• Welcome to the all-new Windows Central Forums! - We're still moving some things around, so you may see a few quirks here and there, but we're working on getting things fully completed as soon as possible. For now, take a look around, and if you run into any major issues, please let us know in this thread!

Windows Phone Store permissions flaw patched by Microsoft, allowed apps to access photos

WindowsCentral.com

Staff member
Dec 17, 2013
68,523
0
0
Security_Flaw_Images.jpg

The Windows Phone Store received a bug fix recently, closing a hole that allowed developers to publish applications that can access a user?s photo library without their permission. The quirk was originally brought to our attention by developer Al Gihuni, who makes the popular Sound Cloud app SoundClone for Windows Phone (don't worry, that app is safe).
Gihuni demonstrated this quirk for us by submitting a test app to the Store ? *seen in this article's images ?**that required three capabilities: access to your photo library, phone identity, and owner identity. After passing through Microsoft?s certification processes, we opened up the Store app and navigated to the app listing. The listing only indicated the app needed phone and owner identity access, with no mention of access to the photo library.

Full story from the WPCentral blog...
 

Ask The Community

Members online

Forum statistics

Threads
315,752
Messages
2,238,386
Members
427,208
Latest member
linlu