time. About 80 per cent of our people are married to Nepalis," he said.

Many people who live in the adjoining districts of Bihar, which shares over 600 kilometres of border with Nepal, have relatives on either side of the border.

Meanwhile, Nepali police have claimed that Lagan Kishore, who was taken into custody following the firing by APF and handed over to Indian Security Forces at no man's land on June 13, was detained for trying to snatch a weapon from one of their personnel during an altercation.

However, both Kishore and his family have denied the claims and said he was "dragged" across the border and was beaten.

Kishore said that during the firing he had rushed towards the Indian side but Nepalese personnel hit him with rifle butt and took him to Nepal's Sangrampur. He was also asked to confess that he was taken into custody from the Nepali side.

"We ran to return to India when they started firing, but they dragged me from the Indian side, hit me with a rifle butt and took me to Nepal's Sangrampur. They told me to confess that I was brought there from Nepal. I told them you can kill me but I was brought there from India," said Kishore.

Kishore's son also said that Nepali personnel started abusing them and hit him and his father.

Speaking to ANI, Kishore's son said, "We went to meet my brother-in-law. Security personnel started abusing me but I could not understand their language. However, my brother's wife asked them to not abuse. After that, they came to the Indian side and hit me. I told my father about the incident and he confronted them."

"They started beating him and called fellow personnel who started firing and dragged my father from the Indian side, hit him with a rifle butt and took him to Nepal''s Sangrampur," he said.

Relations have become strained between India and Nepal after the latter released a map showing parts of Indian Territory-Lipulekh, Kalapani and Limpiyadhura as its own.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
March 5,2020

New Delhi, Mar 5: The primary classes of all schools in the national capital will remain closed till March 31 to prevent a possibility of spread of coronavirus, Deputy Chief Minister Manish Sisodia announced on Thursday.

According to Directorate of Education (DoE) officials, while elaborate guidelines have been issued about preventive measures for coronavirus, students of nursery and primary classes are too young to understand the risk, making them more prone to infectious diseases.

Sisodia, who also holds the education portfolio, tweeted, "As a precautionary measure to prevent the possibility of spread of COVID-19 amongst our children, Delhi Government has directed the immediate closure of all primary schools (Govt/ aided/ private/MCD/NDMC) till 31/3/20(sic)."

A senior DoE official said, "Elaborate guidelines have already been issued. However, students of nursery and primary classes are too young to understand the risks associated with COVID-19. Thus they are more prone to infectious diseases and mingle around with classmates more often."

"It will be good if they are trained in the do's and dont's under the care and supervision of their parents at home. However, students of classes other than primary will continue to come to schools or examination centres for writing their examination as per schedule. The teaching, as well as non-teaching staff, will also attend regular school," the official said.

As of now, the number of confirmed COVID-19 cases in the country stands at 30, including 16 Italian tourists. The figure includes the first three cases reported from Kerala last month who have already been discharged following recovery.

Alerted by the coronavirus case reported in Delhi-NCR, schools in the region have sent out advisories to parents suggesting that they do not send their wards to attend classes even in case of mild cough or cold, and saying that they may declare holidays if the need arises. A few schools have announced already holidays and others have advanced their spring break.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
Agencies
June 23,2020

Islamabad, Jun 23: Seven more Pakistan cricketers, including Muhammad Hafeez and Wahab Riaz, selected for the tour of England have tested positive for COVID-19, taking the total to 10, the PCB revealed on Tuesday.

The seven who tested positive on Tuesday are Kashif Bhatti, Muhammad Hasnain, Fakhar Zaman, Muhammad Rizwan, Imran Khan, Hafeez and Riaz. Shadab Khan, Haider Ali and Haris Rauf had returned positive tests on Monday.

“It is not a great situation to be in and what it shows is these are 10 fit and young athletes...if it can happen to players it can happen to anyone,” Pakistan Cricket Board (PCB) CEO, Wasim Khan told a media conference.

He said a support staff member, masseur Malang Ali, had also tested positive for COVID-19.

Khan said that the players and officials would now assemble in Lahore and another round of tests would be carried out on June 25 and a revised squad would be announced the next day.

The squad has to leave on June 28 for the series scheduled to be held next month, he said.

“It is a matter of concern but we shouldn’t panic at this time as we have time on our hands,” Khan said.

He said the players and officials would be retested on reaching England.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.